1 # $OpenBSD: keys-command.sh,v 1.2 2012/12/06 06:06:54 dtucker Exp $
2 # Placed in the Public Domain.
4 tid="authorized keys from command"
6 if test -z "$SUDO" ; then
7 echo "skipped (SUDO not set)"
8 echo "need SUDO to create file in /var/run, test won't work without"
12 # Establish a AuthorizedKeysCommand in /var/run where it will have
13 # acceptable directory permissions.
14 KEY_COMMAND="/var/run/keycommand_${LOGNAME}"
15 cat << _EOF | $SUDO sh -c "cat > '$KEY_COMMAND'"
17 test "x\$1" != "x${LOGNAME}" && exit 1
18 exec cat "$OBJ/authorized_keys_${LOGNAME}"
20 $SUDO chmod 0755 "$KEY_COMMAND"
22 cp $OBJ/sshd_proxy $OBJ/sshd_proxy.bak
24 grep -vi AuthorizedKeysFile $OBJ/sshd_proxy.bak
25 echo AuthorizedKeysFile none
26 echo AuthorizedKeysCommand $KEY_COMMAND
27 echo AuthorizedKeysCommandUser ${LOGNAME}
30 if [ -x $KEY_COMMAND ]; then
31 ${SSH} -F $OBJ/ssh_proxy somehost true
36 echo "SKIPPED: $KEY_COMMAND not executable (/var/run mounted noexec?)"
39 $SUDO rm -f $KEY_COMMAND