You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
110 lines
3.4 KiB
110 lines
3.4 KiB
#!/usr/bin/perl -w
|
|
|
|
#----------------------------------------------------------------------
|
|
# copyright (C) 2011-2012 Firewall Services
|
|
# Daniel Berteaud <daniel@firewall-services.com>
|
|
#
|
|
# This program is free software; you can redistribute it and/or modify
|
|
# it under the terms of the GNU General Public License as published by
|
|
# the Free Software Foundation; either version 2 of the License, or
|
|
# (at your option) any later version.
|
|
#
|
|
# This program is distributed in the hope that it will be useful,
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
# GNU General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU General Public License
|
|
# along with this program; if not, write to the Free Software
|
|
# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
|
|
#----------------------------------------------------------------------
|
|
|
|
use strict;
|
|
use esmith::templates;
|
|
use esmith::ConfigDB;
|
|
use esmith::AccountsDB;
|
|
use File::Path qw(mkpath rmtree);
|
|
|
|
my $c = esmith::ConfigDB->open_ro;
|
|
my $a = esmith::AccountsDB->open_ro;
|
|
|
|
# Remove all the permissions
|
|
unlink(</var/lib/ajaxplorer/plugins/auth.serial/*/rights.ser>);
|
|
|
|
# Remove active sessions
|
|
unlink(</var/lib/ajaxplorer/tmp/sess_*>);
|
|
|
|
# Remove plugin cache
|
|
unlink(</var/cache/ajaxplorer/plugin*.ser>);
|
|
|
|
foreach my $user (($a->users),$a->get('admin')){
|
|
my $name = $user->key;
|
|
mkpath('/var/lib/ajaxplorer/plugins/auth.serial/' . $name);
|
|
chmod 0770, "/var/lib/ajaxplorer/plugins/auth.serial/$name";
|
|
chown '0', '102', "/var/lib/ajaxplorer/plugins/auth.serial/$name";
|
|
processTemplate(
|
|
{
|
|
TEMPLATE_PATH => "/var/lib/ajaxplorer/plugins/auth.serial/__user__/rights.ser",
|
|
MORE_DATA => {KEY=>$name},
|
|
OUTPUT_FILENAME => "/var/lib/ajaxplorer/plugins/auth.serial/$name/rights.ser",
|
|
});
|
|
}
|
|
|
|
my $ajxp = $c->get('ajaxplorer') || die "Couldn't find ajaxplorer entry in ConfigDB\n";
|
|
my $homedir = $ajxp->prop('HomeDir') || 'none';
|
|
|
|
if ($homedir eq 'enabled'){
|
|
foreach ($a->users){
|
|
my $name = $_->key;
|
|
set_user_acl($name);
|
|
}
|
|
}
|
|
elsif ($homedir eq 'users'){
|
|
foreach ($a->users){
|
|
my $name = $_->key;
|
|
if (($_->prop('AjxpHomeDir') || 'disabled') eq 'enabled'){
|
|
set_user_acl($name);
|
|
}
|
|
else{
|
|
remove_user_acl($name);
|
|
}
|
|
}
|
|
}
|
|
else{
|
|
foreach ($a->users){
|
|
my $name = $_->key;
|
|
remove_user_acl($name);
|
|
}
|
|
}
|
|
|
|
sub set_user_acl{
|
|
my $user = shift;
|
|
my $acl = `/usr/bin/getfacl /home/e-smith/files/users/$user 2>/dev/null | egrep -c '^user:(apache|www):'`;
|
|
chomp($acl);
|
|
return if ($acl > 0);
|
|
system('/usr/bin/setfacl',
|
|
'-m',
|
|
'u:www:x',
|
|
"/home/e-smith/files/users/$user");
|
|
system('/usr/bin/setfacl',
|
|
'-R',
|
|
'-m',
|
|
'u:www:rX,d:u:www:rX',
|
|
"/home/e-smith/files/users/$user/home");
|
|
}
|
|
|
|
sub remove_user_acl{
|
|
my $user = shift;
|
|
my $acl = `/usr/bin/getfacl /home/e-smith/files/users/$user 2>/dev/null | egrep -c '^user:(apache|www):'`;
|
|
chomp($acl);
|
|
return if ($acl < 1);
|
|
system('/usr/bin/setfacl',
|
|
'-R',
|
|
'-x',
|
|
'u:www,d:u:www',
|
|
"/home/e-smith/files/users/$user/home");
|
|
system('/usr/bin/setfacl',
|
|
'-x',
|
|
'u:www',
|
|
"/home/e-smith/files/users/$user");
|
|
}
|
|
|