Martchus
/
devtools
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Allow us to properly drop permissions in the chroot via sudo 

Use sudo to drop permissions and build as "nobody" in the chroot

Signed-off-by: Aaron Griffin <aaronmgriffin@gmail.com>
This commit is contained in:
Aaron Griffin 2007-10-07 12:31:22 -05:00
parent a336e5a91c
commit 34ee028d04
1 changed files with 22 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

30
makechrootpkg
View File

@ -33,7 +33,7 @@ usage ()
echo "" echo ""
echo "The chroot shell 'root' directory must be created via the following" echo "The chroot shell 'root' directory must be created via the following"
echo "command:" echo "command:"
echo " mkarchroot \$CHROOT_SHELL base base-devel" echo " mkarchroot \$CHROOT_SHELL base base-devel sudo"
echo "" echo ""
echo "Default makepkg args: $MAKEPKG_ARGS" echo "Default makepkg args: $MAKEPKG_ARGS"
exit 1 exit 1
@ -54,8 +54,8 @@ fi
if [ ! -d "$chrootdir/root" ]; then if [ ! -d "$chrootdir/root" ]; then
echo "Missing \$CHROOT_SHELL root directory." echo "Missing \$CHROOT_SHELL root directory."
echo "Try using: mkarchroot \$CHROOT_SHELL base base-devel" echo "Try using: mkarchroot \$CHROOT_SHELL base base-devel sudo"
exit 1 usage
fi fi
[ -d "$chrootdir/rw" ] || mkdir "$chrootdir/rw" [ -d "$chrootdir/rw" ] || mkdir "$chrootdir/rw"
@ -76,12 +76,26 @@ trap 'cleanup' 1 2 15
echo "moving build files to chroot" echo "moving build files to chroot"
[ -d "$uniondir/build" ] || mkdir "$uniondir/build" [ -d "$uniondir/build" ] || mkdir "$uniondir/build"
( source PKGBUILD
cat <<EOF cp PKGBUILD "$uniondir/build/"
#!/bin/sh for f in ${source[@]}; do
su nobody if [ -f "$f" ]; then
cp "$f" "$uniondir/build/"
fi
done
if ! grep "^nobody" "$uniondir/etc/sudoers" >/dev/null 2>&1; then
echo "allowing 'nobody' sudo rights in the chroot"
echo "nobody ALL=(ALL) NOPASSWD: ALL" >> $uniondir/etc/sudoers
fi
#This is a little gross, but this way the script is recreated every time in the
#rw portion of the union
(cat <<EOF
#!/bin/bash
export LANG=$LOCALE
cd /build cd /build
makepkg $MAKEPKG_ARGS sudo -u nobody makepkg "$MAKEPKG_ARGS"
EOF EOF
) > "$uniondir/chrootbuild" ) > "$uniondir/chrootbuild"
chmod +x "$uniondir/chrootbuild" chmod +x "$uniondir/chrootbuild"