From 7b702595669138b81ad2a9a23d0d9df81c8c484b Mon Sep 17 00:00:00 2001 From: edison Date: Wed, 8 Sep 2010 11:04:18 -0700 Subject: [PATCH] Disallow sshd listening on public nic, for domR in dhcp server mode --- patches/systemvm/etc/init.d/seteth1 | 1 + 1 file changed, 1 insertion(+) diff --git a/patches/systemvm/etc/init.d/seteth1 b/patches/systemvm/etc/init.d/seteth1 index 0081e664930..32a0ad704f4 100755 --- a/patches/systemvm/etc/init.d/seteth1 +++ b/patches/systemvm/etc/init.d/seteth1 @@ -123,6 +123,7 @@ setup_dhcpsrvr() { echo "$ETH0_IP $NAME" >> /etc/hosts [ -f /etc/httpd/conf/httpd.conf ] && sed -i -e "s/^Listen.*$/Listen $ETH0_IP:80/" /etc/httpd/conf/httpd.conf [ -f /etc/httpd/conf.d/ssl.conf ] && mv /etc/httpd/conf.d/ssl.conf /etc/httpd/conf.d/ssl.conf.bak + [ -f /etc/ssh/sshd_config ] && sed -i -e "s/^[#]*ListenAddress.*$/ListenAddress $ETH1_IP/" /etc/ssh/sshd_config } setup_secstorage() {