diff options
| author | Lennart Poettering <lennart@poettering.net> | 2019-03-14 17:19:30 +0100 |
|---|---|---|
| committer | The Plumber <50238977+systemd-rhel-bot@users.noreply.github.com> | 2019-12-05 15:16:49 +0100 |
| commit | 789806ac06bb13d1b579fef47dbb85f224b6dbb1 (patch) | |
| tree | f55c3d64a3cbb6f6f53bf3fc7b981dd8c58016d0 | |
| parent | 81ca39b7b38ef1d44cc146efe75bef412e7c4c97 (diff) | |
| download | systemd-789806ac06bb13d1b579fef47dbb85f224b6dbb1.tar.gz | |
core: change ownership/mode of the execution directories also for static users
It's probably unexpected if we do a recursive chown() when dynamic users
are used but not on static users.
hence, let's tweak the logic slightly, and recursively chown in both
cases, except when operating on the configuration directory.
Fixes: #11842
(cherry picked from commit 206e9864de460dd79d9edd7bedb47dee168765e1)
Resolves: #1778384
| -rw-r--r-- | src/core/execute.c | 47 |
1 files changed, 26 insertions, 21 deletions
diff --git a/src/core/execute.c b/src/core/execute.c index 46aa733937..c42300a41e 100644 --- a/src/core/execute.c +++ b/src/core/execute.c @@ -2090,37 +2090,42 @@ static int setup_exec_directory( if (r < 0) goto fail; - /* Lock down the access mode */ - if (chmod(pp, context->directories[type].mode) < 0) { - r = -errno; - goto fail; - } } else { r = mkdir_label(p, context->directories[type].mode); if (r < 0) { - struct stat st; - if (r != -EEXIST) goto fail; - if (stat(p, &st) < 0) { - r = -errno; - goto fail; - } - if (((st.st_mode ^ context->directories[type].mode) & 07777) != 0) - log_warning("%s \'%s\' already exists but the mode is different. " - "(filesystem: %o %sMode: %o)", - exec_directory_type_to_string(type), *rt, - st.st_mode & 07777, exec_directory_type_to_string(type), context->directories[type].mode & 07777); - if (!context->dynamic_user) + if (type == EXEC_DIRECTORY_CONFIGURATION) { + struct stat st; + + /* Don't change the owner/access mode of the configuration directory, + * as in the common case it is not written to by a service, and shall + * not be writable. */ + + if (stat(p, &st) < 0) { + r = -errno; + goto fail; + } + + /* Still complain if the access mode doesn't match */ + if (((st.st_mode ^ context->directories[type].mode) & 07777) != 0) + log_warning("%s \'%s\' already exists but the mode is different. " + "(File system: %o %sMode: %o)", + exec_directory_type_to_string(type), *rt, + st.st_mode & 07777, exec_directory_type_to_string(type), context->directories[type].mode & 07777); + continue; + } } } - /* Don't change the owner of the configuration directory, as in the common case it is not written to by - * a service, and shall not be writable. */ - if (type == EXEC_DIRECTORY_CONFIGURATION) - continue; + /* Lock down the access mode (we use chmod_and_chown() to make this idempotent. We don't + * specifiy UID/GID here, so that path_chown_recursive() can optimize things depending on the + * current UID/GID ownership.) */ + r = chmod_and_chown(pp ?: p, context->directories[type].mode, UID_INVALID, GID_INVALID); + if (r < 0) + goto fail; /* Then, change the ownership of the whole tree, if necessary */ r = path_chown_recursive(pp ?: p, uid, gid); |