sshdfilter-1.5.7 initscript, fifo style

sshdfilter (text/plain), 1.39 KB, created by Phil Turmel on 2010-09-02 16:08:56 UTC

#!/sbin/runscript
# Copyright 2010 Gentoo Foundation
# Distributed under the terms of the GNU General Public License v2
# $Header: $

export SSHDFIFO="/var/run/sshd.fifo"

depend() {
	use logger dns sshd
	need net iptables
}

start() {
	local syslogreload=0
	ebegin "Starting sshdfilter"

	# Make sure the logging FIFO exists
	if [[ ! -p "$SSHDFIFO" ]] ; then
		[[ -a "$SSHDFIFO" ]] && rm -rf "$SSHDFIFO"
		mkfifo "$SSHDFIFO"
		chmod 600 "$SSHDFIFO"
		syslogreload=1
	fi

	# Make sure the logging FIFO is configured in syslog.conf
	if ! grep -q /var/run/sshd.fifo /etc/syslog.conf ; then
		cat >>/etc/syslog.conf <<-EOF

		# Route SSHD authentication traffic to sshdfilter
		auth,authpriv.*		|/var/run/sshd.fifo
		EOF
		syslogreload=1
	fi

	# If the FIFO was created or added to syslog.conf, reload the system
	# log daemon.
	if [[ $syslogreload -eq 1 ]] ; then
		for x in sysklogd syslog-ng rsyslog ; do
			[[ -f /etc/init.d/$x ]] && /etc/init.d/$x reload
		done
	fi

	# Make sure the iptables chain exists and is configured
	iptables -L SSHD &>/dev/null || iptables -N SSHD
	iptables -L INPUT | grep -q '^SSHD ' || iptables -I INPUT -p tcp -m tcp --dport 22 -j SSHD

	# Start sshdfilter
	start-stop-daemon --start --pidfile /var/run/sshdfilter.pid.SSHD \
		--exec /usr/sbin/sshdfilter
	eend $?
}

stop() {
	ebegin "Stopping sshdfilter"
	start-stop-daemon --stop --quiet --pidfile /var/run/sshdfilter.pid.SSHD
	eend $?
}