# HG changeset patch # User Paul Crowley # Date 1258122832 0 # Node ID 7374d014787561ec1a9daaf58f4853358b37c4d3 # Parent 72e7ba8b41a6b53441d67a36e8be2fe5004228a5 Script docstring was full of lies - now up to date diff -r 72e7ba8b41a6 -r 7374d0147875 src/hg-ssh --- a/src/hg-ssh Fri Nov 13 12:32:43 2009 +0000 +++ b/src/hg-ssh Fri Nov 13 14:33:52 2009 +0000 @@ -14,12 +14,8 @@ hg-ssh - limit access to hg repositories reached via ssh. Part of mercurial-server. -This script is called by hg-ssh-wrapper with no arguments - everything -should be in enviroment variables: - -HG_ACCESS_RULES_PATH identifies the paths to the rule files -REMOTE_USER the remote user (which is the key used by ssh) -SSH_ORIGINAL_COMMAND the command the user was trying to run +It is called by ssh due to an entry in the authorized_keys file, +with the name for the key passed on the command line. It uses SSH_ORIGINAL_COMMAND to determine what the user was trying to do and to what repository, and then checks each rule in the rule file