in reply to Run only if it the request is originating from a specific machine
My ssh server sets up some env vars:
$ ssh user@host set | grep -i ssh SSH_CLIENT='1.2.3.4 52714 22' SSH_CONNECTION='1.2.3.4 52714 2.3.4.5 22'
1.2.3.4:52714 is the ssh client
2.3.4.5:22 is the ssh server
Of course, those can be faked. (e.g. ssh oracle@dbhost1 "SSH_CLIENT='127.0.0.1 1234 22' /opt/oracle/runroot.pl")
|
|---|