#!/usr/bin/env perl
# -*- perl -*-

$command = $ENV{SSH_ORIGINAL_COMMAND} || "sh";

(($command =~ m/^scp\ -f/)
 || ($command eq "/usr/lib/openssh/sftp-server")
 || ($command =~ "darcs\ apply\ --all\ --repodir"))
&& exec ("sh", "-c", $command);

printf "command not allowed: $command\n";