wcp/bin/v-add-user-sftp-jail at 08bd63321d3024bb2694964d8bd5f0094d7cc628 · ghzhost/wcp · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
#!/bin/bash
# info: add user sftp jail
# options: USER [RESTART]
#
# The script enables sftp jailed environment


#----------------------------------------------------------#
#                    Variable&Function                     #
#----------------------------------------------------------#

# Argument definition
user=$1
restart=$2

# Includes
source $HESTIA/func/main.sh
source $HESTIA/conf/hestia.conf


#----------------------------------------------------------#
#                    Verifications                         #
#----------------------------------------------------------#

check_args '1' "$#" 'USER'
is_format_valid 'user'
user_str=$(grep "^$user:" /etc/passwd |egrep "rssh|nologin")
if [ -z "$user_str" ]; then
    exit
fi

# Do not create chroot for syslog user
if [ $user = "syslog" ]; then
    exit
fi

# Get current users and split into array
ssh_users=$(grep -A1 "^# Hestia SFTP Chroot" /etc/ssh/sshd_config | sed -n 2p | sed 's/Match User //')
IFS=',' read -r -a users <<< "$ssh_users"

# Check if jail is already enabled
if [[ " ${users[@]} " =~ " ${user} " ]]; then
    if [[ -d /home/$user && ! -n "$(find /home/$user -user root -print -prune -o -prune)" ]]; then
       chown root:root /home/$user
    fi
    exit;
fi

#----------------------------------------------------------#
#                       Action                             #
#----------------------------------------------------------#

# Add user to array
users+=($user)

# Write new user list to config
users=$(IFS=',';echo "${users[*]// /|}";IFS=$' \t\n')
sed -i "s/$ssh_users/$users/g" /etc/ssh/sshd_config

# Set home folder permission to root
if [ -d "/home/$user" ]; then
    chown root:root /home/$user
fi

#----------------------------------------------------------#
#                       Hestia                             #
#----------------------------------------------------------#

# Restart ssh service
if [ "$restart" = 'no' ]; then
    # Skip restart of SSH daemon
    echo "" > /dev/null 2>&1
else
    service ssh restart > /dev/null 2>&1
fi

# Logging
log_event "$OK" "$ARGUMENTS"

exit