/*
- * $Id: unix.c,v 1.18 2001-06-06 19:04:25 rufustfirefly Exp $
+ * $Id: unix.c,v 1.56 2009-10-15 12:06:07 franklahm Exp $
*
* Copyright (c) 1990,1993 Regents of The University of Michigan.
* All Rights Reserved. See COPYRIGHT.
#include <stdio.h>
#include <stdlib.h>
-#include <unistd.h>
-#include <sys/types.h>
-#include <sys/param.h>
-#include <sys/stat.h>
-#include <sys/syslog.h>
-#include <netatalk/endian.h>
+
+/* STDC check */
+#ifdef STDC_HEADERS
+#include <string.h>
+#else /* STDC_HEADERS */
+
+#ifndef HAVE_STRCHR
+#define strchr index
+#define strrchr index
+#endif /* HAVE_STRCHR */
+char *strchr (), *strrchr ();
+
+#ifndef HAVE_MEMCPY
+#define memcpy(d,s,n) bcopy ((s), (d), (n))
+#define memmove(d,s,n) bcopy ((s), (d), (n))
+#endif /* ! HAVE_MEMCPY */
+#endif /* STDC_HEADERS */
+
+#include <errno.h>
#include <dirent.h>
#include <limits.h>
+#include <sys/param.h>
+#include <sys/stat.h>
+#include <atalk/logger.h>
+#include <atalk/adouble.h>
+#include <atalk/vfs.h>
#include <atalk/afp.h>
-#include <string.h>
-#include <fcntl.h>
+#include <atalk/util.h>
+#include <atalk/unix.h>
+
#include "auth.h"
#include "directory.h"
#include "volume.h"
#include "unix.h"
+#include "fork.h"
+
+#ifdef HAVE_NFSv4_ACLS
+extern void acltoownermode(char *path, struct stat *st,uid_t uid, struct maccess *ma);
+#endif
+
/*
* Get the free space on a partition.
*/
-int ustatfs_getvolspace( vol, bfree, btotal, bsize )
- const struct vol *vol;
- VolSpace *bfree, *btotal;
- u_int32_t *bsize;
+int ustatfs_getvolspace(const struct vol *vol, VolSpace *bfree, VolSpace *btotal, u_int32_t *bsize)
{
- VolSpace maxVolSpace = (~(VolSpace)0);
-
+ VolSpace maxVolSpace = (~(VolSpace)0);
+
#ifdef ultrix
struct fs_data sfs;
#else /*ultrix*/
struct statfs sfs;
#endif /*ultrix*/
-
+
if ( statfs( vol->v_path, &sfs ) < 0 ) {
- syslog(LOG_ERR, "ustatfs_getvolspace unable to stat %s", vol->v_path);
- return( AFPERR_PARAM );
+ LOG(log_error, logtype_afpd, "ustatfs_getvolspace unable to stat %s", vol->v_path);
+ return( AFPERR_PARAM );
}
#ifdef ultrix
*bfree = (VolSpace) sfs.fd_req.bfreen;
*bsize = 1024;
-#else
+#else /* !ultrix */
*bfree = (VolSpace) sfs.f_bavail;
*bsize = sfs.f_frsize;
-#endif ultrix
+#endif /* ultrix */
if ( *bfree > maxVolSpace / *bsize ) {
*bfree = maxVolSpace;
}
#ifdef ultrix
- *btotal = (VolSpace)
- ( sfs.fd_req.btot - ( sfs.fd_req.bfree - sfs.fd_req.bfreen ));
-#else ultrix
- *btotal = (VolSpace)
- ( sfs.f_blocks - ( sfs.f_bfree - sfs.f_bavail ));
-#endif ultrix
-
- // see similar block above comments
+ *btotal = (VolSpace)
+ ( sfs.fd_req.btot - ( sfs.fd_req.bfree - sfs.fd_req.bfreen ));
+#else /* !ultrix */
+ *btotal = (VolSpace)
+ ( sfs.f_blocks - ( sfs.f_bfree - sfs.f_bavail ));
+#endif /* ultrix */
+
+ /* see similar block above comments */
if ( *btotal > maxVolSpace / *bsize ) {
*btotal = maxVolSpace;
} else {
return( AFP_OK );
}
-static __inline__ int utombits( bits )
- mode_t bits;
+static int utombits(mode_t bits)
{
int mbits;
mbits = 0;
- mbits |= ( bits & ( S_IREAD >> 6 )) ? (AR_UREAD | AR_USEARCH) : 0;
+ mbits |= ( bits & ( S_IREAD >> 6 )) ? AR_UREAD : 0;
mbits |= ( bits & ( S_IWRITE >> 6 )) ? AR_UWRITE : 0;
-/* Do we really need this?
- mbits |= ( bits & ( S_IEXEC >> 6) ) ? AR_USEARCH : 0; */
+ /* Do we really need this? */
+ mbits |= ( bits & ( S_IEXEC >> 6) ) ? AR_USEARCH : 0;
return( mbits );
}
-void utommode( stat, ma )
- struct stat *stat;
- struct maccess *ma;
+/* --------------------------------
+ cf AFP 3.0 page 63
+*/
+void utommode(struct stat *stat, struct maccess *ma)
{
- mode_t mode;
+mode_t mode;
mode = stat->st_mode;
-
ma->ma_world = utombits( mode );
mode = mode >> 3;
ma->ma_owner = utombits( mode );
+ /* ma_user is a union of all permissions but we must follow
+ * unix perm
+ */
if ( (uuid == stat->st_uid) || (uuid == 0)) {
- ma->ma_user = ma->ma_owner | AR_UOWN;
- } else if ( gmem( stat->st_gid )) {
- ma->ma_user = ma->ma_group;
- } else {
- ma->ma_user = ma->ma_world;
+ ma->ma_user = ma->ma_owner | AR_UOWN;
+ }
+ else if ( gmem( stat->st_gid )) {
+ ma->ma_user = ma->ma_group;
+ }
+ else {
+ ma->ma_user = ma->ma_world;
}
/*
* There are certain things the mac won't try if you don't have
* the "owner" bit set, even tho you can do these things on unix wiht
* only write permission. What were the things?
+ *
+ * FIXME
+ * ditto seems to care if st_uid is 0 ?
+ * was ma->ma_user & AR_UWRITE
+ * but 0 as owner is a can of worms.
*/
- if ( ma->ma_user & AR_UWRITE ) {
- ma->ma_user |= AR_UOWN;
+ if ( !stat->st_uid ) {
+ ma->ma_user |= AR_UOWN;
}
}
-
+#ifdef accessmode
+#undef accessmode
+#endif
/*
- * Calculate the mode for a directory using Posix access() calls to
- * estimate permission, a la mdw.
+ * Calculate the mode for a directory using a stat() call to
+ * estimate permission.
+ *
+ * Note: the previous method, using access(), does not work correctly
+ * over NFS.
+ *
+ * dir parameter is used by AFS
*/
-void accessmode( path, ma, dir )
- char *path;
- struct maccess *ma;
- struct dir *dir;
+void accessmode(char *path, struct maccess *ma, struct dir *dir _U_, struct stat *st)
+
{
- if ( access( path, R_OK|W_OK|X_OK ) == 0 ) {
- ma->ma_user = AR_UREAD|AR_UWRITE|AR_USEARCH|AR_UOWN;
- ma->ma_owner = AR_UREAD|AR_UWRITE|AR_USEARCH;
- } else if ( access( path, R_OK|X_OK ) == 0 ) {
- ma->ma_user = AR_UREAD|AR_USEARCH;
- ma->ma_owner = AR_UREAD|AR_USEARCH;
- } else {
- ma->ma_user = ma->ma_owner = 0;
- if ( access( path, R_OK ) == 0 ) {
- ma->ma_user |= AR_UREAD;
- ma->ma_owner |= AR_UREAD;
- }
- if ( access( path, X_OK ) == 0 ) {
- ma->ma_user |= AR_USEARCH;
- ma->ma_owner |= AR_USEARCH;
- }
- if ( access( path, W_OK ) == 0 ) {
- ma->ma_user |= AR_UWRITE|AR_UOWN;
- ma->ma_owner |= AR_UWRITE;
- }
+struct stat sb;
+
+ ma->ma_user = ma->ma_owner = ma->ma_world = ma->ma_group = 0;
+ if (!st) {
+ if (stat(path, &sb) != 0)
+ return;
+ st = &sb;
}
+ utommode( st, ma );
+#ifdef HAVE_NFSv4_ACLS
+ /* 10.5 Finder looks at OS 9 mode, so we must do some mapping */
+ acltoownermode( path, st, uuid, ma);
+#endif
}
-int gmem( gid )
- const gid_t gid;
+int gmem(const gid_t gid)
{
int i;
for ( i = 0; i < ngroups; i++ ) {
- if ( groups[ i ] == gid ) {
- return( 1 );
- }
+ if ( groups[ i ] == gid ) {
+ return( 1 );
+ }
}
return( 0 );
}
-static __inline__ mode_t mtoubits( bits )
- u_char bits;
+static mode_t mtoubits(u_char bits)
{
mode_t mode;
mode |= ( bits & AR_UREAD ) ? ( (S_IREAD | S_IEXEC) >> 6 ) : 0;
mode |= ( bits & AR_UWRITE ) ? ( (S_IWRITE | S_IEXEC) >> 6 ) : 0;
-/* I don't think there's a way to set the SEARCH bit by itself on a Mac
- mode |= ( bits & AR_USEARCH ) ? ( S_IEXEC >> 6 ) : 0; */
+ /* I don't think there's a way to set the SEARCH bit by itself on a Mac
+ mode |= ( bits & AR_USEARCH ) ? ( S_IEXEC >> 6 ) : 0; */
return( mode );
}
-mode_t mtoumode( ma )
- struct maccess *ma;
+/* ----------------------------------
+ from the finder's share windows (menu--> File--> sharing...)
+ and from AFP 3.0 spec page 63
+ the mac mode should be save somewhere
+*/
+mode_t mtoumode(struct maccess *ma)
{
mode_t mode;
mode = 0;
- mode |= mtoubits( ma->ma_owner );
+ mode |= mtoubits( ma->ma_owner |ma->ma_world);
mode = mode << 3;
- mode |= mtoubits( ma->ma_group );
+ mode |= mtoubits( ma->ma_group |ma->ma_world);
mode = mode << 3;
mode |= mtoubits( ma->ma_world );
return( mode );
}
-inline int stickydirmode(name, mode, dropbox)
- char * name;
- const mode_t mode;
- const int dropbox;
-{
- int retval;
-#ifdef DROPKLUDGE
- int uid;
-#endif /* DROPKLUDGE */
-
-/* Turn on the sticky bit if this is a drop box, also turn off the setgid bit */
- retval=0;
-#ifdef DROPKLUDGE
- if (dropbox) {
- if (mode & S_IWOTH) {
- if (mode & S_IROTH);
- else { /* if S_IWOTH and not S_IROTH */
- uid=geteuid();
- if ( seteuid(0) < 0) {
- syslog( LOG_ERR, "stickydirmode: unable to seteuid root: %m");
- }
- if ( retval=chmod( name, ( DIRBITS | mode | S_ISVTX) ) < 0) {
- syslog( LOG_ERR, "stickydirmode: chmod \"%s\": %m", name );
- return(AFPERR_ACCESS);
- } else {
-#ifdef DEBUG
- syslog( LOG_INFO, "stickydirmode: (debug) chmod \"%s\": %m", name );
-#endif /* DEBUG */
- seteuid(uid);
- } /* end getting retval */
- } /* end if not & S_IROTH */
- } else { /* end if S_IWOTH and not S_IROTH */
-#endif /* DROPKLUDGE */
- if ( (retval=chmod( name, DIRBITS | mode )) < 0 ) {
- syslog( LOG_ERR, "stickydirmode: chmod \"%s\": %m", name );
- }
-#ifdef DROPKLUDGE
- } /* end if not mode */
- } /* end checking for "dropbox" */
-#endif /* DROPKLUDGE */
- return retval;
-}
+#define EXEC_MODE (S_IXGRP | S_IXUSR | S_IXOTH)
-int setdeskmode( mode )
- const mode_t mode;
+int setdeskmode(const mode_t mode)
{
char wd[ MAXPATHLEN + 1];
struct stat st;
struct dirent *deskp, *subp;
DIR *desk, *sub;
+ if (!dir_rx_set(mode)) {
+ /* want to remove read and search access to owner it will screw the volume */
+ return -1 ;
+ }
if ( getcwd( wd , MAXPATHLEN) == NULL ) {
- return( -1 );
+ return( -1 );
}
if ( chdir( ".AppleDesktop" ) < 0 ) {
- return( -1 );
+ return( -1 );
}
if (( desk = opendir( "." )) == NULL ) {
- if ( chdir( wd ) < 0 ) {
- syslog( LOG_ERR, "setdeskmode: chdir %s: %m", wd );
- }
- return( -1 );
+ if ( chdir( wd ) < 0 ) {
+ LOG(log_error, logtype_afpd, "setdeskmode: chdir %s: %s", wd, strerror(errno) );
+ }
+ return( -1 );
}
for ( deskp = readdir( desk ); deskp != NULL; deskp = readdir( desk )) {
- if ( strcmp( deskp->d_name, "." ) == 0 ||
- strcmp( deskp->d_name, ".." ) == 0 || strlen( deskp->d_name ) > 2 ) {
- continue;
- }
- strcpy( modbuf, deskp->d_name );
- strcat( modbuf, "/" );
- m = strchr( modbuf, '\0' );
- if (( sub = opendir( deskp->d_name )) == NULL ) {
- continue;
- }
- for ( subp = readdir( sub ); subp != NULL; subp = readdir( sub )) {
- if ( strcmp( subp->d_name, "." ) == 0 ||
- strcmp( subp->d_name, ".." ) == 0 ) {
- continue;
- }
- *m = '\0';
- strcat( modbuf, subp->d_name );
- /* XXX: need to preserve special modes */
- if (stat(modbuf, &st) < 0) {
- syslog( LOG_ERR, "setdeskmode: stat %s: %m", modbuf );
- continue;
- }
-
- if (S_ISDIR(st.st_mode)) {
- if ( chmod( modbuf, DIRBITS | mode ) < 0 ) {
- syslog( LOG_ERR, "setdeskmode: chmod %s: %m", modbuf );
- }
- } else if ( chmod( modbuf, mode ) < 0 ) {
- syslog( LOG_ERR, "setdeskmode: chmod %s: %m", modbuf );
- }
+ if ( strcmp( deskp->d_name, "." ) == 0 ||
+ strcmp( deskp->d_name, ".." ) == 0 || strlen( deskp->d_name ) > 2 ) {
+ continue;
+ }
+ strcpy( modbuf, deskp->d_name );
+ strcat( modbuf, "/" );
+ m = strchr( modbuf, '\0' );
+ if (( sub = opendir( deskp->d_name )) == NULL ) {
+ continue;
+ }
+ for ( subp = readdir( sub ); subp != NULL; subp = readdir( sub )) {
+ if ( strcmp( subp->d_name, "." ) == 0 ||
+ strcmp( subp->d_name, ".." ) == 0 ) {
+ continue;
+ }
+ *m = '\0';
+ strcat( modbuf, subp->d_name );
+ /* XXX: need to preserve special modes */
+ if (stat(modbuf, &st) < 0) {
+ LOG(log_error, logtype_afpd, "setdeskmode: stat %s: %s",fullpathname(modbuf), strerror(errno) );
+ continue;
+ }
+
+ if (S_ISDIR(st.st_mode)) {
+ if ( chmod( modbuf, (DIRBITS | mode) & ~default_options.umask ) < 0 && errno != EPERM ) {
+ LOG(log_error, logtype_afpd, "setdeskmode: chmod %s: %s",fullpathname(modbuf), strerror(errno) );
+ }
+ } else if ( chmod( modbuf, mode & ~(default_options.umask | EXEC_MODE) ) < 0 && errno != EPERM ) {
+ LOG(log_error, logtype_afpd, "setdeskmode: chmod %s: %s",fullpathname(modbuf), strerror(errno) );
+ }
- }
- closedir( sub );
- /* XXX: need to preserve special modes */
- if ( chmod( deskp->d_name, DIRBITS | mode ) < 0 ) {
- syslog( LOG_ERR, "setdeskmode: chmod %s: %m", deskp->d_name );
- }
+ }
+ closedir( sub );
+ /* XXX: need to preserve special modes */
+ if ( chmod( deskp->d_name, (DIRBITS | mode) & ~default_options.umask ) < 0 && errno != EPERM ) {
+ LOG(log_error, logtype_afpd, "setdeskmode: chmod %s: %s",fullpathname(deskp->d_name), strerror(errno) );
+ }
}
closedir( desk );
if ( chdir( wd ) < 0 ) {
- syslog( LOG_ERR, "setdeskmode: chdir %s: %m", wd );
- return -1;
+ LOG(log_error, logtype_afpd, "setdeskmode: chdir %s: %s", wd, strerror(errno) );
+ return -1;
}
/* XXX: need to preserve special modes */
- if ( chmod( ".AppleDesktop", DIRBITS | mode ) < 0 ) {
- syslog( LOG_ERR, "setdeskmode: chmod .AppleDesktop: %m" );
+ if ( chmod( ".AppleDesktop", (DIRBITS | mode) & ~default_options.umask ) < 0 && errno != EPERM ) {
+ LOG(log_error, logtype_afpd, "setdeskmode: chmod %s: %s", fullpathname(".AppleDesktop"),strerror(errno) );
}
return( 0 );
}
-int setdirmode( mode, noadouble, dropbox )
- const mode_t mode;
- const int noadouble;
- const int dropbox;
+/* --------------------- */
+int setfilunixmode (const struct vol *vol, struct path* path, mode_t mode)
{
- char buf[ MAXPATHLEN + 1];
- struct stat st;
- char *m;
- struct dirent *dirp;
- DIR *dir;
+ if (!path->st_valid) {
+ of_stat(path);
+ }
- if (( dir = opendir( "." )) == NULL ) {
- syslog( LOG_ERR, "setdirmode: opendir .: %m" );
- return( -1 );
+ if (path->st_errno) {
+ return -1;
}
+
+ mode |= vol->v_fperm;
- for ( dirp = readdir( dir ); dirp != NULL; dirp = readdir( dir )) {
- if ( *dirp->d_name == '.' ) {
- continue;
- }
- if ( stat( dirp->d_name, &st ) < 0 ) {
- syslog( LOG_ERR, "setdirmode: stat %s: %m", dirp->d_name );
- continue;
- }
+ if (setfilmode( path->u_name, mode, &path->st, vol->v_umask) < 0)
+ return -1;
+ /* we need to set write perm if read set for resource fork */
+ return vol->vfs->vfs_setfilmode(vol, path->u_name, mode, &path->st);
+}
- if (S_ISREG(st.st_mode)) {
- /* XXX: need to preserve special modes */
- if (S_ISDIR(st.st_mode)) {
- if (stickydirmode(dirp->d_name, DIRBITS | mode, dropbox) < 0)
- return (-1);
- } else if (stickydirmode(dirp->d_name, mode, dropbox) < 0)
- return (-1);
- }
+
+/* --------------------- */
+int setdirunixmode(const struct vol *vol, const char *name, mode_t mode)
+{
+
+ int dropbox = (vol->v_flags & AFPVOL_DROPBOX);
+ mode |= vol->v_dperm;
+
+ if (dir_rx_set(mode)) {
+ /* extending right? dir first then .AppleDouble in rf_setdirmode */
+ if ( stickydirmode(name, DIRBITS | mode, dropbox, vol->v_umask) < 0 )
+ return -1;
}
- closedir( dir );
- if (( dir = opendir( ".AppleDouble" )) == NULL ) {
- if (noadouble)
- goto setdirmode_noadouble;
- syslog( LOG_ERR, "setdirmode: opendir .AppleDouble: %m" );
- return( -1 );
- }
- strcpy( buf, ".AppleDouble" );
- strcat( buf, "/" );
- m = strchr( buf, '\0' );
+ if (vol->vfs->vfs_setdirunixmode(vol, name, mode, NULL) < 0 && !vol_noadouble(vol)) {
+ return -1 ;
+ }
+ if (!dir_rx_set(mode)) {
+ if ( stickydirmode(name, DIRBITS | mode, dropbox, vol->v_umask) < 0 )
+ return -1;
+ }
+ return 0;
+}
+
+/* --------------------- */
+int setdirmode(const struct vol *vol, const char *name, mode_t mode)
+{
+ struct stat st;
+ struct dirent *dirp;
+ DIR *dir;
+ mode_t hf_mode;
+ int osx = vol->v_adouble == AD_VERSION2_OSX;
+ int dropbox = (vol->v_flags & AFPVOL_DROPBOX);
+
+ mode |= vol->v_dperm;
+ hf_mode = ad_hf_mode(mode);
+
+ if (dir_rx_set(mode)) {
+ /* extending right? dir first */
+ if ( stickydirmode(name, DIRBITS | mode, dropbox, vol->v_umask) < 0 )
+ return -1;
+ }
+
+ if (( dir = opendir( name )) == NULL ) {
+ LOG(log_error, logtype_afpd, "setdirmode: opendir: %s", fullpathname(name), strerror(errno) );
+ return( -1 );
+ }
+
for ( dirp = readdir( dir ); dirp != NULL; dirp = readdir( dir )) {
- if ( strcmp( dirp->d_name, "." ) == 0 ||
- strcmp( dirp->d_name, ".." ) == 0 ) {
- continue;
- }
- *m = '\0';
- strcat( buf, dirp->d_name );
+ /* FIXME */
+ if ( *dirp->d_name == '.' && (!osx || dirp->d_name[1] != '_')) {
+ continue;
+ }
+ if ( stat( dirp->d_name, &st ) < 0 ) {
+ LOG(log_error, logtype_afpd, "setdirmode: stat %s: %s",dirp->d_name, strerror(errno) );
+ continue;
+ }
- if ( stat( buf, &st ) < 0 ) {
- syslog( LOG_ERR, "setdirmode: stat %s: %m", buf );
- continue;
- }
+ if (!S_ISDIR(st.st_mode)) {
+ int setmode = (osx && *dirp->d_name == '.')?hf_mode:mode;
- if (S_ISDIR(st.st_mode)) {
- stickydirmode( buf, DIRBITS | mode, dropbox );
- } else
- stickydirmode( buf, mode, dropbox );
- } /* end for */
+ if (setfilmode(dirp->d_name, setmode, &st, vol->v_umask) < 0) {
+ LOG(log_error, logtype_afpd, "setdirmode: chmod %s: %s",dirp->d_name, strerror(errno) );
+ return -1;
+ }
+ }
+ }
closedir( dir );
+
+ if (vol->vfs->vfs_setdirmode(vol, name, mode, NULL) < 0 && !vol_noadouble(vol)) {
+ return -1 ;
+ }
- /* XXX: use special bits to tag directory permissions */
-
- /* XXX: need to preserve special modes */
- if ( stickydirmode(".AppleDouble", DIRBITS | mode, dropbox) < 0 )
- return( -1 );
-
-setdirmode_noadouble:
- /* XXX: need to preserve special modes */
- if ( stickydirmode(".", DIRBITS | mode, dropbox) < 0 )
- return( -1 );
+ if (!dir_rx_set(mode)) {
+ if ( stickydirmode(name, DIRBITS | mode, dropbox, vol->v_umask) < 0 )
+ return -1;
+ }
return( 0 );
}
-int setdeskowner( uid, gid )
- const uid_t uid;
- const gid_t gid;
+/* ----------------------------- */
+int setdeskowner(const uid_t uid, const gid_t gid)
{
char wd[ MAXPATHLEN + 1];
char modbuf[12 + 1], *m;
DIR *desk, *sub;
if ( getcwd( wd, MAXPATHLEN ) == NULL ) {
- return( -1 );
+ return( -1 );
}
if ( chdir( ".AppleDesktop" ) < 0 ) {
- return( -1 );
+ return( -1 );
}
if (( desk = opendir( "." )) == NULL ) {
- if ( chdir( wd ) < 0 ) {
- syslog( LOG_ERR, "setdeskowner: chdir %s: %m", wd );
- }
- return( -1 );
+ if ( chdir( wd ) < 0 ) {
+ LOG(log_error, logtype_afpd, "setdeskowner: chdir %s: %s", wd, strerror(errno) );
+ }
+ return( -1 );
}
for ( deskp = readdir( desk ); deskp != NULL; deskp = readdir( desk )) {
- if ( strcmp( deskp->d_name, "." ) == 0 ||
- strcmp( deskp->d_name, ".." ) == 0 ||
- strlen( deskp->d_name ) > 2 ) {
- continue;
- }
- strcpy( modbuf, deskp->d_name );
- strcat( modbuf, "/" );
- m = strchr( modbuf, '\0' );
- if (( sub = opendir( deskp->d_name )) == NULL ) {
- continue;
- }
- for ( subp = readdir( sub ); subp != NULL; subp = readdir( sub )) {
- if ( strcmp( subp->d_name, "." ) == 0 ||
- strcmp( subp->d_name, ".." ) == 0 ) {
- continue;
- }
- *m = '\0';
- strcat( modbuf, subp->d_name );
- /* XXX: add special any uid, ignore group bits */
- if ( chown( modbuf, uid, gid ) < 0 ) {
- syslog( LOG_ERR, "setdeskown: chown %s: %m", modbuf );
- }
- }
- closedir( sub );
- /* XXX: add special any uid, ignore group bits */
- if ( chown( deskp->d_name, uid, gid ) < 0 ) {
- syslog( LOG_ERR, "setdeskowner: chown %s: %m", deskp->d_name );
- }
+ if ( strcmp( deskp->d_name, "." ) == 0 ||
+ strcmp( deskp->d_name, ".." ) == 0 ||
+ strlen( deskp->d_name ) > 2 ) {
+ continue;
+ }
+ strcpy( modbuf, deskp->d_name );
+ strcat( modbuf, "/" );
+ m = strchr( modbuf, '\0' );
+ if (( sub = opendir( deskp->d_name )) == NULL ) {
+ continue;
+ }
+ for ( subp = readdir( sub ); subp != NULL; subp = readdir( sub )) {
+ if ( strcmp( subp->d_name, "." ) == 0 ||
+ strcmp( subp->d_name, ".." ) == 0 ) {
+ continue;
+ }
+ *m = '\0';
+ strcat( modbuf, subp->d_name );
+ /* XXX: add special any uid, ignore group bits */
+ if ( chown( modbuf, uid, gid ) < 0 && errno != EPERM ) {
+ LOG(log_error, logtype_afpd, "setdeskown: chown %s: %s", fullpathname(modbuf), strerror(errno) );
+ }
+ }
+ closedir( sub );
+ /* XXX: add special any uid, ignore group bits */
+ if ( chown( deskp->d_name, uid, gid ) < 0 && errno != EPERM ) {
+ LOG(log_error, logtype_afpd, "setdeskowner: chown %s: %s",
+ deskp->d_name, strerror(errno) );
+ }
}
closedir( desk );
if ( chdir( wd ) < 0 ) {
- syslog( LOG_ERR, "setdeskowner: chdir %s: %m", wd );
- return -1;
+ LOG(log_error, logtype_afpd, "setdeskowner: chdir %s: %s", wd, strerror(errno) );
+ return -1;
}
- if ( chown( ".AppleDesktop", uid, gid ) < 0 ) {
- syslog( LOG_ERR, "setdeskowner: chown .AppleDesktop: %m" );
+ if ( chown( ".AppleDesktop", uid, gid ) < 0 && errno != EPERM ) {
+ LOG(log_error, logtype_afpd, "setdeskowner: chown %s: %s", fullpathname(".AppleDouble"), strerror(errno) );
}
return( 0 );
}
+/* ----------------------------- */
+int setfilowner(const struct vol *vol, const uid_t uid, const gid_t gid, struct path* path)
+{
+
+ if (!path->st_valid) {
+ of_stat(path);
+ }
+
+ if (path->st_errno) {
+ return -1;
+ }
+
+ if ( chown( path->u_name, uid, gid ) < 0 && errno != EPERM ) {
+ LOG(log_debug, logtype_afpd, "setfilowner: chown %d/%d %s: %s",
+ uid, gid, path->u_name, strerror(errno) );
+ return -1;
+ }
+
+ if (vol->vfs->vfs_chown(vol, path->u_name, uid, gid ) < 0 && errno != EPERM) {
+ LOG(log_debug, logtype_afpd, "setfilowner: rf_chown %d/%d %s: %s",
+ uid, gid, path->u_name, strerror(errno) );
+ return -1;
+ }
-/* uid/gid == 0 need to be handled as special cases. they really mean
+ return 0;
+}
+
+/* ---------------------------------
+ * uid/gid == 0 need to be handled as special cases. they really mean
* that user/group should inherit from other, but that doesn't fit
* into the unix permission scheme. we can get around this by
* co-opting some bits. */
-int setdirowner( uid, gid, noadouble )
- const uid_t uid;
- const gid_t gid;
- const int noadouble;
+int setdirowner(const struct vol *vol, const char *name, const uid_t uid, const gid_t gid)
{
- char buf[ MAXPATHLEN + 1];
struct stat st;
- char *m;
struct dirent *dirp;
DIR *dir;
+ int osx = vol->v_adouble == AD_VERSION2_OSX;
- if (( dir = opendir( "." )) == NULL ) {
- return( -1 );
+ if (( dir = opendir( name )) == NULL ) {
+ return( -1 );
}
for ( dirp = readdir( dir ); dirp != NULL; dirp = readdir( dir )) {
- if ( *dirp->d_name == '.' ) {
- continue;
- };
- if ( stat( dirp->d_name, &st ) < 0 ) {
- syslog( LOG_ERR, "setdirowner: stat %s: %m", dirp->d_name );
- continue;
- }
- if (( st.st_mode & S_IFMT ) == S_IFREG ) {
- if ( chown( dirp->d_name, uid, gid ) < 0 ) {
- syslog( LOG_DEBUG, "setdirowner: chown %s: %m", dirp->d_name );
- /* return ( -1 ); Sometimes this is okay */
- }
- }
- }
- closedir( dir );
- if (( dir = opendir( ".AppleDouble" )) == NULL ) {
- if (noadouble)
- goto setdirowner_noadouble;
- return( -1 );
- }
- strcpy( buf, ".AppleDouble" );
- strcat( buf, "/" );
- m = strchr( buf, '\0' );
- for ( dirp = readdir( dir ); dirp != NULL; dirp = readdir( dir )) {
- if ( strcmp( dirp->d_name, "." ) == 0 ||
- strcmp( dirp->d_name, ".." ) == 0 ) {
- continue;
- }
- *m = '\0';
- strcat( buf, dirp->d_name );
- if ( chown( buf, uid, gid ) < 0 ) {
- syslog( LOG_DEBUG, "setdirowner: chown %d/%d %s: %m",
- uid, gid, buf );
- /* return ( -1 ); Sometimes this is okay */
- }
+ if ( *dirp->d_name == '.' && (!osx || dirp->d_name[1] != '_')) {
+ continue;
+ }
+ if ( stat( dirp->d_name, &st ) < 0 ) {
+ LOG(log_error, logtype_afpd, "setdirowner: stat %s: %s",
+ fullpathname(dirp->d_name), strerror(errno) );
+ continue;
+ }
+ if (( st.st_mode & S_IFMT ) == S_IFREG ) {
+ if ( chown( dirp->d_name, uid, gid ) < 0 && errno != EPERM ) {
+ LOG(log_debug, logtype_afpd, "setdirowner: chown %s: %s",
+ fullpathname(dirp->d_name), strerror(errno) );
+ /* return ( -1 ); Sometimes this is okay */
+ }
+ }
}
closedir( dir );
- /*
- * We cheat: we know that chown doesn't do anything.
- */
- if ( stat( ".AppleDouble", &st ) < 0 ) {
- syslog( LOG_ERR, "setdirowner: stat .AppleDouble: %m" );
- return( -1 );
- }
- if ( gid && gid != st.st_gid && chown( ".AppleDouble", uid, gid ) < 0 ) {
- syslog( LOG_DEBUG, "setdirowner: chown %d/%d .AppleDouble: %m",
- uid, gid);
- /* return ( -1 ); Sometimes this is okay */
+ if (vol->vfs->vfs_setdirowner(vol, name, uid, gid) < 0) {
+ return -1;
}
-
-setdirowner_noadouble:
+
if ( stat( ".", &st ) < 0 ) {
- return( -1 );
+ return( -1 );
}
- if ( gid && gid != st.st_gid && chown( ".", uid, gid ) < 0 ) {
- syslog( LOG_DEBUG, "setdirowner: chown %d/%d .: %m",
- uid, gid);
+ if ( gid && gid != st.st_gid && chown( ".", uid, gid ) < 0 && errno != EPERM ) {
+ LOG(log_debug, logtype_afpd, "setdirowner: chown %d/%d %s: %s",
+ uid, gid, fullpathname("."), strerror(errno) );
}
return( 0 );
}
+
+#if 0
+/* recursive chown()ing of a directory */
+static int recursive_chown(const char *path, uid_t uid, gid_t gid) {
+ struct stat sbuf;
+ DIR *odir = NULL;
+ struct dirent *entry;
+ char *name;
+ int ret = 0;
+ char newpath[PATH_MAX+1];
+ newpath[PATH_MAX] = '\0';
+
+ if (chown(path, uid, gid) < 0) {
+ LOG(log_error, logtype_afpd, "cannot chown() file [%s] (uid = %d): %s", path, uid, strerror(errno));
+ return -1;
+ }
+
+ if (stat(path, &sbuf) < 0) {
+ LOG(log_error, logtype_afpd, "cannot chown() file [%s] (uid = %d): %s", path, uid, strerror(errno));
+ return -1;
+ }
+
+ if (S_ISDIR(sbuf.st_mode)) {
+ odir = opendir(path);
+ if (odir == NULL) {
+ LOG(log_error, logtype_afpd, "cannot opendir() [%s] (uid = %d): %s", path, uid, strerror(errno));
+ goto recursive_chown_end;
+ }
+ while (NULL != (entry=readdir(odir)) ) {
+ name = entry->d_name;
+ if (name[0] == '.' && name[1] == '\0')
+ continue;
+ if (name[0] == '.' && name[1] == '.' && name[2] == '\0')
+ continue;
+ sprintf(newpath, "%s/%s", path, name);
+ if (recursive_chown(newpath, uid, gid) < 0)
+ ret = -1;
+ } /* while */
+ } /* if */
+
+recursive_chown_end:
+ if (odir != NULL) {
+ closedir(odir);
+ }
+ return ret;
+}
+#endif
+
+/* This is equivalent of unix rename(). */
+int unix_rename(const char *oldpath, const char *newpath)
+{
+#if 0
+ char pd_name[PATH_MAX+1];
+ int i;
+ struct stat pd_stat;
+ uid_t uid;
+#endif
+
+ if (rename(oldpath, newpath) < 0)
+ return -1;
+#if 0
+ for (i = 0; i <= PATH_MAX && newpath[i] != '\0'; i++)
+ pd_name[i] = newpath[i];
+ pd_name[i] = '\0';
+
+ while (i > 0 && pd_name[i] != '/') i--;
+ if (pd_name[i] == '/') i++;
+
+ pd_name[i++] = '.'; pd_name[i++] = '\0';
+
+ if (stat(pd_name, &pd_stat) < 0) {
+ LOG(log_error, logtype_afpd, "stat() of parent dir failed: pd_name = %s, uid = %d: %s",
+ pd_name, geteuid(), strerror(errno));
+ return 0;
+ }
+
+ /* So we have SGID bit set... */
+ if ((S_ISGID & pd_stat.st_mode) != 0) {
+ uid = geteuid();
+ if (seteuid(0) < 0)
+ LOG(log_error, logtype_afpd, "seteuid() failed: %s", strerror(errno));
+ if (recursive_chown(newpath, uid, pd_stat.st_gid) < 0)
+ LOG(log_error, logtype_afpd, "chown() of parent dir failed: newpath=%s, uid=%d: %s",
+ pd_name, geteuid(), strerror(errno));
+ seteuid(uid);
+ }
+#endif
+ return 0;
+}
+