Ensure root login is enabled for enabling remote support

2021-10-07 17:04:20 +02:00
parent b642bc98a5
commit 544825f344
1 changed files with 4 additions and 0 deletions
--- a/src/routes/support.js
+++ b/src/routes/support.js
@@ -59,6 +59,10 @@ async function canEnableRemoteSupport(req, res, next) {

    if (!supportConfig.remoteSupport) return next(new HttpError(405, 'feature disabled by admin'));

+    const sshdConfig = safe.fs.readFileSync('/etc/ssh/sshd_config', 'utf8');
+    if (!sshdConfig) return next(new HttpError(412, 'Failed to read sshd config'));
+    if (!sshdConfig.split('\n').find(function (line) { return line.search(/^PermitRootLogin.*yes/) !== -1; })) return next(new HttpError(417, 'Set "PermitRootLogin yes" in /etc/ssh/sshd_config'));
+
    next();
 }