blob: 28f8bf42e14705ec147599cb8c64f14553dff637 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
|
#!/bin/sh
#
# $FreeBSD$
#
# PROVIDE: scponlyc
# REQUIRE: LOGIN cleanvar
# KEYWORD: shutdown
# Add the following lines to /etc/rc.conf to enable scponly:
# spconlyc_enable (bool): Set to "NO" by default.
# Set it to "YES" to enable scponly
# scponlyc_shells (str): Set to "/etc/shells" by default.
# scponlyc_passwd (str): Set to "/etc/passwd" by default.
. %%RC_SUBR%%
scponlyc_shells="${scponlyc_shells:-/etc/shells}"
scponlyc_passwd="${scponlyc_passwd:-/etc/passwd}"
name="scponlyc"
rcvar=`set_rcvar`
start_cmd="scponlyc_startcmd"
stop_cmd="scponlyc_stopcmd"
required_files="$scponlyc_shells $scponlyc_passwd"
scponlyc=%%PREFIX%%/sbin/scponlyc
make_devfs() {
# $1 is the user name whose home directory needs a minimal
# devfs created. If ~/dev exists, it will be deleted.
eval DEV="~$1/dev"
if /sbin/mount | grep "${DEV}" >/dev/null 2>&1; then
/sbin/umount "${DEV}" 2>/dev/null
fi
/bin/rmdir "${DEV}" || err 1 "Unable to remove $DEV"
/bin/mkdir -p "${DEV}"
devfs_domount "${DEV}"
if devfs_init_rulesets; then
devfs_apply_ruleset "devfsrules_hide_all" "${DEV}" && \
devfs_apply_ruleset "devfsrules_unhide_basic" "${DEV}" || \
/sbin/umount "${DEV}" 2>/dev/null
fi
}
users_configured() {
if [ `/usr/bin/grep -c "/scponlyc$" ${scponlyc_shells} 2>/dev/null` -ne 1 ]; then
exit 1
fi
}
scponlyc_startcmd() {
users_configured
/usr/bin/grep "^[^#]*:.*:.*:.*:.*:.*:${scponlyc}$" ${scponlyc_passwd} |
/usr/bin/awk -F: {'print $1'} |
while read USER; do
/bin/echo "${USER}/dev"
make_devfs "${USER}"
done
}
scponlyc_stopcmd() {
users_configured
/usr/bin/grep "^[^#]*:.*:.*:.*:.*:.*:${scponlyc}$" ${scponlyc_passwd} |
/usr/bin/awk -F: {'print $1'} |
while read USER; do
/bin/echo "${USER}/dev"
eval DEV="~${USER}/dev"
/sbin/umount ${DEV} 2>/dev/null
done
}
load_rc_config $name
run_rc_command "$1"
|
