From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <www-data@comics.unina.it>
Received: from svn.comics.unina.it (unknown [143.225.229.147])
	by huchra.bufferbloat.net (Postfix) with ESMTP id D9164200A92
	for <bismark-commits@lists.bufferbloat.net>;
	Fri, 27 May 2011 12:08:19 -0700 (PDT)
Received: from www-data by svn.comics.unina.it with local (Exim 4.69)
	(envelope-from <www-data@comics.unina.it>) id 1QQ1U0-0003Gv-Pw
	for bismark-commits@lists.bufferbloat.net;
	Fri, 27 May 2011 20:10:00 +0200
To: bismark-commits@lists.bufferbloat.net
From: walter@svn.comics.unina.it
Message-Id: <E1QQ1U0-0003Gv-Pw@svn.comics.unina.it>
Date: Fri, 27 May 2011 20:10:00 +0200
X-Mailman-Approved-At: Fri, 27 May 2011 16:08:34 -0700
Subject: [Bismark-commits] rev 354 - trunk/server/scripts
X-BeenThere: bismark-commits@lists.bufferbloat.net
X-Mailman-Version: 2.1.13
Precedence: list
List-Id: Commit log for the bismark source code
	<bismark-commits.lists.bufferbloat.net>
List-Unsubscribe: <https://lists.bufferbloat.net/options/bismark-commits>,
	<mailto:bismark-commits-request@lists.bufferbloat.net?subject=unsubscribe>
List-Archive: <https://lists.bufferbloat.net/pipermail/bismark-commits>
List-Post: <mailto:bismark-commits@lists.bufferbloat.net>
List-Help: <mailto:bismark-commits-request@lists.bufferbloat.net?subject=help>
List-Subscribe: <https://lists.bufferbloat.net/listinfo/bismark-commits>,
	<mailto:bismark-commits-request@lists.bufferbloat.net?subject=subscribe>
X-List-Received-Date: Fri, 27 May 2011 19:08:20 -0000

Author: walter
Date: 2011-05-27 20:10:00 +0200 (Fri, 27 May 2011)
New Revision: 354

Added:
   trunk/server/scripts/brsh
Log:
added bismark restricted shell

Added: trunk/server/scripts/brsh
===================================================================
--- trunk/server/scripts/brsh	                        (rev 0)
+++ trunk/server/scripts/brsh	2011-05-27 18:10:00 UTC (rev 354)
@@ -0,0 +1,25 @@
+#!/bin/bash
+# Bismark Restricted Shell
+# 
+# Only allows to execute: 
+# - scp    : to upload measure results
+# - rshell : add recovery tunnel to list
+#
+# author: walter.dedonato@unina.it
+
+#echo $SSH_ORIGINAL_COMMAND 
+
+. ~/etc/bdm.conf
+
+cmd=$(echo "$SSH_ORIGINAL_COMMAND" | gawk '
+	($1 == "scp") && ($(NF-1) ~ "-t") && ($NF ~ "^var/data/") && ! ($NF ~ "\\.\\.") && ! /[;$`]/ { print }
+	($1 == "rshell") && ! /[;$`]/ { print "bdm settunnel " $2 " " $3 }
+')
+
+$cmd
+
+if [ ${cmd:0:3} == "bdm" ]; then
+	while [ true ]; do
+		read 
+	done
+fi


Property changes on: trunk/server/scripts/brsh
___________________________________________________________________
Name: svn:mergeinfo
   +