src/hg-ssh
changeset 214 7374d0147875
parent 212 ab5e0e4f5a0c
child 215 584df0f2e5c7
equal deleted inserted replaced
213:72e7ba8b41a6 214:7374d0147875
    12 
    12 
    13 """
    13 """
    14 hg-ssh - limit access to hg repositories reached via ssh.  Part of
    14 hg-ssh - limit access to hg repositories reached via ssh.  Part of
    15 mercurial-server.
    15 mercurial-server.
    16 
    16 
    17 This script is called by hg-ssh-wrapper with no arguments - everything
    17 It is called by ssh due to an entry in the authorized_keys file,
    18 should be in enviroment variables:
    18 with the name for the key passed on the command line.
    19 
       
    20 HG_ACCESS_RULES_PATH identifies the paths to the rule files
       
    21 REMOTE_USER the remote user (which is the key used by ssh)
       
    22 SSH_ORIGINAL_COMMAND the command the user was trying to run
       
    23 
    19 
    24 It uses SSH_ORIGINAL_COMMAND to determine what the user was trying to
    20 It uses SSH_ORIGINAL_COMMAND to determine what the user was trying to
    25 do and to what repository, and then checks each rule in the rule file
    21 do and to what repository, and then checks each rule in the rule file
    26 in turn for a matching rule which decides what to do, defaulting to
    22 in turn for a matching rule which decides what to do, defaulting to
    27 disallowing the action.
    23 disallowing the action.