got user-mode sshd working

4 files changed, 57 insertions, 0 deletions

diff --git a/EndoForge/openssh/AuthorizedKeysCommand b/EndoForge/openssh/AuthorizedKeysCommand
new file mode 100755
index 0000000..063444e
--- /dev/null
+++ b/EndoForge/openssh/AuthorizedKeysCommand
@@ -0,0 +1,16 @@
+#!/bin/sh
+fingerprint=$3
+authline="$4 $5"
+
+username=$(id -un)
+userhome=$(getent passwd $(id -un) | (IFS=: read _ _ _ _ _ home _ && echo "$home"))
+
+case "$userhome" in
+        '' | *"'"* ) exit ;;
+esac
+
+usercommand=$userhome/.ssh/AnonymousAccessCommand
+
+[ -x "$usercommand" ] || exit
+
+printf 'command="%s",no-port-forwarding %s\n' "$usercommand $fingerprint" "$authline"
diff --git a/EndoForge/openssh/Makefile b/EndoForge/openssh/Makefile
new file mode 100644
index 0000000..e53a851
--- /dev/null
+++ b/EndoForge/openssh/Makefile
@@ -0,0 +1,12 @@
+# SSH_LISTEN_PORT = 22022
+# SSHD = /usr/sbin/sshd -p $(SSH_LISTEN_PORT) -D -e -f ~/.ssh/sshd_config -h ~/.ssh/id_ed25519
+
+run:
+        fakeroot ./runsshd.sh
+
+runtest:
+        $(SSHD) -t
+
+install:
+        install -m0600 sshd_config -t ~/.ssh
+        install -m0755 AuthorizedKeysCommand -t ~/.ssh
diff --git a/EndoForge/openssh/runsshd.sh b/EndoForge/openssh/runsshd.sh
new file mode 100755
index 0000000..1eff668
--- /dev/null
+++ b/EndoForge/openssh/runsshd.sh
@@ -0,0 +1,16 @@
+#!/bin/sh
+set --
+dirs=$HOME
+p=$HOME
+while [ "$p" != "${p%/*}" ]
+do
+    p=${p%/*}
+    dirs="$dirs $p/"
+done
+
+chown root:root $dirs
+chmod go-w $dirs
+
+cmd="/usr/sbin/sshd -D -e -f $HOME/.ssh/sshd_config -h $HOME/.ssh/id_ed25519"
+/sbin/runuser -u u -- sh -c "set -x; $cmd"
+
diff --git a/EndoForge/openssh/sshd_config b/EndoForge/openssh/sshd_config
new file mode 100644
index 0000000..8df5d17
--- /dev/null
+++ b/EndoForge/openssh/sshd_config
@@ -0,0 +1,13 @@
+Port 22022
+
+AuthorizedKeysCommandUser=u
+AuthorizedKeysCommand=/home/u/.ssh/AuthorizedKeysCommand %u %h %f "%t %k"
+ExposeAuthInfo=yes
+PidFile=/home/u/.ssh/sshd.pid
+
+AuthenticationMethods publickey
+AcceptEnv LANG LC_*
+Subsystem       sftp /usr/lib/openssh/sftp-server
+UsePAM no
+PermitTTY no
+ChrootDirectory=none