From cce1300f2266575ebd4392b70113fc9e1502439e Mon Sep 17 00:00:00 2001 From: CyberLeo Date: Tue, 24 Jul 2012 11:08:15 -0500 Subject: [PATCH] j/ssh_chrooter: stub implementation to toss incoming users into a chroot --- ssh_chrooter | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) create mode 100755 ssh_chrooter diff --git a/ssh_chrooter b/ssh_chrooter new file mode 100755 index 0000000..527347e --- /dev/null +++ b/ssh_chrooter @@ -0,0 +1,17 @@ +#!/bin/sh -e + +# Stub wrapper to be invoked by sshd ForceCommand, to trap a user inside a chroot + +[ "$(id -u)" -eq 0 ] || exec sudo ORIG_USER="${USER}" ORIG_SHELL="${SHELL}" SSH_CLIENT="${SSH_CLIENT}" SSH_CONNECTION="${SSH_CONNECTION}" SSH_ORIGINAL_COMMAND="${SSH_ORIGINAL_COMMAND}" "${0}" "${@}" + +jname="${1}" + +cd "$(dirname "$(dirname "${0}")")" +if [ "${SSH_ORIGINAL_COMMAND}" ] +then + USER="${ORIG_USER}" j/eval "${jname}" "cd; ${SSH_ORIGINAL_COMMAND}" +else + echo "You are now entering the ${jname} chroot" >&2 + USER="${ORIG_USER}" j/enter "${jname}" +fi + -- 2.42.0