diff options
| author | TitanSnow <[email protected]> | 2017-05-22 19:37:24 +0800 |
|---|---|---|
| committer | TitanSnow <[email protected]> | 2017-05-22 19:37:24 +0800 |
| commit | bd775f017f77043aac5b6290c9899f7daf23e172 (patch) | |
| tree | 9415a16fbdaa99b5f33470aa66332b58b4b19e8b /xmake/core/base | |
| parent | b8e4fb467d8de881749e3bc77493728a642ff145 (diff) | |
add module privilege to manage root privilege
Diffstat (limited to 'xmake/core/base')
| -rw-r--r-- | xmake/core/base/os.lua | 6 | ||||
| -rw-r--r-- | xmake/core/base/privilege.lua | 92 |
2 files changed, 93 insertions, 5 deletions
diff --git a/xmake/core/base/os.lua b/xmake/core/base/os.lua index a56c199dd..ea6d3a9b0 100644 --- a/xmake/core/base/os.lua +++ b/xmake/core/base/os.lua @@ -653,11 +653,7 @@ end -- check run command as root function os.isroot() - - -- get it from cache - if os._ISROOT ~= nil then - return os._ISROOT - end + os._ISROOT = nil -- check it if os.uid().euid == 0 then diff --git a/xmake/core/base/privilege.lua b/xmake/core/base/privilege.lua new file mode 100644 index 000000000..5c66ba5f1 --- /dev/null +++ b/xmake/core/base/privilege.lua @@ -0,0 +1,92 @@ +--!The Make-like Build Utility based on Lua +-- +-- Licensed to the Apache Software Foundation (ASF) under one +-- or more contributor license agreements. See the NOTICE file +-- distributed with this work for additional information +-- regarding copyright ownership. The ASF licenses this file +-- to you under the Apache License, Version 2.0 (the +-- "License"); you may not use this file except in compliance +-- with the License. You may obtain a copy of the License at +-- +-- http://www.apache.org/licenses/LICENSE-2.0 +-- +-- Unless required by applicable law or agreed to in writing, software +-- distributed under the License is distributed on an "AS IS" BASIS, +-- WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +-- See the License for the specific language governing permissions and +-- limitations under the License. +-- +-- Copyright (C) 2015 - 2017, TBOOX Open Source Group. +-- +-- @author TitanSnow +-- @file privilege.lua +-- + +-- define module +local privilege = privilege or {} + +-- load modules +local os = require("base/os") + +-- store privilege +function privilege.store() + -- check if root + if not os.isroot() then + return false + end + + -- find projectdir's owner + local projectdir = xmake._PROJECT_DIR + assert(projectdir) + local owner = os.getown(projectdir) + if not owner then + -- fallback to current dir + owner = os.getown(".") + if not owner then + return false + end + end + + -- set gid + if os.gid(owner.gid).setegid_errno ~= 0 then + return false + end + + -- set uid + if os.uid(owner.uid).seteuid_errno ~= 0 then + return false + end + + -- set flag + privilege._HAS_PRIVILEGE = true + + -- ok + return true +end + +-- check if has stored privilege +function privilege.has() + return privilege._HAS_PRIVILEGE or false +end + +function privilege.get() + -- has? + if privilege._HAS_PRIVILEGE ~= true then + return false + end + + -- set uid + if os.uid(0).seteuid_errno ~= 0 then + return false + end + + -- set gid + if os.gid(0).setegid_errno ~= 0 then + return false + end + + return true +end + +-- return module +return privilege |
