From 06707389572888ce4595d495ebbd2652fbac60f1 Mon Sep 17 00:00:00 2001
From: unman <unman@thirdeyesecurity.org>
Date: Fri, 5 Feb 2021 14:28:53 +0000
Subject: [PATCH] qubes-ssh - client side socket from unman/qubes-sync

---
 share/qubes-ssh-forwarder.socket   | 11 +++++++++++
 share/qubes-ssh-forwarder@.service |  7 +++++++
 2 files changed, 18 insertions(+)
 create mode 100644 share/qubes-ssh-forwarder.socket
 create mode 100644 share/qubes-ssh-forwarder@.service

diff --git a/share/qubes-ssh-forwarder.socket b/share/qubes-ssh-forwarder.socket
new file mode 100644
index 0000000..ba38489
--- /dev/null
+++ b/share/qubes-ssh-forwarder.socket
@@ -0,0 +1,11 @@
+[Unit]
+Description=Forward connection to ssh over Qubes RPC
+ConditionPathExists=/var/run/qubes-service/ssh-setup
+
+[Socket]
+ListenStream=127.0.0.1:840
+BindToDevice=lo
+Accept=true
+
+[Install]
+WantedBy=multi-user.target
diff --git a/share/qubes-ssh-forwarder@.service b/share/qubes-ssh-forwarder@.service
new file mode 100644
index 0000000..9a86465
--- /dev/null
+++ b/share/qubes-ssh-forwarder@.service
@@ -0,0 +1,7 @@
+[Unit]
+Description=Forward connection to ssh over Qubes RPC
+
+[Service]
+ExecStart=/usr/bin/qrexec-client-vm '' qubes.ssh
+StandardInput=socket
+StandardOutput=inherit