mirror of
https://github.com/facebook/sapling.git
synced 2024-10-07 15:27:13 +03:00
031d0b9afc
The packages has to be installed by root but they would be installed insecurely, owned by the uid of the unprivileged user that made the package. The local user with that uid could thus write to /usr/local/bin/hg . bdist_mpkg calls out to pax to create the package, but pax do apparently not have the power to control what it is writing. Instead, patch the pax files and set their uid fields to 0 before they are wrapped in a dmg.
61 lines
1.5 KiB
Python
61 lines
1.5 KiB
Python
# fixpax - fix ownership in bdist_mpkg output
|
|
#
|
|
# Copyright 2015 Matt Mackall <mpm@selenic.com>
|
|
#
|
|
# This software may be used and distributed according to the terms of the
|
|
# MIT license (http://opensource.org/licenses/MIT)
|
|
|
|
"""Set file ownership to 0 in an Archive.pax.gz.
|
|
Suitable for fixing files bdist_mpkg output:
|
|
*.mpkg/Contents/Packages/*.pkg/Contents/Archive.pax.gz
|
|
"""
|
|
|
|
import sys, os, gzip
|
|
|
|
def fixpax(iname, oname):
|
|
i = gzip.GzipFile(iname)
|
|
o = gzip.GzipFile(oname, "w")
|
|
|
|
while True:
|
|
magic = i.read(6)
|
|
dev = i.read(6)
|
|
ino = i.read(6)
|
|
mode = i.read(6)
|
|
i.read(6) # uid
|
|
i.read(6) # gid
|
|
nlink = i.read(6)
|
|
rdev = i.read(6)
|
|
mtime = i.read(11)
|
|
namesize = i.read(6)
|
|
filesize = i.read(11)
|
|
name = i.read(int(namesize, 8))
|
|
data = i.read(int(filesize, 8))
|
|
|
|
o.write(magic)
|
|
o.write(dev)
|
|
o.write(ino)
|
|
o.write(mode)
|
|
o.write("000000")
|
|
o.write("000000")
|
|
o.write(nlink)
|
|
o.write(rdev)
|
|
o.write(mtime)
|
|
o.write(namesize)
|
|
o.write(filesize)
|
|
o.write(name)
|
|
o.write(data)
|
|
|
|
if name.startswith("TRAILER!!!"):
|
|
o.write(i.read())
|
|
break
|
|
|
|
o.close()
|
|
i.close()
|
|
|
|
if __name__ == '__main__':
|
|
for iname in sys.argv[1:]:
|
|
print 'fixing file ownership in %s' % iname
|
|
oname = sys.argv[1] + '.tmp'
|
|
fixpax(iname, oname)
|
|
os.rename(oname, iname)
|