|
|
|
|
@ -20,30 +20,30 @@ SYSCONF="${ROOTFS}${SYSCONF}"
|
|
|
|
|
SOURCE=${SYSCONF}/config; [[ -f ${SOURCE} ]] && . ${SOURCE} 2>/dev/null
|
|
|
|
|
SOURCE=${SYSCONF}/system; [[ -f ${SOURCE} ]] && . ${SOURCE} 2>/dev/null
|
|
|
|
|
|
|
|
|
|
[[ -n $1 && -n $2 ]] && AUTHPAM[$1]="$2"
|
|
|
|
|
if [[ -n ${AUTHPAM[@]} && ${AUTHPAM[@],,} != @(disable|no|none|off) ]]; then
|
|
|
|
|
# TODO: Сделать отработку по параметру загруженному, убрать парсинг
|
|
|
|
|
AUTHPAM_PROFILE=$(grep -h '^AUTHPAM\[' ${ROOTFS}/usr/lib/ublinux/default ${ROOTFS}/etc/ublinux/system | tail -1 | sed -E 's/AUTHPAM\[([a-z]*)\].*/\1/') #'
|
|
|
|
|
PROFILE_FEATURE=$(tr ',;' " " <<< ${AUTHPAM[${AUTHPAM_PROFILE}]})
|
|
|
|
|
${CMD_CHROOT} /usr/bin/authselect select ${AUTHPAM_PROFILE} ${PROFILE_FEATURE} --force --nobackup --quiet
|
|
|
|
|
fi
|
|
|
|
|
|
|
|
|
|
# if [[ -n ${AUTHPAM[@]} && ${AUTHPAM[@],,} != "disable" && ${AUTHPAM} != "-" && ${AUTHPAM,} != "no" && ${AUTHPAM,,} != "off" && ${SYSTEMBOOT_STATEMODE,,} =~ ^"sandbox" ]]; then
|
|
|
|
|
# [[ ${#AUTHPAM[@]} -gt 1 ]] && unset AUTHPAM[minimal]
|
|
|
|
|
# for AUTHPAM_PROFILE in "${!AUTHPAM[@]}"; do
|
|
|
|
|
# AUTHPAM_CURRENT_PROFILE=$(authselect current --raw)
|
|
|
|
|
# [[ $? != 0 ]] && unset AUTHPAM_CURRENT_PROFILE
|
|
|
|
|
# read -a AUTHPAM_CURRENT_PROFILE <<< ${AUTHPAM_CURRENT_PROFILE}
|
|
|
|
|
# PROFILE_FEATURE=$(tr ',;' " " <<< ${AUTHPAM[${AUTHPAM_PROFILE}]})
|
|
|
|
|
# if [[ -z ${AUTHPAM_CURRENT_PROFILE} ]]; then
|
|
|
|
|
# authselect select ${AUTHPAM_PROFILE} ${PROFILE_FEATURE} --force --nobackup --quiet
|
|
|
|
|
# else
|
|
|
|
|
# if [[ ${AUTHPAM_PROFILE} == ${AUTHPAM_CURRENT_PROFILE[0]} ]]; then
|
|
|
|
|
# authselect enable-feature ${PROFILE_FEATURE} --force --nobackup --quiet
|
|
|
|
|
# else
|
|
|
|
|
# authselect select ${AUTHPAM_PROFILE} ${PROFILE_FEATURE} --force --nobackup --quiet
|
|
|
|
|
# fi
|
|
|
|
|
#
|
|
|
|
|
# fi
|
|
|
|
|
# done
|
|
|
|
|
# fi
|
|
|
|
|
exec_authpam(){
|
|
|
|
|
[[ $1 == @("set="|"set+="|"set++="|"set-="|"set--="|"remove") ]] && COMMAND=$1 && shift
|
|
|
|
|
[[ -n ${COMMAND} ]] || COMMAND="set="
|
|
|
|
|
[[ $(declare -p AUTHPAM 2>/dev/null) =~ "declare -A" ]] || declare -A AUTHPAM
|
|
|
|
|
local PARAM="$@"
|
|
|
|
|
AUTHSELECT_LIST_ALL=$(${CMD_CHROOT} /usr/bin/authselect list)
|
|
|
|
|
AUTHPAM_FEATURE=${AUTHPAM[${AUTHPAM[0]}]//,/ }; AUTHPAM_FEATURE=${AUTHPAM_FEATURE//;/ }
|
|
|
|
|
if [[ ${COMMAND} == @("set="|"set+="|"set++=") ]]; then
|
|
|
|
|
if [[ ${AUTHPAM[0]} != @(""|disable|no|none|off) ]] \
|
|
|
|
|
&& [[ ${AUTHSELECT_LIST_ALL} =~ (^|$'\n')([^$'\n'$])+[[:blank:]]+${AUTHPAM[0]}[[:blank:]]+([^$'\n'$])+($'\n'|$) ]] \
|
|
|
|
|
&& [[ ${PARAM} =~ '['${AUTHPAM[0]}']=' || ${PARAM} =~ ^'AUTHPAM='${AUTHPAM[0]}$ ]]; then
|
|
|
|
|
${CMD_CHROOT} /usr/bin/authselect select ${AUTHPAM[0]} ${AUTHPAM_FEATURE} --force --nobackup --quiet
|
|
|
|
|
fi
|
|
|
|
|
elif [[ ${COMMAND} == @("set-="|"set--="|"remove") ]]; then
|
|
|
|
|
if [[ ${AUTHPAM[0]} != @(""|disable|no|none|off) ]]; then
|
|
|
|
|
${CMD_CHROOT} /usr/bin/authselect select ${AUTHPAM[0]} ${AUTHPAM_FEATURE} --force --nobackup --quiet
|
|
|
|
|
fi
|
|
|
|
|
fi
|
|
|
|
|
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
################
|
|
|
|
|
##### MAIN #####
|
|
|
|
|
################
|
|
|
|
|
|
|
|
|
|
exec_authpam $@
|
|
|
|
|
|
