Files
aaPanel/class_v2/safe_warning_v2/sw_ssh_root.py
T
Jack a24f2e23c6 Update to 7.25.0
1. Added Mail Marketing Automation trigger tasks
2. Added Mail Marketing Groups Import, Export, Merge
3. Added Mail Marketing Subscribers to support paste import
4. Added Mail Marketing Template Import Export Duplicate
5. Added Mail server add timed automatic reply
6. Added HTTPS Protection function for Website (disables automatic HTTP to HTTPS redirection when enabled)
7. Optimize Website Interface Button Integration
8. Optimize the response speed of WP Toolkit interface
2025-03-13 17:52:26 +08:00

46 lines
1.8 KiB
Python

#!/usr/bin/python
# coding: utf-8
# -------------------------------------------------------------------
# aapanel
# -------------------------------------------------------------------
# Copyright (c) 2015-2099 aapanel(http://www.aapanel.com) All rights reserved.
# -------------------------------------------------------------------
# Author: hwliang <hwl@bt.cn>
# -------------------------------------------------------------------
# -------------------------------------------------------------------
# 检查SSH root是否可以登录
# -------------------------------------------------------------------
import sys, os
os.chdir('/www/server/panel')
sys.path.append("class/")
import os, sys, re, public
_title = 'Check if SSH root can log in'
_version = 1.0 # 版本
_ps = "Check if SSH root can log in" # 描述
_level = 0 # 风险级别: 1.提示(低) 2.警告(中) 3.危险(高)
_date = '2022-08-10' # 最后更新时间
_ignore = os.path.exists("data/warning/ignore/sw_ssh_root.pl")
_tips = [
"Add [ PermitRootLogin no ] parameter in [/etc/ssh/sshd_config]",
"PermitRootLogin no",
]
_help = ''
_remind = 'SSH remote login as root is not possible after this solution is fixed'
def check_run():
#ssh 检查root 登录
if os.path.exists('/etc/ssh/sshd_config'):
try:
info_data = public.ReadFile('/etc/ssh/sshd_config')
if info_data:
if re.search(r'PermitRootLogin\s+no', info_data):
return True, 'Risk-free'
else:
return True, 'Risk-free'
return False, 'The parameter [PermitRootLogin] in /etc/ssh/sshd_config is configured as: "yes", please set it to "no"'
except:
return True, 'Risk-free'
return True, 'Risk-free'