#!/bin/sh
#
# PROVIDE: privleapd
# REQUIRE: LOGIN
# KEYWORD: shutdown

. /etc/rc.subr

name=privleapd
desc="Limited Privilege Escalation Framework"
rcvar="${name}_enable"

load_rc_config "${name}"

: ${privleapd_enable:=NO}

leapctl_cmd="/usr/local/bin/leapctl"
pidfile="/var/run/${name}.pid"
procname="/usr/local/bin/${name}"
command_interpreter="/usr/local/bin/python3.13"
command="/usr/sbin/daemon"
command_args="-cS -l authpriv -t \"${desc}\" -T \"${name}\" -p \"${pidfile}\" \"${procname}\""
extra_commands="reload"
reload_precmd="${name}_checkconf"
reload_cmd="${name}_reload"

privleapd_checkconf()
{
    "${procname}" --check-config
}

privleapd_reload()
{
    "${leapctl_cmd}" --reload
}

run_rc_command "$1"
