73
73
# (Note that paths "relative" to the jail actually begin with a '/' as
74
74
# they are absolute in the jailspace)
76
return interpreter(owner, jail_dir, working_dir, filename_abs, req,
76
return interpreter(owner.unixid, jail_dir, working_dir, filename_abs, req,
89
89
self.headers = {} # Header names : values
91
def execute_cgi(interpreter, owner, jail_dir, working_dir, script_path,
91
def execute_cgi(interpreter, uid, jail_dir, working_dir, script_path,
94
94
trampoline: Full path on the local system to the CGI wrapper program
96
owner: User object of the owner of the file.
96
uid: User ID of the owner of the file.
97
97
jail_dir: Absolute path of owner's jail directory.
98
98
working_dir: Directory containing the script file relative to owner's
136
136
del os.environ[k]
137
137
for (k,v) in req.get_cgi_environ().items():
138
138
os.environ[k] = v
139
fixup_environ(req, script_path, owner)
139
fixup_environ(req, script_path)
141
141
# usage: tramp uid jail_dir working_dir script_path
142
cmd_line = [trampoline, str(owner.unixid),
143
req.config['paths']['jails']['mounts'],
144
req.config['paths']['jails']['src'],
145
req.config['paths']['jails']['template'],
146
jail_dir, working_dir, interpreter, script_path]
147
# Popen doesn't like unicode strings. It hateses them.
148
cmd_line = [(s.encode('utf-8') if isinstance(s, unicode) else s)
150
pid = subprocess.Popen(cmd_line,
142
pid = subprocess.Popen(
143
[trampoline, str(uid), req.config['paths']['jails']['mounts'],
144
req.config['paths']['jails']['src'],
145
req.config['paths']['jails']['template'],
146
jail_dir, working_dir, interpreter, script_path],
151
147
stdin=f, stdout=subprocess.PIPE, stderr=subprocess.STDOUT,
362
358
# python-server-page
365
def fixup_environ(req, script_path, user):
361
def fixup_environ(req, script_path):
366
362
"""Assuming os.environ has been written with the CGI variables from
367
363
apache, make a few changes for security and correctness.
419
415
env['SERVER_SOFTWARE'] = "IVLE/" + ivle.__version__
421
417
# Additional environment variables
422
username = user.login
418
username = split_path(req.path)[0]
423
419
env['HOME'] = os.path.join('/home', username)
425
421
class ExecutionError(Exception):
436
432
tramp_dir = os.path.split(tramp)[0]
438
434
# Fire up trampoline. Vroom, vroom.
439
cmd_line = [tramp, str(user.unixid), config['paths']['jails']['mounts'],
435
proc = subprocess.Popen(
436
[tramp, str(user.unixid), config['paths']['jails']['mounts'],
440
437
config['paths']['jails']['src'],
441
438
config['paths']['jails']['template'],
442
jail_dir, working_dir, binary] + args
443
# Popen doesn't like unicode strings. It hateses them.
444
cmd_line = [(s.encode('utf-8') if isinstance(s, unicode) else s)
446
proc = subprocess.Popen(cmd_line,
439
jail_dir, working_dir, binary] + args,
447
440
stdin=subprocess.PIPE, stdout=subprocess.PIPE,
448
stderr=subprocess.PIPE, cwd=tramp_dir, close_fds=True,
449
env={'HOME': os.path.join('/home', user.login),
450
'PATH': os.environ['PATH'],
452
'LOGNAME': user.login})
441
stderr=subprocess.PIPE, cwd=tramp_dir, close_fds=True)
454
443
(stdout, stderr) = proc.communicate()
455
444
exitcode = proc.returncode
457
446
if exitcode != 0:
458
raise ExecutionError('subprocess ended with code %d, stderr: "%s"' %
447
raise ExecutionError('subprocess ended with code %d, stderr %s' %
448
(exitcode, proc.stderr.read()))
460
449
return (stdout, stderr)