extern/sshuttle
1
1
Fork 0
mirror of https://github.com/sshuttle/sshuttle.git synced 2025-04-30 22:24:55 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #635 from skuhl/sudoers-warning

Browse Source 
Warn about adding sshuttle to sudoers.
This commit is contained in:
Brian May 2021-05-09 20:25:26 +10:00 committed by GitHub
commit 88154f4f9c
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 8 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
sshuttle/sudoers.py
View File

@ -19,9 +19,14 @@ Cmnd_Alias %(ca)s = /usr/bin/env PYTHONPATH=%(dist_packages)s %(py)s %(path)s *
%(user_name)s ALL=NOPASSWD: %(ca)s %(user_name)s ALL=NOPASSWD: %(ca)s
''' '''
warning_msg = "# WARNING: When you allow a user to run sshuttle as root,\n" \
"# they can then use sshuttle's --ssh-cmd option to run any\n" \
"# command as root.\n"
def build_config(user_name): def build_config(user_name):
content = template % { content = warning_msg
content += template % {
'ca': command_alias, 'ca': command_alias,
'dist_packages': path_to_dist_packages, 'dist_packages': path_to_dist_packages,
'py': sys.executable, 'py': sys.executable,
@ -42,6 +47,7 @@ def save_config(content, file_name):
process.stdin.write(content.encode()) process.stdin.write(content.encode())
streamdata = process.communicate()[0] streamdata = process.communicate()[0]
sys.stdout.write(streamdata.decode("ASCII"))
returncode = process.returncode returncode = process.returncode
if returncode: if returncode:
@ -61,4 +67,5 @@ def sudoers(user_name=None, no_modify=None, file_name=None):
sys.stdout.write(content) sys.stdout.write(content)
exit(0) exit(0)
else: else:
sys.stdout.write(warning_msg)
save_config(content, file_name) save_config(content, file_name)