You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
89 lines
2.5 KiB
89 lines
2.5 KiB
2 years ago
|
#!/bin/bash
|
||
|
|
# info: delete system sftp jail
|
||
|
|
# options: NONE
|
||
|
|
#
|
||
|
|
# example: v-delete-sys-sftp-jail
|
||
|
|
#
|
||
|
|
# This function disables sftp jailed environment
|
||
|
|
|
||
|
|
#----------------------------------------------------------#
|
||
|
|
# Variables & Functions #
|
||
|
|
#----------------------------------------------------------#
|
||
|
|
|
||
|
|
# Includes
|
||
|
|
# shellcheck source=/etc/hestiacp/hestia.conf
|
||
|
|
source /etc/hestiacp/hestia.conf
|
||
|
|
# shellcheck source=/usr/local/hestia/func/main.sh
|
||
|
|
source $HESTIA/func/main.sh
|
||
|
|
# load config file
|
||
|
|
source_conf "$HESTIA/conf/hestia.conf"
|
||
|
|
|
||
|
|
#----------------------------------------------------------#
|
||
|
|
# Verifications #
|
||
|
|
#----------------------------------------------------------#
|
||
|
|
|
||
|
|
# Perform verification if read-only mode is enabled
|
||
|
|
check_hestia_demo_mode
|
||
|
|
|
||
|
|
#----------------------------------------------------------#
|
||
|
|
# Action #
|
||
|
|
#----------------------------------------------------------#
|
||
|
|
|
||
|
|
# Checking sshd directives
|
||
|
|
config='/etc/ssh/sshd_config'
|
||
|
|
sftp_n=$(grep -n "Subsystem.*sftp" $config | grep -v internal | grep ":#")
|
||
|
|
sftp_i=$(grep -n "^# Hestia SFTP Chroot" $config)
|
||
|
|
|
||
|
|
date=$("date +%s")
|
||
|
|
# Backing up config
|
||
|
|
cp $config $config.bak-$(date +%s)
|
||
|
|
|
||
|
|
# Enabling normal sftp
|
||
|
|
if [ -n "$sftp_n" ]; then
|
||
|
|
fline=$(echo "$sftp_n" | cut -f 1 -d :)
|
||
|
|
sed -i "${fline}s/#Subsystem/Subsystem sftp/" $config
|
||
|
|
restart='yes'
|
||
|
|
fi
|
||
|
|
|
||
|
|
# Disabling jailed sftp
|
||
|
|
if [ -n "$sftp_i" ]; then
|
||
|
|
fline=$(echo "$sftp_i" | cut -f 1 -d :)
|
||
|
|
lline=$((fline + 5))
|
||
|
|
sed -i "${fline},${lline}d" $config
|
||
|
|
restart='yes'
|
||
|
|
fi
|
||
|
|
|
||
|
|
# Validating opensshd config
|
||
|
|
if [ "$restart" = 'yes' ]; then
|
||
|
|
subj="OpenSSH restart failed"
|
||
|
|
email=$(grep CONTACT $HESTIA/data/users/admin/user.conf | cut -f 2 -d \')
|
||
|
|
/usr/sbin/sshd -t > /dev/null 2>&1
|
||
|
|
if [ "$?" -ne 0 ]; then
|
||
|
|
mail_text="OpenSSH can not be restarted. Please check config:
|
||
|
|
\n\n$(/usr/sbin/sshd -t)"
|
||
|
|
echo -e "$mail_text" | $SENDMAIL -s "$subj" "$email"
|
||
|
|
else
|
||
|
|
service ssh restart > /dev/null 2>&1
|
||
|
|
service sshd restart > /dev/null 2>&1
|
||
|
|
fi
|
||
|
|
fi
|
||
|
|
|
||
|
|
# Remove v-add-sys-sftp-jail to startup
|
||
|
|
if [ ! -e "/etc/cron.d/hestia-sftp" ]; then
|
||
|
|
rm -f /etc/cron.d/hestia-sftp
|
||
|
|
fi
|
||
|
|
|
||
|
|
#----------------------------------------------------------#
|
||
|
|
# Hestia #
|
||
|
|
#----------------------------------------------------------#
|
||
|
|
|
||
|
|
# Restart ssh service
|
||
|
|
service ssh restart > /dev/null 2>&1
|
||
|
|
service sshd restart > /dev/null 2>&1
|
||
|
|
|
||
|
|
# Logging
|
||
|
|
$BIN/v-log-action "system" "Warning" "Plugins" "SFTP Chroot Jail disabled."
|
||
|
|
log_event "$OK" "$ARGUMENTS"
|
||
|
|
|
||
|
|
exit
|