ambiser
/
btrbk
mirror of https://github.com/digint/btrbk
9
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

ssh_filter_btrbk: added ssh_filter_btrbk.sh (ssh wrapper/filter script)

pull/30/head
Axel Burri 2015-02-09 11:42:44 +01:00
parent e84324aee4
commit 60b2951916
1 changed files with 47 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

47
ssh_filter_btrbk.sh Normal file
View File

@ -0,0 +1,47 @@
#!/bin/sh
export PATH=
if [ "$1" = "-l" ]; then
enable_log=1
fi
reject_and_die()
{
if [ -n "$enable_log" ]; then
/usr/bin/logger -p auth.err -t ssh_filter_btrbk.sh "$LOGNAME $SSH_CLIENT REJECT: $SSH_ORIGINAL_COMMAND"
fi
/bin/echo "ssh command rejected" 1>&2;
exit 1;
}
run_cmd()
{
if [ -n "$enable_log" ]; then
/usr/bin/logger -p auth.info -t ssh_filter_btrbk.sh "$LOGNAME $SSH_CLIENT ALLOW: $SSH_ORIGINAL_COMMAND"
fi
$SSH_ORIGINAL_COMMAND
}
case "$SSH_ORIGINAL_COMMAND" in
*\$*) reject_and_die ;;
*\&*) reject_and_die ;;
*\(*) reject_and_die ;;
*\{*) reject_and_die ;;
*\;*) reject_and_die ;;
*\<*) reject_and_die ;;
*\>*) reject_and_die ;;
*\`*) reject_and_die ;;
*\|*) reject_and_die ;;
/sbin/btrfs\ subvolume\ show\ *) run_cmd ;; # mandatory
/sbin/btrfs\ subvolume\ list\ *) run_cmd ;; # mandatory
/sbin/btrfs\ subvolume\ snapshot\ *) run_cmd ;; # mandatory if this host is backup source
/sbin/btrfs\ send\ *) run_cmd ;; # mandatory if this host is backup source
/sbin/btrfs\ receive\ *) run_cmd ;; # mandatory if this host is backup target
/sbin/btrfs\ subvolume\ delete\ *) run_cmd ;; # mandatory if scheduling is active
/sbin/btrfs\ subvolume\ find-new\ *) run_cmd ;; # needed for "btrbk diff"
/sbin/btrfs\ filesystem\ show\ *) run_cmd ;; # needed for "btrbk info"
/sbin/btrfs\ filesystem\ df\ *) run_cmd ;; # needed for "btrbk info"
/sbin/btrfs\ filesystem\ usage\ *) run_cmd ;; # needed for "btrbk info"
*) reject_and_die ;;
esac