mirror of
https://github.com/libguestfs/libguestfs.git
synced 2026-03-21 22:53:37 +00:00
sysprep: remove .ssh directory in users' directory
Remove the .ssh directory of user "root" and any other users who have a .ssh directory in their home directory. Signed-off-by: Wanlong Gao <gaowanlong@cn.fujitsu.com>
This commit is contained in:
committed by
Richard W.M. Jones
parent
b288f21e0c
commit
ecdfd2c8cc
1
TODO
1
TODO
@@ -543,7 +543,6 @@ virt-sysprep ideas
|
||||
. run external guestfish script virt-sysprep --fish=/tmp/foo.fish
|
||||
. rm /var/cache/apt/archives/*
|
||||
- /var/run/* and pam_faillock's data files
|
||||
- homedirs/.ssh directory, especially /root/.ssh (Steve Grubb)
|
||||
- if drives are encrypted, then dm-crypt key should be changed
|
||||
and drives all re-encrypted
|
||||
- /etc/pki
|
||||
|
||||
@@ -46,6 +46,7 @@ SOURCES = \
|
||||
sysprep_operation_script.ml \
|
||||
sysprep_operation_smolt_uuid.ml \
|
||||
sysprep_operation_ssh_hostkeys.ml \
|
||||
sysprep_operation_ssh_userdir.ml \
|
||||
sysprep_operation_udev_persistent_net.ml \
|
||||
sysprep_operation_utmp.ml \
|
||||
sysprep_operation_yum_uuid.ml \
|
||||
@@ -70,6 +71,7 @@ OBJECTS = \
|
||||
sysprep_operation_script.cmx \
|
||||
sysprep_operation_smolt_uuid.cmx \
|
||||
sysprep_operation_ssh_hostkeys.cmx \
|
||||
sysprep_operation_ssh_userdir.cmx \
|
||||
sysprep_operation_udev_persistent_net.cmx \
|
||||
sysprep_operation_utmp.cmx \
|
||||
sysprep_operation_yum_uuid.cmx \
|
||||
|
||||
46
sysprep/sysprep_operation_ssh_userdir.ml
Normal file
46
sysprep/sysprep_operation_ssh_userdir.ml
Normal file
@@ -0,0 +1,46 @@
|
||||
(* virt-sysprep
|
||||
* Copyright (C) 2012 FUJITSU LIMITED
|
||||
*
|
||||
* This program is free software; you can redistribute it and/or modify
|
||||
* it under the terms of the GNU General Public License as published by
|
||||
* the Free Software Foundation; either version 2 of the License, or
|
||||
* (at your option) any later version.
|
||||
*
|
||||
* This program is distributed in the hope that it will be useful,
|
||||
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||||
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||||
* GNU General Public License for more details.
|
||||
*
|
||||
* You should have received a copy of the GNU General Public License along
|
||||
* with this program; if not, write to the Free Software Foundation, Inc.,
|
||||
* 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
|
||||
*)
|
||||
|
||||
open Sysprep_operation
|
||||
|
||||
module G = Guestfs
|
||||
|
||||
let ssh_userdir_perform g root =
|
||||
let typ = g#inspect_get_type root in
|
||||
if typ <> "windows" then (
|
||||
let dirs = g#glob_expand "/home/*/.ssh" in
|
||||
Array.iter (
|
||||
fun dir -> g#rm_rf dir;
|
||||
) dirs;
|
||||
g#rm_rf "/root/.ssh";
|
||||
[]
|
||||
)
|
||||
else []
|
||||
|
||||
let ssh_userdir_op = {
|
||||
name = "ssh-userdir";
|
||||
pod_description = "\
|
||||
Remove C<.ssh> directories in the guest.
|
||||
|
||||
Remove the C<.ssh> directory of user \"root\" and any other
|
||||
users who have a C<.ssh> directory in their home directory.";
|
||||
extra_args = [];
|
||||
perform = ssh_userdir_perform;
|
||||
}
|
||||
|
||||
let () = register_operation ssh_userdir_op
|
||||
Reference in New Issue
Block a user