blob: 3feb6dcbd9ecfbd46df893a22e77a8ff9732920e (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
|
#!/usr/bin/perl -w
# Intended to be used as a restricted command.
# Usage:
# command="/path/to/dgit-mirror-ssh-wrap /srv/repos/ .git --"
# or similar. The two substantive arguments are literals.
# The example permits writes to directories
# /srv/repos/$PACKAGE.git
# where $PACKAGE has the syntax of a Debian package name.
use strict;
die 'bad usage' unless @ARGV==3 && $ARGV[2] eq '--';
our ($prefix, $suffix) = @ARGV;
$prefix =~ s/\W/\\$&/g;
$suffix =~ s/\W/\\$&/g;
my $package = qr{[0-9a-z][-+.0-9a-z]*};
my $d = qr{$prefix$package$suffix};
my $command = $ENV{SSH_ORIGINAL_COMMAND}
// die "missing SSH_ORIGINAL_COMMAND";
#print STDERR ">$d<\n";
$command =~
m{^rsync --server -lHtre\.iLsfxC --timeout=\d+ --delete --safe-links \. $d$}
# To add a new command pattern, add || m{^ ... $} above.
# The pattern should contain $d where the per-package destination
# directory would go.
or die "unexpected command $command\n";
exec $& or die $!;
|
