danvics/howdy
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Fixed issue where remote sessions could be authenticated through howdy

Browse source
This commit is contained in:
boltgolt 2018-09-24 18:05:15 +02:00
parent b5c715df9a
commit 8180dafdaf
No known key found for this signature in database
GPG key ID: BECEC9937E1AAE26
2 changed files with 9 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
src/config.ini
View file

@ -9,6 +9,9 @@ no_confirmation = false
# show an error but fail silently # show an error but fail silently
suppress_unknown = false suppress_unknown = false
# Disable Howdy in remote shells
ignore_ssh = true
# Auto dismiss lock screen on confirmation # Auto dismiss lock screen on confirmation
# Will run loginctl unlock-sessions after every auth # Will run loginctl unlock-sessions after every auth
# Expirimental, can behave incorrectly on some systems # Expirimental, can behave incorrectly on some systems

5
src/pam.py
View file

@ -19,6 +19,11 @@ def doAuth(pamh):
if config.get("core", "disabled") == "true": if config.get("core", "disabled") == "true":
sys.exit(0) sys.exit(0)
# Abort if we're in a remote SSH env
if config.get("core", "ignore_ssh") == "true":
if "SSH_CONNECTION" in os.environ or "SSH_CLIENT" in os.environ or "SSHD_OPTS" in os.environ:
sys.exit(0)
# Run compare as python3 subprocess to circumvent python version and import issues # Run compare as python3 subprocess to circumvent python version and import issues
status = subprocess.call(["python3", os.path.dirname(os.path.abspath(__file__)) + "/compare.py", pamh.get_user()]) status = subprocess.call(["python3", os.path.dirname(os.path.abspath(__file__)) + "/compare.py", pamh.get_user()])