templates/client/backuppc.sh.erb (17 lines of code) (raw):
#!/bin/bash
###
## backuppc.sh :: SSH backup wrapper
#
case "${SSH_ORIGINAL_COMMAND}" in
/usr/bin/rsync*|<%= scope.lookupvar('backuppc::params::tar_path') %>*<% if @system_additional_commands.count > 0 %>|<%= @system_additional_commands.join('*|') %>*<% end %> )
<%- if @sudo_prepend != '' -%>
<%= @sudo_prepend -%> sudo ${SSH_ORIGINAL_COMMAND}
<%- else -%>
sudo ${SSH_ORIGINAL_COMMAND}
<%- end -%>
;;
*)
echo "REJECTED: ${SSH_ORIGINAL_COMMAND}"
exit 1
;;
esac