File:  [LON-CAPA] / doc / loncapafiles / wrap_setuid.piml
Revision 1.34: download - view: text, annotated - select for diffs
Mon Jun 11 03:53:08 2018 UTC (6 years, 5 months ago) by raeburn
Branches: MAIN
CVS tags: HEAD
- Support Fedora 27 and 28.

<!DOCTYPE piml PUBLIC "-//TUX/DTD piml 1.0 Final//EN" 
	"http://lpml.sourceforge.net/DTD/piml.dtd">
<!-- wrap_setuid.piml -->
<!-- Guy Albertelli -->

<!-- $Id: wrap_setuid.piml,v 1.34 2018/06/11 03:53:08 raeburn Exp $ -->

<!--

This file is part of the LearningOnline Network with CAPA (LON-CAPA).

LON-CAPA is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation; either version 2 of the License, or
(at your option) any later version.

LON-CAPA is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
GNU General Public License for more details.

You should have received a copy of the GNU General Public License
along with LON-CAPA; if not, write to the Free Software
Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA

/home/httpd/html/adm/gpl.txt

http://www.lon-capa.org/

-->

<piml>
<targetroot>/</targetroot>
<files>
<file>
<target dist="default">/home/httpd/perl</target>
<perlscript mode="fg" dist="default">
#print("Not wrapping setuid scripts\n");
</perlscript>
<perlscript mode="fg" dist="suse9.2 suse9.3 sles9 sles10 sles11 sles12 suse10.1 suse10.2 suse10.3 suse11.1 suse11.2 suse11.3 suse11.4 suse12.1 suse12.2 suse12.3 suse13.1 suse13.2 fedora14 fedora15 fedora16 fedora17 fedora18 fedora19 fedora20 fedora21 fedora22 fedora23 fedora24 fedora25 fedora26 fedora27 fedora28 ubuntu12 ubuntu14 ubuntu16 rhes7 centos7 scientific7">

$fslist='<TARGET />';
open(FIND,  "find <TARGET /> -xdev -type f \\( -perm -04000 -o -perm -02000 \\) -print|");
while (&lt;FIND&gt;) {
    chop;
    next unless -T;
    print("Fixing ", $_, "\n");
    ($dir,$file) = m|(.*)/(.*)|;
    chdir $dir || die "Can't chdir to $dir";
    ($dev,$ino,$mode,$nlink,$uid,$gid,$rdev,$size,$atime,$mtime,$ctime,$blksize,$blocks)
     = stat($file);
    die("Can't stat $_") unless $ino;
    rename($file,".$file");
    chmod(($mode & 01777), ".$file");# wipe out set[ug]id bits
    open(C,"&gt;.tmp$$.c") || die("Can't write C program for $_");
    $real = "$dir/.$file";
    print C '
        main(argc,argv)
        int argc;
        char **argv;
        {
                execv("' . $real . '",argv);
        }
';
    close C;
    system('/usr/bin/cc', ".tmp$$.c", '-o', $file);
    die("Can't compile new $_") if $?;
    chown($uid, $gid, $file);
    chmod($mode, $file);

    unlink(".tmp$$.c");
    chdir('/');
}

</perlscript>
</file>
</files>
</piml>

FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>