Created
April 8, 2014 14:34
-
-
Save Zeuh/10134110 to your computer and use it in GitHub Desktop.
Puppet automatic upgrade for openssl and reset openssh server key on Debian due to CVE-2014-0160
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
# https://security-tracker.debian.org/tracker/CVE-2014-0160 | |
file { '/etc/cron.d/reset-sshkeys-cron': | |
ensure => 'present', | |
content => "PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin\n0 * * * * root [ ! -e /reset-ssh-key1 ] && touch /reset-ssh-key1 && apt-get update && apt-get install -y openssh-client openssh-server openssl libssl-dev libssl1.0.0 && /bin/rm /etc/ssh/ssh_host_* && /usr/sbin/dpkg-reconfigure openssh-server\n", | |
mode => '0644', | |
owner => 'root', | |
group => 'root', | |
} |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment