script for login shell .profile (Re: Feature request: set -o pipefail)

[Oleg Verych <olecom@xxxxxxxxx>]

> * ssh+ to have multiple sshd servers as simple as creating
> sshd_config+$reason files. E.g. to have some loginless dummies for
> those dudes, who like to f*ck ssh on the Internet.

But even login ssh (on some random port actually) have no regular
system's account(s), but some random obscure names, where
$HOME/dot.profile is like below. PAM is a baby :), just plain
`/bin/sh`.

#!/bin/sh
# "$HOME/.profile" for secured, nice and wise re-login (f*ck PAMela!)

# all signals from controlling tty can kill commands and leave
# user with an interactive shell; purpose of this script to force
# authentication of the real user from this "for login" one

# thus, setting off interactivity (off controlling tty) and setting on
# error checking (any errors -- logout, works only with `+i')

# "/etc/passwd" can have this file as login shell, $HOME can have only
# this file, thus making things easier

# BEWARE, that NO login/password information can be written
# here, because exec-only (no read permission) scripts are not supported.
# Also make sure, that any other login shell for this account must source
# this file, thus making all working securely.

set +i -e
sleep 02
umask 027
cd /
U=`
T=50
P="Enter user name, please ("
G=$((${#P}+1))

exec 9<&0
( read U && echo "$U" ) <&9&
PID=$!
exec 9<&- 1>&2

echo -n "$P$T): "
trap 'kill -KILL "$PID" 2>&-' 0 INT QUIT
P=5
while sleep "0.$P" && test -e "/proc/$PID/exe"
do
  T=$(($T-$P))
    if test "$T" -gt 0
  then printf "\0337\033[${G}G$T): \0338"
  else printf "\033[${G}Gtime is out). Bye.
"
       exit 73
    fi
done`
echo "Wait, please..."
sleep 2
[ "$SSH_ORIGINAL_COMMAND" ] || case "${U:=}" in
   root|'')
       exec sleep $((1<<30));;
   *)  # check and `su` to the supplied login
       test -d "/home/$U" && chmod 660 `tty` && exec su "$U";;
esac
echo "Only interactive shell access is available. No commands, please."
exit 73 # temporal (obscure) failure, not reached
-- 
sed 'sed && sh + olecom = love'  <<  ''
-o--=O`C
 #oo'L O
<___=E M
--
To unsubscribe from this list: send the line "unsubscribe dash" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html