From d7a855170d5c11b080ba62d74e583903b708ef37 Mon Sep 17 00:00:00 2001 From: u Date: Mon, 29 May 2023 07:39:55 -0400 Subject: Remove references to user "u". Uses $SUDO_USER. --- src/AuthorizedKeysCommand | 8 ++++++-- src/fossil-user.conf | 3 +-- src/fossil-user.socket | 4 ++-- 3 files changed, 9 insertions(+), 6 deletions(-) (limited to 'src') diff --git a/src/AuthorizedKeysCommand b/src/AuthorizedKeysCommand index 6bf0ec9..de0732a 100755 --- a/src/AuthorizedKeysCommand +++ b/src/AuthorizedKeysCommand @@ -1,7 +1,11 @@ #!/bin/sh -cmd=/etc/ssh/user-d.AnonymousForceCommand +username=$1 +shift + +[ "$username" ] +cmd=/etc/ssh/user-$username.AnonymousForceCommand [ -x "$cmd" ] || exit key=$1 shift -printf 'restrict,pty,command="%s" %s\n' "$cmd $*" "$key" +printf 'restrict,pty,command="%s" %s\n' "$cmd" "$key" diff --git a/src/fossil-user.conf b/src/fossil-user.conf index f4296fd..86387e7 100644 --- a/src/fossil-user.conf +++ b/src/fossil-user.conf @@ -1,4 +1,3 @@ -Match User d ExposeAuthInfo=yes AuthorizedKeysCommandUser=root -AuthorizedKeysCommand=/etc/ssh/user-d.AuthorizedKeysCommand "%t %k" "%f" +AuthorizedKeysCommand=/etc/ssh/AuthorizedKeysCommand "%u" "%t %k" diff --git a/src/fossil-user.socket b/src/fossil-user.socket index eab5a51..38914e6 100644 --- a/src/fossil-user.socket +++ b/src/fossil-user.socket @@ -1,5 +1,5 @@ [Socket] Accept = yes ListenStream = /run/fossil-user.S -SocketUser = d -SocketMode = 0600 +SocketUser = root +SocketMode = 0666 -- cgit v1.2.3