Skip to content

对于公钥的检查我觉得可以再优化 #7

Description

@ZhaoYukai

在对于公钥的检查那里,我看脚本中是这么检查的:
if [ -e /root/.ssh/*.pub ];then
不过如果这个机器被恶意注入攻击者的公钥,我觉得可以再检查authorized_keys这个文件或者其他名字的文件是否存在,以及在/etc/.ssh下面是否有文件存在

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions