1 # $OpenBSD: forcecommand.sh,v 1.2 2013/05/17 00:37:40 dtucker Exp $
2 # Placed in the Public Domain.
6 cp $OBJ/sshd_proxy $OBJ/sshd_proxy_bak
8 printf 'command="true" ' >$OBJ/authorized_keys_$USER
9 cat $OBJ/rsa.pub >> $OBJ/authorized_keys_$USER
10 printf 'command="true" ' >>$OBJ/authorized_keys_$USER
11 cat $OBJ/rsa1.pub >> $OBJ/authorized_keys_$USER
14 trace "forced command in key option proto $p"
15 ${SSH} -$p -F $OBJ/ssh_proxy somehost false \ ||
16 fail "forced command in key proto $p"
19 printf 'command="false" ' >$OBJ/authorized_keys_$USER
20 cat $OBJ/rsa.pub >> $OBJ/authorized_keys_$USER
21 printf 'command="false" ' >>$OBJ/authorized_keys_$USER
22 cat $OBJ/rsa1.pub >> $OBJ/authorized_keys_$USER
24 cp $OBJ/sshd_proxy_bak $OBJ/sshd_proxy
25 echo "ForceCommand true" >> $OBJ/sshd_proxy
28 trace "forced command in sshd_config overrides key option proto $p"
29 ${SSH} -$p -F $OBJ/ssh_proxy somehost false \ ||
30 fail "forced command in key proto $p"
33 cp $OBJ/sshd_proxy_bak $OBJ/sshd_proxy
34 echo "ForceCommand false" >> $OBJ/sshd_proxy
35 echo "Match User $USER" >> $OBJ/sshd_proxy
36 echo " ForceCommand true" >> $OBJ/sshd_proxy
39 trace "forced command with match proto $p"
40 ${SSH} -$p -F $OBJ/ssh_proxy somehost false \ ||
41 fail "forced command in key proto $p"