3 # a library file for redoing file ownership and permissions as we feel is
4 # appropriate. this approach is a little bit specific to our way of doing
5 # things, but it does handle a lot of important fixes everyone would want,
6 # like making ~/.ssh really secure.
8 # cleans up the ownership and permissions for all of the important files and dirs.
9 function reapply_cool_permissions()
11 local cooluser="$1"; shift
13 # first build a list of dirs based on their location in /home/archives.
14 local arch_builder="archons basement codebarn games imaginations musix pooling prewar_toaster stuffing toaster walrus"
15 local ARCHIVE_TOP=/home/archives
18 for dirname in $arch_builder; do
19 arch_addin+="$ARCHIVE_TOP/$dirname "
21 #echo arch addin now is: $arch_addin
23 # special case that makes our software hierarchy folder, if it doesn't exist.
24 # everything else is only re-permed if it exists.
25 if [ ! -d "$DEFAULT_FEISTYMEOW_ORG_DIR" ]; then
26 sudo mkdir "$DEFAULT_FEISTYMEOW_ORG_DIR"
27 exit_on_error "making directory: $DEFAULT_FEISTYMEOW_ORG_DIR"
30 # fix some permissions for important security considerations.
31 if [ -d $HOME/.ssh ]; then
35 #hmmm: consider adding feisty meow apex to the dirname list below.
37 # iterate across the list of dirs we want cooluser to own and change their ownership.
38 for dirname in $HOME \
39 $DEFAULT_FEISTYMEOW_ORG_DIR \
40 /usr/local/${cooluser} \
43 if [ -d "$dirname" ]; then
44 echo "revising ownership on '$dirname'"
45 sudo chown -R ${cooluser}:${cooluser} "$dirname"
46 exit_on_error "chowning for ${cooluser}: $dirname"
50 # special case for archives directory in stuffing.
51 if [ -d /z/stuffing -o -L /z/stuffing ]; then
52 sudo chown ${cooluser}:${cooluser} /z/
53 exit_on_error "chowning /z for ${cooluser}"
54 sudo chmod g+rx,o+rx /z
55 exit_on_error "chmodding /z/ for ${cooluser}"
56 sudo chown ${cooluser}:${cooluser} /z/stuffing/
57 exit_on_error "chowning /z/stuffing for ${cooluser}"
58 sudo chmod g+rx,o-rwx /z/stuffing
59 exit_on_error "chmodding /z/stuffing for ${cooluser}"
60 pushd /z/stuffing &>/dev/null
61 if [ -d archives -o -L archives ]; then
62 sudo chown ${cooluser}:${cooluser} archives/
63 exit_on_error "chowning /z/stuffing/archives for ${cooluser}"
64 sudo chmod -R g+rwx archives
65 exit_on_error "chmodding /z/stuffing/archives for ${cooluser}"
70 # make the log files readable by normal humans.
71 sudo bash $FEISTY_MEOW_SCRIPTS/security/normal_perm.sh /var/log
72 exit_on_error "setting normal perms on /var/log"
75 # this block should execute when the script is actually run, rather
76 # than when it's just being sourced.
78 # this runs the cool permission applier on the current user.
79 if [[ $0 =~ .*cool_permissionator\.sh.* ]]; then
81 THISDIR="$( \cd "$(\dirname "$0")" && /bin/pwd )"
83 export FEISTY_MEOW_APEX="$( \cd "$THISDIR/../.." && \pwd )"
85 source "$THISDIR/../core/launch_feisty_meow.sh"
86 exit_on_error "sourcing the feisty meow launcher"
88 reapply_cool_permissions $(logname)
89 exit_on_error "reapplying cool permissions on $(logname)"