X-Git-Url: https://feistymeow.org/gitweb/?a=blobdiff_plain;f=scripts%2Fsecurity%2Fcool_permissionator.sh;h=c6f9bd86cdd319a6fd6f5535067ff47e86010a59;hb=f62e2be533f0fb38bbec46212163c0b88b104ba1;hp=e17f87a92b45af7ade605f19fe386b7f5f118e1a;hpb=baf5d7c693e351bd775114380dc0111bc3e4028e;p=feisty_meow.git diff --git a/scripts/security/cool_permissionator.sh b/scripts/security/cool_permissionator.sh index e17f87a9..c6f9bd86 100644 --- a/scripts/security/cool_permissionator.sh +++ b/scripts/security/cool_permissionator.sh @@ -10,6 +10,9 @@ function reapply_cool_permissions() { local cooluser="$1"; shift +#hmmm: check for non empty name. + local homebase="/home/$cooluser" + # first build a list of dirs based on their location in /home/archives. local arch_builder="archons basement codebarn games imaginations musix pooling prewar_toaster stuffing toaster walrus" local ARCHIVE_TOP=/home/archives @@ -20,56 +23,64 @@ function reapply_cool_permissions() done #echo arch addin now is: $arch_addin + # now another round with similar setup, to ensure we get any directories + # that actually live out in /z but not in /home/archives. + ARCHIVE_TOP=/z + for dirname in $arch_builder; do + arch_addin+="$ARCHIVE_TOP/$dirname " + done +#echo arch addin now is: $arch_addin + # special case that makes our software hierarchy folder, if it doesn't exist. # everything else is only re-permed if it exists. if [ ! -d "$DEFAULT_FEISTYMEOW_ORG_DIR" ]; then sudo mkdir "$DEFAULT_FEISTYMEOW_ORG_DIR" - exit_on_error "making directory: $DEFAULT_FEISTYMEOW_ORG_DIR" + continue_on_error "making directory: $DEFAULT_FEISTYMEOW_ORG_DIR" fi # fix some permissions for important security considerations. - if [ -d $HOME/.ssh ]; then - harsh_perm $HOME/.ssh + if [ -d $homebase/.ssh ]; then + harsh_perm $homebase/.ssh fi #hmmm: consider adding feisty meow apex to the dirname list below. # iterate across the list of dirs we want cooluser to own and change their ownership. - for dirname in $HOME \ + for dirname in $homebase \ $DEFAULT_FEISTYMEOW_ORG_DIR \ /usr/local/${cooluser} \ /home/games \ $arch_addin; do - if [ -d "$dirname" ]; then + if [ -d "$dirname" -o -L "$dirname" ]; then echo "revising ownership on '$dirname'" sudo chown -R ${cooluser}:${cooluser} "$dirname" - exit_on_error "chowning for ${cooluser}: $dirname" + continue_on_error "chowning for ${cooluser}: $dirname" fi done # special case for archives directory in stuffing. if [ -d /z/stuffing -o -L /z/stuffing ]; then sudo chown ${cooluser}:${cooluser} /z/ - exit_on_error "chowning /z for ${cooluser}" + continue_on_error "chowning /z for ${cooluser}" sudo chmod g+rx,o+rx /z - exit_on_error "chmodding /z/ for ${cooluser}" + continue_on_error "chmodding /z/ for ${cooluser}" sudo chown ${cooluser}:${cooluser} /z/stuffing/ - exit_on_error "chowning /z/stuffing for ${cooluser}" + continue_on_error "chowning /z/stuffing for ${cooluser}" sudo chmod g+rx,o-rwx /z/stuffing - exit_on_error "chmodding /z/stuffing for ${cooluser}" + continue_on_error "chmodding /z/stuffing for ${cooluser}" pushd /z/stuffing &>/dev/null if [ -d archives -o -L archives ]; then sudo chown ${cooluser}:${cooluser} archives/ - exit_on_error "chowning /z/stuffing/archives for ${cooluser}" + continue_on_error "chowning /z/stuffing/archives for ${cooluser}" sudo chmod -R g+rwx archives - exit_on_error "chmodding /z/stuffing/archives for ${cooluser}" + continue_on_error "chmodding /z/stuffing/archives for ${cooluser}" fi popd &>/dev/null fi # make the log files readable by normal humans. sudo bash $FEISTY_MEOW_SCRIPTS/security/normal_perm.sh /var/log - exit_on_error "setting normal perms on /var/log" + continue_on_error "setting normal perms on /var/log" } # this block should execute when the script is actually run, rather @@ -77,16 +88,12 @@ function reapply_cool_permissions() # this runs the cool permission applier on the current user. if [[ $0 =~ .*cool_permissionator\.sh.* ]]; then -echo A THISDIR="$( \cd "$(\dirname "$0")" && /bin/pwd )" -echo B export FEISTY_MEOW_APEX="$( \cd "$THISDIR/../.." && \pwd )" -echo B.2 source "$THISDIR/../core/launch_feisty_meow.sh" - exit_on_error "sourcing the feisty meow launcher" -echo C - reapply_cool_permissions $(logname) - exit_on_error "reapplying cool permissions on $(logname)" -echo D + continue_on_error "sourcing the feisty meow launcher" + coolio="$USER" + reapply_cool_permissions "$coolio" + continue_on_error "reapplying cool permissions on $coolio" fi