tildeverse
/
uucp
Archived
7
3
Fork 13
Code Issues 1 Pull Requests 1 Releases Wiki Activity

Improve security and reliability #16

Manually merged
praetor merged 7 commits from jgoerzen/uucp:master into master 2019-10-27 02:08:44 +00:00
Conversation 2 Commits 7 Files Changed 5 +37 -29

7 Commits

Author SHA1 Message Date
John Goerzen af06c03628 No longer let remote systems request any file on the system 
Local users can still send any file that the uucp user has access
to, but don't let remote systems get it all.
 2019-10-23 07:36:42 -05:00
John Goerzen 4f5b52ca3c Support ssh on nonstandard ports 
Port 22 can be a target for portscanning, so for those that wish to
listen elsewhere, support that by adding a field to nodelist
 2019-10-23 16:09:09 -05:00
John Goerzen b61398309a Make sure to exit if a command fails in update script 2019-10-23 16:09:09 -05:00
John Goerzen 45724aa86a Document permissions for /etc/uucp 2019-10-23 16:09:09 -05:00
John Goerzen f6dc1b424a Pass the username in authorized_keys, not reading in uucico 
Since all the passwords are trivially guessable, it is easy for
any authorized system to impersonate any other authorized system
at present.

This patch prevents that by hardcoding the username into the uucico
call based on the authorized key from ssh.  This causes the incoming
system to need to only present a password, hence the change to chat.

This change will break communication between nodes until all nodes
apply it.
 2019-10-23 06:12:14 -05:00
John Goerzen a4e8993913 Switch to "restrict" in authorized_keys 
Per the docs:

     restrict
             Enable all restrictions, i.e. disable port, agent and X11 forwarding,
             as well as disabling PTY allocation and execution of ~/.ssh/rc.  If
             any future restriction capabilities are added to authorized_keys
             files they will be included in this set.
 2019-10-23 12:12:40 -05:00
John Goerzen 78fec632b6 Block rmail by default 
The default set of authorized commands is "rnews rmail" per the Taylor
UUCP documentaiton.  The way rmail works -- generally injecting a
message in such a way that the MTA sees it as originating locally --
can open up a UUCP node to unahtorized mail relay attacks.  Since it
looks like rmail isn't being used across the Tilde UUCP right now,
just block it by default.
 2019-10-22 10:09:00 -05:00