[Mageia-sysadm] [409] add class for scp and sftp

[root at mageia.org]

Revision: 409
Author:   misc
Date:     2010-11-23 02:11:12 +0100 (Tue, 23 Nov 2010)
Log Message:
-----------
add class for scp and sftp

Modified Paths:
--------------
    puppet/modules/restrictshell/manifests/init.pp
    puppet/modules/restrictshell/templates/membersh-conf.pl

Modified: puppet/modules/restrictshell/manifests/init.pp
===================================================================
--- puppet/modules/restrictshell/manifests/init.pp	2010-11-23 01:11:10 UTC (rev 408)
+++ puppet/modules/restrictshell/manifests/init.pp	2010-11-23 01:11:12 UTC (rev 409)
@@ -77,4 +77,16 @@
     class allow_svn {
         allow{ "svn": }
     }
+
+    class allow_scp {
+        allow{ "scp": }
+    }
+
+    class allow_sftp {
+        allow{ "sftp": }
+    }
+    # technically, we could add cvs too
+    # but I doubt we will use it one day
+
+
 }

Modified: puppet/modules/restrictshell/templates/membersh-conf.pl
===================================================================
--- puppet/modules/restrictshell/templates/membersh-conf.pl	2010-11-23 01:11:10 UTC (rev 408)
+++ puppet/modules/restrictshell/templates/membersh-conf.pl	2010-11-23 01:11:12 UTC (rev 409)
@@ -11,6 +11,8 @@
 $regexp_rsync = "^rsync --server";
 $regexp_dir_rsync = "^/.*";
 
+$bin_sftp = "<%= lib_dir %>/ssh/sftp-server";
+$regexp_sftp = "^(/usr/lib{64,}/ssh/sftp-server|/usr/lib/sftp-server|/usr/libexec/sftp-server|/usr/lib/openssh/sftp-server)";
 
 foreach my $f (glob("/etc/membersh-conf.d/allow_*pl")) {
     do($f)
-------------- next part --------------
An HTML attachment was scrubbed...
URL: </pipermail/mageia-sysadm/attachments/20101123/c349dda7/attachment.html>