82 lines
2.2 KiB
Plaintext
82 lines
2.2 KiB
Plaintext
|
#!/bin/sh
|
||
|
|
# Apply defaults from /etc/gnupg/gpgconf.conf to all users -*- sh -*-
|
||
|
|
#
|
||
|
|
# Copyright 2007 Free Software Foundation, Inc.
|
||
|
|
#
|
||
|
|
# This file is free software; as a special exception the author gives
|
||
|
|
# unlimited permission to copy and/or distribute it, with or without
|
||
|
|
# modifications, as long as this notice is preserved.
|
||
|
|
#
|
||
|
|
# This file is distributed in the hope that it will be useful, but
|
||
|
|
# WITHOUT ANY WARRANTY, to the extent permitted by law; without even the
|
||
|
|
# implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
|
||
|
|
|
||
|
|
PGM=applygnupgdefaults
|
||
|
|
errorfile=
|
||
|
|
|
||
|
|
error () {
|
||
|
|
echo "$PGM: $*" >&2
|
||
|
|
[ -n "$errorfile" ] && echo "$PGM: $*" >>$errorfile
|
||
|
|
}
|
||
|
|
|
||
|
|
info () {
|
||
|
|
echo "$PGM: $*" >&2
|
||
|
|
}
|
||
|
|
|
||
|
|
if [ -n "$1" ]; then
|
||
|
|
echo "usage: $PGM" >&2
|
||
|
|
exit 1
|
||
|
|
fi
|
||
|
|
|
||
|
|
# Cleanup on exit
|
||
|
|
cleanup ()
|
||
|
|
{
|
||
|
|
[ -n "$errorfile" -a -f "$errorfile" ] && rm "$errorfile"
|
||
|
|
}
|
||
|
|
trap cleanup EXIT SIGINT SIGHUP SIGPIPE
|
||
|
|
errorfile=$(mktemp "/tmp/$PGM.log.XXXXXX")
|
||
|
|
[ -n "$errorfile" -a -f "$errorfile" ] || exit 2
|
||
|
|
|
||
|
|
# Check whether we can use getent
|
||
|
|
if getent --help </dev/null >/dev/null 2>&1 ; then
|
||
|
|
cat_passwd='getent passwd'
|
||
|
|
else
|
||
|
|
cat_passwd='cat /etc/passwd'
|
||
|
|
info "please note that only users from /etc/passwd are processed"
|
||
|
|
fi
|
||
|
|
|
||
|
|
if [ ! -f /etc/gnupg/gpgconf.conf ]; then
|
||
|
|
error "global configuration file \`/etc/gnupg/gpgconf.conf' does not exist"
|
||
|
|
exit 1
|
||
|
|
fi
|
||
|
|
if [ ! -f /etc/shells ]; then
|
||
|
|
error "missing file \`/etc/shells'"
|
||
|
|
exit 1
|
||
|
|
fi
|
||
|
|
|
||
|
|
if [ $(id -u) -ne 0 ]; then
|
||
|
|
error "needs to be run as root"
|
||
|
|
exit 1
|
||
|
|
fi
|
||
|
|
|
||
|
|
${cat_passwd} \
|
||
|
|
| while IFS=: read -r user dmy_a uid dmy_c dmy_d home shell dmy_rest; do
|
||
|
|
# Process only entries with a valid login shell
|
||
|
|
grep </etc/shells "^$shell" 2>/dev/null >/dev/null || continue
|
||
|
|
# and with an pre-existing gnupg home directory
|
||
|
|
[ -d "$home/.gnupg" ] || continue
|
||
|
|
# but not root
|
||
|
|
[ "${uid:-0}" -eq 0 ] && continue
|
||
|
|
info "running \"gpgconf --apply-defaults\" for $user"
|
||
|
|
if su -l -s /bin/sh \
|
||
|
|
-c 'gpgconf --apply-defaults && echo SUCCESS' $user \
|
||
|
|
| tail -1 | grep ^SUCCESS >/dev/null ; then
|
||
|
|
:
|
||
|
|
else
|
||
|
|
error "failed to update gnupg defaults for $user"
|
||
|
|
fi
|
||
|
|
done
|
||
|
|
|
||
|
|
[ "$(wc -c <$errorfile)" -gt 0 ] && exit 1
|
||
|
|
exit 0
|