(CommandList children: [ (Assignment keyword: Assign_None pairs: [(assign_pair lhs:(LhsName name:tid) op:Equal rhs:{(DQ ('forced command'))} spids:[7])] spids: [7] ) (C {(cp)} {($ VSub_Name '$OBJ') (/sshd_proxy)} {($ VSub_Name '$OBJ') (/sshd_proxy_bak)}) (C {(cp)} {(/dev/null)} {($ VSub_Name '$OBJ') (/authorized_keys_) ($ VSub_Name '$USER')}) (ForEach iter_name: t iter_words: [{(${ VSub_Name SSH_KEYTYPES)}] do_arg_iter: False body: (DoGroup children: [ (SimpleCommand words: [{(printf)} {(SQ <'command="true" '>)}] redirects: [ (Redir op_id: Redir_DGreat fd: -1 arg_word: {($ VSub_Name '$OBJ') (/authorized_keys_) ($ VSub_Name '$USER')} spids: [50] ) ] ) (SimpleCommand words: [{(cat)} {($ VSub_Name '$OBJ') (/) ($ VSub_Name '$t') (.pub)}] redirects: [ (Redir op_id: Redir_DGreat fd: -1 arg_word: {($ VSub_Name '$OBJ') (/authorized_keys_) ($ VSub_Name '$USER')} spids: [63] ) ] ) ] spids: [41 69] ) spids: [35 39] ) (ForEach iter_name: p iter_words: [{(${ VSub_Name SSH_PROTOCOLS)}] do_arg_iter: False body: (DoGroup children: [ (C {(trace)} {(DQ ('forced command in key option proto ') ($ VSub_Name '$p'))}) (AndOr children: [ (C {(${ VSub_Name SSH)} {(-) ($ VSub_Name '$p')} {(-F)} {($ VSub_Name '$OBJ') (/ssh_proxy)} {(somehost)} {(false)} {(EscapedLiteralPart token:<Lit_EscapedChar '\\ '>)} ) (C {(fail)} {(DQ ('forced command in key proto ') ($ VSub_Name '$p'))}) ] op_id: Op_DPipe ) ] spids: [83 121] ) spids: [77 81] ) (C {(cp)} {(/dev/null)} {($ VSub_Name '$OBJ') (/authorized_keys_) ($ VSub_Name '$USER')}) (ForEach iter_name: t iter_words: [{(${ VSub_Name SSH_KEYTYPES)}] do_arg_iter: False body: (DoGroup children: [ (SimpleCommand words: [{(printf)} {(SQ <'command="false" '>)}] redirects: [ (Redir op_id: Redir_DGreat fd: -1 arg_word: {($ VSub_Name '$OBJ') (/authorized_keys_) ($ VSub_Name '$USER')} spids: [152] ) ] ) (SimpleCommand words: [{(cat)} {($ VSub_Name '$OBJ') (/) ($ VSub_Name '$t') (.pub)}] redirects: [ (Redir op_id: Redir_DGreat fd: -1 arg_word: {($ VSub_Name '$OBJ') (/authorized_keys_) ($ VSub_Name '$USER')} spids: [166] ) ] ) ] spids: [143 172] ) spids: [137 141] ) (C {(cp)} {($ VSub_Name '$OBJ') (/sshd_proxy_bak)} {($ VSub_Name '$OBJ') (/sshd_proxy)}) (SimpleCommand words: [{(echo)} {(DQ ('ForceCommand true'))}] redirects: [ (Redir op_id: Redir_DGreat fd: -1 arg_word: {($ VSub_Name '$OBJ') (/sshd_proxy)} spids: [189] ) ] ) (ForEach iter_name: p iter_words: [{(${ VSub_Name SSH_PROTOCOLS)}] do_arg_iter: False body: (DoGroup children: [ (C {(trace)} {(DQ ('forced command in sshd_config overrides key option proto ') ($ VSub_Name '$p'))} ) (AndOr children: [ (C {(${ VSub_Name SSH)} {(-) ($ VSub_Name '$p')} {(-F)} {($ VSub_Name '$OBJ') (/ssh_proxy)} {(somehost)} {(false)} {(EscapedLiteralPart token:<Lit_EscapedChar '\\ '>)} ) (C {(fail)} {(DQ ('forced command in key proto ') ($ VSub_Name '$p'))}) ] op_id: Op_DPipe ) ] spids: [206 244] ) spids: [200 204] ) (C {(cp)} {($ VSub_Name '$OBJ') (/sshd_proxy_bak)} {($ VSub_Name '$OBJ') (/sshd_proxy)}) (SimpleCommand words: [{(echo)} {(DQ ('ForceCommand false'))}] redirects: [ (Redir op_id: Redir_DGreat fd: -1 arg_word: {($ VSub_Name '$OBJ') (/sshd_proxy)} spids: [261] ) ] ) (SimpleCommand words: [{(echo)} {(DQ ('Match User ') ($ VSub_Name '$USER'))}] redirects: [ (Redir op_id: Redir_DGreat fd: -1 arg_word: {($ VSub_Name '$OBJ') (/sshd_proxy)} spids: [273] ) ] ) (SimpleCommand words: [{(echo)} {(DQ (' ForceCommand true'))}] redirects: [ (Redir op_id: Redir_DGreat fd: -1 arg_word: {($ VSub_Name '$OBJ') (/sshd_proxy)} spids: [284] ) ] ) (ForEach iter_name: p iter_words: [{(${ VSub_Name SSH_PROTOCOLS)}] do_arg_iter: False body: (DoGroup children: [ (C {(trace)} {(DQ ('forced command with match proto ') ($ VSub_Name '$p'))}) (AndOr children: [ (C {(${ VSub_Name SSH)} {(-) ($ VSub_Name '$p')} {(-F)} {($ VSub_Name '$OBJ') (/ssh_proxy)} {(somehost)} {(false)} {(EscapedLiteralPart token:<Lit_EscapedChar '\\ '>)} ) (C {(fail)} {(DQ ('forced command in key proto ') ($ VSub_Name '$p'))}) ] op_id: Op_DPipe ) ] spids: [301 339] ) spids: [295 299] ) ] )