← Back to branch summary

~azzar1/unity/add-show-desktop-key

« back to all changes in this revision

Viewing changes to www/common/jail.py

  • Committer: mattgiuca
  • Date: 2007-12-21 00:10:32 UTC
  • Revision ID: svn-v3-trunk0:2b9c9e99-6f39-0410-b283-7f802c844ae2:trunk:110
setup.py: Added to trampoline/conf.h an "allowed_uids" array. Asks the user
    for a single allowed UID.
trampoline/trampoline.c: Checks this array against the current UID who called
    the program, and exits early unless the UID is root, or on the whitelist.

Show diffs side-by-side

added added

removed removed

Lines of Context:
www/common/jail.py
 
1
import os
 
2
 
 
3
def setup(uid, jail, cwd):
 
4
    if uid == 0:
 
5
        raise Exception, 'I will not setup a root jail! Go away!'
 
6
 
 
7
    if os.getuid() != <<www-uid>>>:
 
8
        raise Exception, 'I will not setup a root jail! Go away!'
 
9
 
 
10
    # FIXME - config this
 
11
    os.chroot(os.path.join('<<jail_base>>', jail))
 
12
    os.chdir(cwd)
 
13
    os.setuid(uid)
 
14