From b435f9d603c5ba47abf331b4104bfe2dd7dbfd54 Mon Sep 17 00:00:00 2001 From: Vasilis Tsiligiannis Date: Wed, 2 Feb 2011 18:50:50 +0000 Subject: busybox: Disable telnet if an SSH public key for root exists (#8760) SVN-Revision: 25317 --- package/busybox/files/telnet | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) (limited to 'package/busybox') diff --git a/package/busybox/files/telnet b/package/busybox/files/telnet index b882337..a1e1727 100755 --- a/package/busybox/files/telnet +++ b/package/busybox/files/telnet @@ -10,8 +10,14 @@ has_root_pwd() { test -n "${pwd#!}" } +has_ssh_pubkey() { + ( test -x /usr/sbin/dropbear && grep -qs "^ssh-" /etc/dropbear/authorized_keys ) || \ + ( test -x /usr/sbin/sshd && grep -qs "^ssh-" /root/.ssh/authorized_keys ) +} + start() { - if ( ! has_root_pwd /etc/passwd && ! has_root_pwd /etc/shadow ) || \ + if ( ! has_ssh_pubkey && \ + ! has_root_pwd /etc/passwd && ! has_root_pwd /etc/shadow ) || \ ( [ ! -x /usr/sbin/dropbear ] && [ ! -x /usr/sbin/sshd ] ); then telnetd -l /bin/login.sh -- cgit v1.1