From ce1bf7d220938a47c98719a75b714526927430fd Mon Sep 17 00:00:00 2001 From: ReachableCEO Date: Wed, 2 Jul 2025 18:41:58 -0500 Subject: [PATCH] i think this is right... --- ProjectCode/Modules/Security/secharden-ssh.sh | 11 +++++++---- 1 file changed, 7 insertions(+), 4 deletions(-) diff --git a/ProjectCode/Modules/Security/secharden-ssh.sh b/ProjectCode/Modules/Security/secharden-ssh.sh index e87f128..c6465dd 100644 --- a/ProjectCode/Modules/Security/secharden-ssh.sh +++ b/ProjectCode/Modules/Security/secharden-ssh.sh @@ -23,8 +23,6 @@ LOCALUSER_SSH_DIR="/home/localuser/.ssh" export SUBODEV_SSH_DIR SUBODEV_SSH_DIR="/home/subodev/.ssh" -export NOT_UBUNTU_CHECK -NOT_UBUNTU_CHECK="$(distro | grep -c -v Ubuntu || true)" if [ ! -d $ROOT_SSH_DIR ]; then mkdir /root/.ssh/ @@ -60,7 +58,12 @@ cat ../../ConfigFiles/SSH/Configs/tsys-sshd-config >/etc/ssh/sshd_config #Don't deploy this config to a ubuntu server, it breaks openssh server. Works on kali/debian. -if [ "$NOT_UBUNTU_CHECK" -eq 1 ]; then +set -x + +export UBUNTU_CHECK +UBUNTU_CHECK="$(distro | grep -c Ubuntu)" + +if [ "$UBUNTU_CHECK" -ne 1 ]; then cat ../../ConfigFiles/SSH/Configs/ssh-audit-hardening.conf >/etc/ssh/sshd_config.d/ssh-audit_hardening.conf fi @@ -70,4 +73,4 @@ chmod og-rwx /etc/ssh/sshd_config.d/* #todo -# only strong MAC algos are used +# only strong MAC algos are used \ No newline at end of file