summaryrefslogtreecommitdiff
path: root/debian/vyatta-cfg-system.postinst.in
diff options
context:
space:
mode:
authorStephen Hemminger <stephen.hemminger@vyatta.com>2010-01-24 22:15:27 -0800
committerStephen Hemminger <stephen.hemminger@vyatta.com>2010-01-24 22:24:13 -0800
commitec515b52b681cd96bf51626bf899e3177bdbe3f3 (patch)
tree0cc4a8ce494aa1c697f7042c637edf986f1a3622 /debian/vyatta-cfg-system.postinst.in
parent8fc0c2869f77782d344bf0cddf5a2e3d5657761b (diff)
downloadvyatta-cfg-quagga-ec515b52b681cd96bf51626bf899e3177bdbe3f3.tar.gz
vyatta-cfg-quagga-ec515b52b681cd96bf51626bf899e3177bdbe3f3.zip
Fix allow-root for telnet/ssh
Bug 5252 The boot script needs to restore default settings, and the templates are then used to enable root access.
Diffstat (limited to 'debian/vyatta-cfg-system.postinst.in')
-rw-r--r--debian/vyatta-cfg-system.postinst.in2
1 files changed, 2 insertions, 0 deletions
diff --git a/debian/vyatta-cfg-system.postinst.in b/debian/vyatta-cfg-system.postinst.in
index 1e77d69d..f06bfb50 100644
--- a/debian/vyatta-cfg-system.postinst.in
+++ b/debian/vyatta-cfg-system.postinst.in
@@ -45,6 +45,8 @@ if [ "$sysconfdir" != "/etc" ]; then
# enable ssh banner
sed -i 's/^#Banner/Banner/' /etc/ssh/sshd_config
+ # make sure PermitRoot is off
+ sed -i '/^PermitRootLogin/s/yes/no' /etc/ssh/sshd_config
# for "admin" level
sed -i 's/^# %sudo ALL=NOPASSWD: ALL/%sudo ALL=NOPASSWD: ALL/' /etc/sudoers