arti/deploy-win10-from-linux
1
0
Fork 0
Code Issues 1 Pull Requests Packages Projects Releases Wiki Activity

openssh server improvements, debloat mode

Browse Source
This commit is contained in:
Filip Stedronsky
2021-07-19 12:26:27 +02:00
parent c0b46695b5
commit b2341dcbff
7 changed files with 165 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
postproc/openssh-server/openssh_acl.py
View File

@@ -20,5 +20,7 @@ apply_sd_recursively(
ACE(ACE.ALLOW, MASK_FULL_CONTROL, SID_SYSTEM),
ACE(ACE.ALLOW, MASK_FULL_CONTROL, SID_ADMINISTRATORS) ,
ACE(ACE.ALLOW, MASK_READ_EXECUTE, SID_EVERYONE)
], dacl_inherit=False)
], dacl_inherit=False),
set_owner=True,
set_group=True,
)

1
postproc/openssh-server/setup.sh
View File

@@ -14,5 +14,6 @@ fi
cp -rT OpenSSH-Win64 "$mnt/Program Files/OpenSSH"
hivexregedit --merge --prefix 'HKEY_LOCAL_MACHINE\SYSTEM' "$mnt"/Windows/System32/config/SYSTEM "$my_dir/sshd_service.reg"
hivexregedit --merge --prefix 'HKEY_LOCAL_MACHINE\SYSTEM' "$mnt"/Windows/System32/config/SYSTEM "$my_dir/sshd_firewall.reg"
"$my_dir/openssh_acl.py" "$mnt"

5
postproc/openssh-server/sshd_firewall.reg Normal file
View File

@@ -0,0 +1,5 @@
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"sshd"="v2.30|Action=Allow|Active=TRUE|Dir=In|Protocol=6|LPort=22|Name=sshd|"