1
0
mirror of git://projects.qi-hardware.com/nanobits.git synced 2024-12-28 12:58:59 +02:00

Push initial Security works

login - a simple login script
verify - text file to hold password
owner  - text file to hold contact info to be displayed

Update README with appropriate info.
This commit is contained in:
Freemor 2012-06-20 13:19:22 -03:00
parent 3d7a0d2195
commit 9a04a3d23e
4 changed files with 43 additions and 0 deletions

View File

@ -1,3 +1,18 @@
This Directory will contain projects about Securing the Ben Nananote.
Things so far:
/sbin/login - A login script with the option to print user/contact info
/etc/verify - A text file containing the password in plain text (will definitely get onto hashing it).
If this file doesn't exist login aborts and the system/shell/etc comes up
/etc/owner - A text file containing contact information printed above the password prompt.
If /etc/owner doesn't exist only the prompt is shown.
Planned features:
Hashed passwords or reading root password if possible.
Nicer look (Graphic login screen or something)
Failure limit - Stop/limit bruteforcing
?? Nuker ?? - possible option to erase user data if too many failures
prevent it showing up after each gmenu2x program

5
ben-security/etc/owner Normal file
View File

@ -0,0 +1,5 @@
Retrun to:
Somebody
54 Someplace lane
Some Country

2
ben-security/etc/verify Normal file
View File

@ -0,0 +1,2 @@
BNN

21
ben-security/sbin/login Executable file
View File

@ -0,0 +1,21 @@
#!/bin/bash
#
# Login script to secure the nanonote
reset
if [ -f /etc/owner ]; then
cat /etc/owner
fi
echo -n "Password: "
stty -echo
read password
stty echo
echo ""
correct="$(cat /etc/verify)"
if [ $password = $correct ] ; then
exec $1
fi