#!/bin/sh
set -e
PAM_FILE=/etc/pam.d/dosr
PAM_BACKUP=$(mktemp)
PAM_EXISTED=0
if [ -e "$PAM_FILE" ]; then
        cp "$PAM_FILE" "$PAM_BACKUP"
        PAM_EXISTED=1
fi
cleanup() {
        if [ "$PAM_EXISTED" -eq 1 ]; then
            cp "$PAM_BACKUP" "$PAM_FILE"
        else
            rm -f "$PAM_FILE"
        fi
        rm -f "$PAM_BACKUP"
}
trap cleanup EXIT

printf '%s\n' "#%PAM-1.0
        auth    [success=1 default=ignore]  pam_permit.so
        auth    requisite                   pam_permit.so
        auth    required                    pam_permit.so
        account [success=1 default=ignore]  pam_permit.so
        account requisite                   pam_permit.so
        account required                    pam_permit.so
        session [success=1 default=ignore]  pam_permit.so
        session requisite                   pam_permit.so
        session required                    pam_permit.so" > "$PAM_FILE"

dosr chsr --help

dosr cat /etc/security/rootasrole.json