mirror of
https://github.com/myvesta/vesta.git
synced 2024-09-16 13:00:35 -07:00
89 lines
2.4 KiB
Bash
Executable File
89 lines
2.4 KiB
Bash
Executable File
#!/bin/bash
|
|
# info: delete system sftp jail
|
|
# options: NONE
|
|
#
|
|
# The script disables sftp jailed environment
|
|
|
|
|
|
#----------------------------------------------------------#
|
|
# Variable&Function #
|
|
#----------------------------------------------------------#
|
|
|
|
# Importing system environment as we run this script
|
|
# mostly by cron which do not read it by itself
|
|
source /etc/profile
|
|
|
|
# Includes
|
|
source $VESTA/func/main.sh
|
|
source $VESTA/conf/vesta.conf
|
|
|
|
|
|
#----------------------------------------------------------#
|
|
# Verifications #
|
|
#----------------------------------------------------------#
|
|
|
|
#if [ -z "$SFTPJAIL_KEY" ]; then
|
|
# exit
|
|
#fi
|
|
|
|
|
|
#----------------------------------------------------------#
|
|
# Action #
|
|
#----------------------------------------------------------#
|
|
|
|
# Checking users
|
|
for user in $(grep "$HOMEDIR" /etc/passwd |cut -f 1 -d:); do
|
|
$BIN/v-delete-user-sftp-jail $user
|
|
done
|
|
|
|
# Checking sshd directives
|
|
config='/etc/ssh/sshd_config'
|
|
sftp_n=$(grep -n "Subsystem.*sftp" $config |grep -v internal |grep ":#")
|
|
sftp_i=$(grep -n "Subsystem.*sftp" $config |grep internal |grep -v ":#")
|
|
|
|
# Backing up config
|
|
cp $config $config.bak-$(date +%s)
|
|
|
|
# Enabling normal sftp
|
|
if [ ! -z "$sftp_n" ]; then
|
|
fline=$(echo $sftp_n |cut -f 1 -d :)
|
|
sed -i "${fline}s/#Subsystem/Subsystem sftp/" $config
|
|
restart='yes'
|
|
fi
|
|
|
|
# Disabling jailed sftp
|
|
if [ ! -z "$sftp_i" ]; then
|
|
fline=$(echo $sftp_i |cut -f 1 -d :)
|
|
lline=$((fline + 5))
|
|
sed -i "${fline},${lline}d" $config
|
|
restart='yes'
|
|
fi
|
|
|
|
# Validating opensshd config
|
|
if [ "$restart" = 'yes' ]; then
|
|
subj="OpenSSH restart failed"
|
|
email=$(grep CONTACT $VESTA/data/users/admin/user.conf |cut -f 2 -d \')
|
|
/usr/sbin/sshd -t >/dev/null 2>&1
|
|
if [ "$?" -ne 0 ]; then
|
|
mail_text="OpenSSH can not be restarted. Please check config:
|
|
\n\n$(/usr/sbin/sshd -t)"
|
|
echo -e "$mail_text" |$SENDMAIL -s "$subj" $email
|
|
else
|
|
service ssh restart >/dev/null 2>&1
|
|
service sshd restart >/dev/null 2>&1
|
|
fi
|
|
fi
|
|
|
|
# Deleting v-add-sys-sftp-jail from startup
|
|
sed -i "/v-add-sys-sftp-jail/d" /etc/rc.local 2>/dev/null
|
|
|
|
|
|
#----------------------------------------------------------#
|
|
# Vesta #
|
|
#----------------------------------------------------------#
|
|
|
|
# Logging
|
|
log_event "$OK" "$ARGUMENTS"
|
|
|
|
exit
|