diff --git a/runopts.h b/runopts.h index f7c869d..41c60fb 100644 --- a/runopts.h +++ b/runopts.h @@ -114,6 +114,8 @@ typedef struct svr_runopts { buffer * banner; char * pidfile; + char * forced_command; + } svr_runopts; extern svr_runopts svr_opts; diff --git a/svr-chansession.c b/svr-chansession.c index bfaf7f6..8c6f3a2 100644 --- a/svr-chansession.c +++ b/svr-chansession.c @@ -671,8 +671,16 @@ static int sessioncommand(struct Channel *channel, struct ChanSess *chansess, } } - /* take public key option 'command' into account */ - svr_pubkey_set_forced_command(chansess); + + /* take global command into account */ + if (svr_opts.forced_command) { + chansess->original_command = chansess->cmd ? : m_strdup(""); + chansess->cmd = m_strdup(svr_opts.forced_command); + } else { + /* take public key option 'command' into account */ + svr_pubkey_set_forced_command(chansess); + } + #ifdef LOG_COMMANDS if (chansess->cmd) { diff --git a/svr-runopts.c b/svr-runopts.c index 8f60059..8d1fa6b 100644 --- a/svr-runopts.c +++ b/svr-runopts.c @@ -79,6 +79,7 @@ static void printhelp(const char * progname) { #ifdef ENABLE_SVR_REMOTETCPFWD "-k Disable remote port forwarding\n" "-a Allow connections to forwarded ports from any host\n" + "-c command Force executed command\n" #endif "-p [address:]port\n" " Listen on specified tcp port (and optionally address),\n" @@ -125,6 +126,7 @@ void svr_getopts(int argc, char ** argv) { /* see printhelp() for options */ svr_opts.bannerfile = NULL; svr_opts.banner = NULL; + svr_opts.forced_command = NULL; svr_opts.forkbg = 1; svr_opts.norootlogin = 0; svr_opts.noauthpass = 0; @@ -177,6 +179,9 @@ void svr_getopts(int argc, char ** argv) { case 'b': next = &svr_opts.bannerfile; break; + case 'c': + next = &svr_opts.forced_command; + break; case 'd': case 'r': next = &keyfile;