chiark / gitweb /
Directory claiming and ephemeral filesystems.
[distorted-keys] / userv / distorted-keys.in
1 ### -*-conf-*-
2 ###
3 ### userv services configuration for distorted-keys
4
5 ###--------------------------------------------------------------------------
6 ### User crypto operations.
7
8 if ( glob service cryptop
9    & glob service-user @user@
10    & grep calling-user-shell /etc/shells
11    )
12         no-suppress-args
13         require-fd 0 read
14         require-fd 1-2 write
15         ignore-fd 3-
16         no-set-environment
17         execute @bindir@/cryptop
18 fi
19
20 ###--------------------------------------------------------------------------
21 ### Key administration operations.
22
23 if ( glob service keys
24    & glob service-user @user@
25    & ( grep calling-user @pkgconfdir@/admin.users
26      | grep calling-group @pkgconfdir@/admin.groups
27      )
28    )
29         no-suppress-args
30         require-fd 0 read
31         require-fd 1-2 write
32         ignore-fd 3-
33         no-set-environment
34         execute @sbindir@/keys
35 fi
36
37 ###--------------------------------------------------------------------------
38 ### User profile access.
39
40 if ( glob service cryptop-profile
41    & grep service-user-shell /etc/shells
42    & glob calling-user @user@
43    )
44         no-suppress-args
45         null-fd 0
46         require-fd 1-2 write
47         ignore-fd 3-
48         no-set-environment
49         execute sh -c "case $# in                                       \
50           1)                                                            \
51             exec @bindir@/extract-profile \"$1\"                        \
52                 @pkgconfdir@/profile.d/                                 \
53                 .userv/cryptop-profile                                  \
54             ;;                                                          \
55           *)                                                            \
56             echo >&2 \"usage: cryptop-profile PROFILE\";                \
57             exit 1                                                      \
58             ;;                                                          \
59         esac" _
60 fi
61
62 ###----- That's all, folks --------------------------------------------------