mirror of
https://github.com/sheumann/hush.git
synced 2024-08-19 13:28:57 +00:00
This change retains "or later" state! No licensing _changes_ here, only form is adjusted (article, space between "GPL" and "v2" and so on). Signed-off-by: Denys Vlasenko <vda.linux@googlemail.com>
213 lines
5.5 KiB
C
213 lines
5.5 KiB
C
/* vi: set sw=4 ts=4: */
|
|
/*
|
|
* Copyright (C) 2003 by Glenn McGrath
|
|
* SELinux support: by Yuichi Nakamura <ynakam@hitachisoft.jp>
|
|
*
|
|
* Licensed under GPLv2 or later, see file LICENSE in this source tree.
|
|
*/
|
|
|
|
#include "libbb.h"
|
|
#include "libcoreutils/coreutils.h"
|
|
|
|
#if ENABLE_FEATURE_INSTALL_LONG_OPTIONS
|
|
static const char install_longopts[] ALIGN1 =
|
|
"directory\0" No_argument "d"
|
|
"preserve-timestamps\0" No_argument "p"
|
|
"strip\0" No_argument "s"
|
|
"group\0" Required_argument "g"
|
|
"mode\0" Required_argument "m"
|
|
"owner\0" Required_argument "o"
|
|
/* autofs build insists of using -b --suffix=.orig */
|
|
/* TODO? (short option for --suffix is -S) */
|
|
#if ENABLE_SELINUX
|
|
"context\0" Required_argument "Z"
|
|
"preserve_context\0" No_argument "\xff"
|
|
"preserve-context\0" No_argument "\xff"
|
|
#endif
|
|
;
|
|
#endif
|
|
|
|
|
|
#if ENABLE_SELINUX
|
|
static void setdefaultfilecon(const char *path)
|
|
{
|
|
struct stat s;
|
|
security_context_t scontext = NULL;
|
|
|
|
if (!is_selinux_enabled()) {
|
|
return;
|
|
}
|
|
if (lstat(path, &s) != 0) {
|
|
return;
|
|
}
|
|
|
|
if (matchpathcon(path, s.st_mode, &scontext) < 0) {
|
|
goto out;
|
|
}
|
|
if (strcmp(scontext, "<<none>>") == 0) {
|
|
goto out;
|
|
}
|
|
|
|
if (lsetfilecon(path, scontext) < 0) {
|
|
if (errno != ENOTSUP) {
|
|
bb_perror_msg("warning: can't change context"
|
|
" of %s to %s", path, scontext);
|
|
}
|
|
}
|
|
|
|
out:
|
|
freecon(scontext);
|
|
}
|
|
|
|
#endif
|
|
|
|
int install_main(int argc, char **argv) MAIN_EXTERNALLY_VISIBLE;
|
|
int install_main(int argc, char **argv)
|
|
{
|
|
struct stat statbuf;
|
|
mode_t mode;
|
|
uid_t uid;
|
|
gid_t gid;
|
|
char *arg, *last;
|
|
const char *gid_str;
|
|
const char *uid_str;
|
|
const char *mode_str;
|
|
int copy_flags = FILEUTILS_DEREFERENCE | FILEUTILS_FORCE;
|
|
int opts;
|
|
int min_args = 1;
|
|
int ret = EXIT_SUCCESS;
|
|
int isdir = 0;
|
|
#if ENABLE_SELINUX
|
|
security_context_t scontext;
|
|
bool use_default_selinux_context = 1;
|
|
#endif
|
|
enum {
|
|
OPT_c = 1 << 0,
|
|
OPT_v = 1 << 1,
|
|
OPT_b = 1 << 2,
|
|
OPT_MKDIR_LEADING = 1 << 3,
|
|
OPT_DIRECTORY = 1 << 4,
|
|
OPT_PRESERVE_TIME = 1 << 5,
|
|
OPT_STRIP = 1 << 6,
|
|
OPT_GROUP = 1 << 7,
|
|
OPT_MODE = 1 << 8,
|
|
OPT_OWNER = 1 << 9,
|
|
#if ENABLE_SELINUX
|
|
OPT_SET_SECURITY_CONTEXT = 1 << 10,
|
|
OPT_PRESERVE_SECURITY_CONTEXT = 1 << 11,
|
|
#endif
|
|
};
|
|
|
|
#if ENABLE_FEATURE_INSTALL_LONG_OPTIONS
|
|
applet_long_options = install_longopts;
|
|
#endif
|
|
opt_complementary = "s--d:d--s" IF_FEATURE_INSTALL_LONG_OPTIONS(IF_SELINUX(":Z--\xff:\xff--Z"));
|
|
/* -c exists for backwards compatibility, it's needed */
|
|
/* -v is ignored ("print name of each created directory") */
|
|
/* -b is ignored ("make a backup of each existing destination file") */
|
|
opts = getopt32(argv, "cvb" "Ddpsg:m:o:" IF_SELINUX("Z:"),
|
|
&gid_str, &mode_str, &uid_str IF_SELINUX(, &scontext));
|
|
argc -= optind;
|
|
argv += optind;
|
|
|
|
#if ENABLE_SELINUX
|
|
if (opts & (OPT_PRESERVE_SECURITY_CONTEXT|OPT_SET_SECURITY_CONTEXT)) {
|
|
selinux_or_die();
|
|
use_default_selinux_context = 0;
|
|
if (opts & OPT_PRESERVE_SECURITY_CONTEXT) {
|
|
copy_flags |= FILEUTILS_PRESERVE_SECURITY_CONTEXT;
|
|
}
|
|
if (opts & OPT_SET_SECURITY_CONTEXT) {
|
|
setfscreatecon_or_die(scontext);
|
|
copy_flags |= FILEUTILS_SET_SECURITY_CONTEXT;
|
|
}
|
|
}
|
|
#endif
|
|
|
|
/* preserve access and modification time, this is GNU behaviour,
|
|
* BSD only preserves modification time */
|
|
if (opts & OPT_PRESERVE_TIME) {
|
|
copy_flags |= FILEUTILS_PRESERVE_STATUS;
|
|
}
|
|
mode = 0755; /* GNU coreutils 6.10 compat */
|
|
if (opts & OPT_MODE)
|
|
bb_parse_mode(mode_str, &mode);
|
|
uid = (opts & OPT_OWNER) ? get_ug_id(uid_str, xuname2uid) : getuid();
|
|
gid = (opts & OPT_GROUP) ? get_ug_id(gid_str, xgroup2gid) : getgid();
|
|
|
|
last = argv[argc - 1];
|
|
if (!(opts & OPT_DIRECTORY)) {
|
|
argv[argc - 1] = NULL;
|
|
min_args++;
|
|
|
|
/* coreutils install resolves link in this case, don't use lstat */
|
|
isdir = stat(last, &statbuf) < 0 ? 0 : S_ISDIR(statbuf.st_mode);
|
|
}
|
|
|
|
if (argc < min_args)
|
|
bb_show_usage();
|
|
|
|
while ((arg = *argv++) != NULL) {
|
|
char *dest = last;
|
|
if (opts & OPT_DIRECTORY) {
|
|
dest = arg;
|
|
/* GNU coreutils 6.9 does not set uid:gid
|
|
* on intermediate created directories
|
|
* (only on last one) */
|
|
if (bb_make_directory(dest, 0755, FILEUTILS_RECUR)) {
|
|
ret = EXIT_FAILURE;
|
|
goto next;
|
|
}
|
|
} else {
|
|
if (opts & OPT_MKDIR_LEADING) {
|
|
char *ddir = xstrdup(dest);
|
|
bb_make_directory(dirname(ddir), 0755, FILEUTILS_RECUR);
|
|
/* errors are not checked. copy_file
|
|
* will fail if dir is not created. */
|
|
free(ddir);
|
|
}
|
|
if (isdir)
|
|
dest = concat_path_file(last, bb_basename(arg));
|
|
if (copy_file(arg, dest, copy_flags) != 0) {
|
|
/* copy is not made */
|
|
ret = EXIT_FAILURE;
|
|
goto next;
|
|
}
|
|
if (opts & OPT_STRIP) {
|
|
char *args[4];
|
|
args[0] = (char*)"strip";
|
|
args[1] = (char*)"-p"; /* -p --preserve-dates */
|
|
args[2] = dest;
|
|
args[3] = NULL;
|
|
if (spawn_and_wait(args)) {
|
|
bb_perror_msg("strip");
|
|
ret = EXIT_FAILURE;
|
|
}
|
|
}
|
|
}
|
|
|
|
/* Set the file mode (always, not only with -m).
|
|
* GNU coreutils 6.10 is not affected by umask. */
|
|
if (chmod(dest, mode) == -1) {
|
|
bb_perror_msg("can't change %s of %s", "permissions", dest);
|
|
ret = EXIT_FAILURE;
|
|
}
|
|
#if ENABLE_SELINUX
|
|
if (use_default_selinux_context)
|
|
setdefaultfilecon(dest);
|
|
#endif
|
|
/* Set the user and group id */
|
|
if ((opts & (OPT_OWNER|OPT_GROUP))
|
|
&& lchown(dest, uid, gid) == -1
|
|
) {
|
|
bb_perror_msg("can't change %s of %s", "ownership", dest);
|
|
ret = EXIT_FAILURE;
|
|
}
|
|
next:
|
|
if (ENABLE_FEATURE_CLEAN_UP && isdir)
|
|
free(dest);
|
|
}
|
|
|
|
return ret;
|
|
}
|