#!/bin/sh

set -e

case "${1}" in
	install)
		mkdir -p /etc/sysctl.d

cat > /etc/sysctl.d/ssh-keysign-pwn.conf << EOF
# /etc/sysctl.d/ssh-keysign-pwn.conf

# Name: ssh-keysign-pwn
# URL:  https://github.com/0xdeadbeefnetwork/ssh-keysign-pwn

kernel.yama.ptrace_scope=2
EOF

		echo 2 > /proc/sys/kernel/yama/ptrace_scope
		;;

	remove)
		rm -f /etc/sysctl.d/ssh-keysign-pwn.conf
		rmdir /etc/sysctl.d > /dev/null 2>&1 || true

		echo 0 > /proc/sys/kernel/yama/ptrace_scope
		;;
esac
