#!/bin/bash

hvconfig_pre()
{
    install -v -m700 -d /var/lib/sshd
    chown -v root:sys /var/lib/sshd

    groupadd -f sshd
    hv_useradd -c sshd-privsep -d /var/lib/sshd -g sshd -s /bin/false sshd

    CONFIGURE_OPTS="\
        ${CONFIGURE_OPTS} \
        --sysconfdir=/etc/ssh \
        --datadir=/usr/share/sshd \
        --with-pam \
        --libexecdir=/usr/lib/openssh \
        --with-md5-passwords \
        --with-privsep-path=/var/lib/sshd"
}

hvbuild_post()
{
    # Disabling root logins
    sed -i -e "s!^#\(PermitRootLogin\).*!\1 no!g" /etc/ssh/sshd_config

    # Enabling X11 forwarding
    echo "XAuthLocation /usr/bin/xauth" >> /etc/ssh/sshd_config
    sed -i -e "s!^#\(X11Forwarding\).*!\1 yes!g" /etc/ssh/sshd_config
    sed -i -e "s!^#\(ForwardAgent\).*!\1 yes!g" /etc/ssh/ssh_config
    sed -i -e "s!^#\(ForwardX11\).*!\1 yes!g" /etc/ssh/ssh_config

    # Setting MaxAuthTries to 2
    sed -i -e "s!^[#]*MaxAuthTries.*!MaxAuthTries 3!g" /etc/ssh/sshd_config

    install -v -m740 ${SCRDIR}/bootscripts/sshd /etc/rc.d/init.d
    bootscript_add_rc3 sshd 25 70
}