#!/usr/bin/lua5.2

local posix = require 'posix'
local aac = require 'aaudit.common'

local home = os.getenv("HOME")
local allkeys = {}
for _, keyfile in ipairs(posix.glob(("%s/keydir/*.pub"):format(home))) do
	local identity = keyfile:match("keydir/(.*).pub$")
	for sshkey in io.lines(keyfile) do
		table.insert(allkeys,
			('command="/usr/libexec/aaudit/aaudit-shell %s"'..
			 ',no-port-forwarding,no-X11-forwarding,no-agent-forwarding,no-pty %s\n')
			:format(identity, sshkey))
	end
end

aac.writefile(table.concat(allkeys), ("%s/.ssh/authorized_keys"):format(home))