blob: deb7078f6bb359aedfe41cb28a406ee2b40b8607 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
|
# Copyright 1999-2004 Gentoo Foundation
# Distributed under the terms of the GNU General Public License v2
# $Header: /var/cvsroot/gentoo-x86/net-misc/scponly/scponly-4.0.ebuild,v 1.1 2004/12/02 15:30:22 matsuu Exp $
inherit eutils
DESCRIPTION="A tiny pseudoshell which only permits scp and sftp"
HOMEPAGE="http://www.sublimation.org/scponly/"
SRC_URI="http://www.sublimation.org/scponly/${P}.tgz"
LICENSE="as-is"
SLOT="0"
KEYWORDS="x86 amd64 ~sparc ~ppc"
IUSE=""
DEPEND="virtual/libc
net-misc/openssh"
src_compile() {
PATH="${PATH}:/usr/lib/misc" \
econf \
--enable-rsync-compat \
--enable-chrooted-binary \
|| die "./configure failed"
emake || die
}
src_install() {
make prefix=${D}/usr \
mandir=${D}/usr/share/man \
CONFDIR=${D}/etc/scponly \
install || die
dodoc AUTHOR CHANGELOG CONTRIB README TODO
}
pkg_postinst() {
# pkg_postinst is based on ${S}/setup_chroot.sh.
local myuser="scponly"
local myhome="/home/${myuser}"
einfo "Updating /etc/shells"
{ grep -v "^/usr/bin/scponly$" /etc/shells;
echo "/usr/bin/scponly"
} > ${T}/shells
mv -f ${T}/shells /etc/shells
{ grep -v "^/usr/sbin/scponlyc$" /etc/shells;
echo "/usr/sbin/scponlyc"
} > ${T}/shells
mv -f ${T}/shells /etc/shells
BINARIES="/usr/lib/misc/sftp-server /bin/ls /usr/bin/scp /bin/rm /bin/ln /bin/mv /bin/chmod /bin/chown /bin/chgrp /bin/mkdir /bin/rmdir /bin/pwd /bin/groups /usr/bin/ld /bin/echo /usr/bin/rsync"
LIB_LIST=`/usr/bin/ldd $BINARIES 2> /dev/null | /bin/cut -f2 -d\> | /bin/cut -f1 -d\( | /bin/grep "^ " | /bin/sort -u`
LDSO_LIST="/lib/ld.so /libexec/ld-elf.so /libexec/ld-elf.so.1 /usr/libexec/ld.so /lib/ld-linux.so.2 /usr/libexec/ld-elf.so.1"
for lib in $LDSO_LIST; do
if [ -f $lib ]; then
LIB_LIST="$LIB_LIST $lib"
fi
done
/bin/ls /lib/libnss_compat* > /dev/null 2>&1
if [ $? -eq 0 ]; then
LIB_LIST="$LIB_LIST /lib/libnss_compat*"
fi
ldconfig
LIB_LIST="$LIB_LIST /etc/ld.so.cache /etc/ld.so.conf"
enewgroup ${myuser}
enewuser ${myuser} -1 /usr/sbin/scponlyc ${myhome} ${myuser}
if [ ! -d ${myhome} ]; then
/bin/install -c -d ${myhome}
/bin/chmod 755 ${myhome}
fi
if [ ! -d ${myhome} ]; then
/bin/install -c -d ${myhome}/etc
/bin/chown 0:0 ${myhome}/etc
/bin/chmod 755 ${myhome}/etc
fi
for bin in $BINARIES; do
/bin/install -c -d ${myhome}/`/bin/dirname $bin`
/bin/install -c $bin ${myhome}/$bin
done
for lib in $LIB_LIST; do
/bin/install -c -d ${myhome}/`/bin/dirname $lib`
/bin/install -c $lib ${myhome}/$lib
done
/bin/chown 0:0 ${myhome}
if [ -d ${myhome}/.ssh ]; then
/bin/chown 0:0 ${myhome}/.ssh
fi
if [ ! -d ${myhome}/incoming ]; then
einfo "creating ${myhome}/incoming directory for uploading files"
/bin/install -c -o ${myuser} -d ${myhome}/incoming
fi
/bin/chown $myuser:$myuser ${myhome}/incoming
grep "^${myuser}" /etc/passwd > ${myhome}/etc/passwd
einfo ""
einfo "if you experience a warning with winscp regarding groups, please install"
einfo "the provided hacked out fake groups program into your chroot, like so:"
einfo "cp groups ${myhome}/bin/groups"
}
|
GitWeb