Roxen.git/ server/ modules/ filesystems/ filesystem.pike

2000-03-07

2000-03-07 22:42:17 by Martin Stjernholm <mast@lysator.liu.se>

• 5e5fd60ddbf07623c4a731fc21490ed3ec6f46f8 (104 lines) (+31/-73) ^{[ Show | Annotate ]}
  Branch: 5.2

Removed the exclusion of Privs code when running threaded; Privs works
(although not very efficiently) with threads nowadays since it uses
_disable_threads().

Rev: server/modules/filesystems/filesystem.pike:1.70

8:   inherit "roxenlib";   inherit "socket";    - constant cvs_version= "$Id: filesystem.pike,v 1.69 2000/03/07 21:15:36 mast Exp $"; + constant cvs_version= "$Id: filesystem.pike,v 1.70 2000/03/07 22:42:17 mast Exp $";   constant thread_safe=1;      #include <module.h>
90:    "will be able to retrieve them.");       defvar("dir", 1, "Enable directory listings per default", TYPE_FLAG|VAR_MORE, -  "If set, you have to create a file named .www_not_browsable (" -  "or .nodiraccess) in a directory to disable directory listings." +  "If set, you have to create a file named .www_not_browsable " +  "or .nodiraccess in a directory to disable directory listings."    " If unset, a file named .www_browsable in a directory will "    "_enable_ directory listings.\n");   
125:       defvar("access_as_user", 0, "Access file as the logged in user",    TYPE_FLAG|VAR_MORE, -  "EXPERIMENTAL. Access file as the logged in user.<br>\n" -  "This is useful for eg named-ftp."); +  "Access file as the logged in user. This is useful for eg " +  "named-ftp.<br>\n" +  "WARNING: This can have severe impact on performance when using " +  "threads, since all threads need to be locked every time such " +  "an access is done.");       defvar("no_symlinks", 0, "Forbid access to symlinks", TYPE_FLAG|VAR_MORE, -  "EXPERIMENTAL.\n" +     "Forbid access to paths containing symbolic links.<br>\n"    "NOTE: This can cause *alot* of lstat system-calls to be performed "    "and can make the server much slower.");
161:      void start()   { - #ifdef THREADS -  if(QUERY(access_as_user)) -  report_warning("It is not possible to use 'Access as user' when " -  "running with threads. Remove -DENABLE_THREADS from " -  "the start script if you really need this function\n"); - #endif -  +     path = QUERY(searchpath);    stat_cache = QUERY(stat_cache);    internal_files = map (QUERY (internal_files) / ",", String.trim_whites);
196:    (fs=cache_lookup("stat_cache",path+f)))    return fs[0];    - #ifndef THREADS +     object privs;    if (((int)id->misc->uid) && ((int)id->misc->gid) &&    (QUERY(access_as_user))) {    // NB: Root-access is prevented.    privs=Privs("Statting file", (int)id->misc->uid, (int)id->misc->gid );    } - #endif +        fs = file_stat(path + f); /* No security currently in this function */ - #ifndef THREADS +     privs = 0; - #endif +     if(!stat_cache)    return fs;    cache_set("stat_cache", path+f, ({fs}));
240:       object privs;    - #ifndef THREADS +     if (((int)id->misc->uid) && ((int)id->misc->gid) &&    (QUERY(access_as_user))) {    // NB: Root-access is prevented.    privs=Privs("Getting dir", (int)id->misc->uid, (int)id->misc->gid );    } - #endif +        if(!(dir = get_dir( path + f ))) {    privs = 0;
486:    return 0;    }    } - #ifndef THREADS +  +  TRACE_ENTER("Opening file \"" + f + "\"", 0); +     object privs;    if (((int)id->misc->uid) && ((int)id->misc->gid) &&    (QUERY(access_as_user))) {    // NB: Root-access is prevented.    privs=Privs("Getting file", (int)id->misc->uid, (int)id->misc->gid );    } - #endif -  -  TRACE_ENTER("Opening file \"" + f + "\"", 0); +     o = open( f, "r" ); -  - #ifndef THREADS +     privs = 0; - #endif +        if(!o || (QUERY(no_symlinks) && (contains_symlinks(path, oldf))))    {
546:    mkdirs++;    object privs;    - // #ifndef THREADS // Ouch. This is is _needed_. Well well... +     if (((int)id->misc->uid) && ((int)id->misc->gid)) {    // NB: Root-access is prevented.    privs=Privs("Creating directory",    (int)id->misc->uid, (int)id->misc->gid );    } - // #endif +        if (QUERY(no_symlinks) && (contains_symlinks(path, oldf))) {    privs = 0;
562:    return http_low_answer(403, "<h2>Permission denied.</h2>");    }    -  TRACE_ENTER("MKDIR: Accepted", 0); -  +     int code = mkdir( f ); -  +     privs = 0; -  +  +  TRACE_ENTER("MKDIR: Accepted", 0); +     if (code) {    chmod(f, 0777 & ~(id->misc->umask || 022));    TRACE_LEAVE("MKDIR: Success");
614:       object privs;    - // #ifndef THREADS // Ouch. This is is _needed_. Well well... +     if (((int)id->misc->uid) && ((int)id->misc->gid)) {    // NB: Root-access is prevented.    privs=Privs("Saving file", (int)id->misc->uid, (int)id->misc->gid );    } - // #endif +        if (QUERY(no_symlinks) && (contains_symlinks(path, oldf))) {    privs = 0;
629:    return http_low_answer(403, "<h2>Permission denied.</h2>");    }    -  TRACE_ENTER("PUT: Accepted", 0); -  +     rm( f );    mkdirhier( f );   
646:    }    }    +  object to = open(f, "wct"); +  privs = 0; +  +  TRACE_ENTER("PUT: Accepted", 0); +     /* Clear the stat-cache for this file */    if (stat_cache) {    cache_set("stat_cache", f, 0);    }    -  object to = open(f, "wct"); -  -  privs = 0; -  +     if(!to)    {    id->misc->error_code = 403;
725:       object privs;    - // #ifndef THREADS // Ouch. This is is _needed_. Well well... +     if (((int)id->misc->uid) && ((int)id->misc->gid)) {    // NB: Root-access is prevented.    privs=Privs("CHMODing file", (int)id->misc->uid, (int)id->misc->gid );    } -  // #endif +        if (QUERY(no_symlinks) && (contains_symlinks(path, oldf))) {    privs = 0;
739:    return http_low_answer(403, "<h2>Permission denied.</h2>");    }    +  array err = catch(chmod(f, id->misc->mode & 0777)); +  privs = 0; +     chmods++;       TRACE_ENTER("CHMOD: Accepted", 0);
746:    if (stat_cache) {    cache_set("stat_cache", f, 0);    } - #ifdef DEBUG -  werror(sprintf("CHMODing file "+f+" to 0%o\n", id->misc->mode)); - #endif -  array err = catch(chmod(f, id->misc->mode & 0777)); -  privs = 0; +        if(err)    {
809:    return 0;    }    -  moves++; -  +     object privs;    - // #ifndef THREADS // Ouch. This is is _needed_. Well well... +     if (((int)id->misc->uid) && ((int)id->misc->gid)) {    // NB: Root-access is prevented.    privs=Privs("Moving file", (int)id->misc->uid, (int)id->misc->gid );    } - // #endif +        if (QUERY(no_symlinks) &&    ((contains_symlinks(path, oldf)) ||
829:    return http_low_answer(403, "<h2>Permission denied.</h2>");    }    +  int code = mv(movefrom, f); +  privs = 0; +  +  moves++; +     TRACE_ENTER("MV: Accepted", 0);       /* Clear the stat-cache for this file */ - #ifdef __NT__ -  // if(movefrom[-1] == '/') -  // movefrom = move_from[..strlen(movefrom)-2]; - #endif +     if (stat_cache) {    cache_set("stat_cache", movefrom, 0);    cache_set("stat_cache", f, 0);    } - #ifdef DEBUG -  werror("Moving file "+movefrom+" to "+ f+"\n"); - #endif +     -  int code = mv(movefrom, f); -  privs = 0; -  +     if(!code)    {    id->misc->error_code = 403;
922:    }       object privs; -  - // #ifndef THREADS // Ouch. This is is _needed_. Well well... +     if (((int)id->misc->uid) && ((int)id->misc->gid)) {    // NB: Root-access is prevented.    privs=Privs("Moving file", (int)id->misc->uid, (int)id->misc->gid );    } - // #endif +        if (QUERY(no_symlinks) &&    ((contains_symlinks(path, f)) ||
939:    return http_low_answer(403, "<h2>Permission denied.</h2>");    }    +  int code = mv(f, moveto); +  privs = 0; +     TRACE_ENTER("MOVE: Accepted", 0);       moves++;       /* Clear the stat-cache for this file */ - #ifdef __NT__ -  // if(movefrom[-1] == '/') -  // movefrom = move_from[..strlen(movefrom)-2]; - #endif +     if (stat_cache) {    cache_set("stat_cache", moveto, 0);    cache_set("stat_cache", f, 0);    } - #ifdef DEBUG -  werror("Moving file " + f + " to " + moveto + "\n"); - #endif +     -  int code = mv(f, moveto); -  privs = 0; -  +     if(!code)    {    id->misc->error_code = 403;