1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
|
#!/bin/sh -e
# This script can be called in the following ways:
#
# After the package was installed:
# <postinst> configure <old-version>
#
#
# If prerm fails during upgrade or fails on failed upgrade:
# <old-postinst> abort-upgrade <new-version>
#
# If prerm fails during deconfiguration of a package:
# <postinst> abort-deconfigure in-favour <new-package> <version>
# removing <old-package> <version>
#
# If prerm fails during replacement due to conflict:
# <postinst> abort-remove in-favour <new-package> <version>
# Update the initial RAM file system image
update_initramfs()
{
if [ -x /usr/sbin/update-initramfs ]; then
update-initramfs -u -k all
fi
if dpkg --compare-versions "$2" lt-nl "1.0.10-1"; then
# Make old initrd.img files unreadable too, in case they were
# created with mandos-client 1.0.8 or older.
find /boot -maxdepth 1 -name "initrd.img-*.bak"-print0 \
| xargs --null --no-run-if-empty chmod o-r
fi
}
# Add user and group
add_mandos_user(){
# Rename old "mandos" user and group
case "`getent passwd mandos`" in
*:Mandos\ password\ system,,,:/nonexistent:/bin/false)
usermod --login _mandos mandos
groupmod --new-name _mandos mandos
return
;;
esac
# Create new user and group
if ! getent passwd _mandos >/dev/null; then
adduser --system --force-badname --quiet --home /nonexistent \
--no-create-home --group --disabled-password \
--gecos "Mandos password system" _mandos
fi
}
# Create client key pair
create_key(){
if [ -r /etc/keys/mandos/pubkey.txt \
-a -r /etc/keys/mandos/seckey.txt ]; then
return 0
fi
if [ -x /usr/sbin/mandos-keygen ]; then
mandos-keygen
fi
}
case "$1" in
configure)
add_mandos_user "$@"
create_key "$@"
update_initramfs "$@"
;;
abort-upgrade|abort-deconfigure|abort-remove)
;;
*)
echo "$0 called with unknown argument '$1'" 1>&2
exit 1
;;
esac
#DEBHELPER#
exit 0
|