mirror of
https://github.com/galaxyproject/galaxy.git
synced 2026-09-21 22:06:53 +08:00
bernt@informatik.uni-leipzig.de
074b90d55e
- system_user_pwent: undefined return value when KeyError - external_chown_script: * typo * subprocess instead of os.subprocess
52 lines
1.5 KiB
Python
Executable File
52 lines
1.5 KiB
Python
Executable File
#!/usr/bin/env python
|
|
import os
|
|
import subprocess
|
|
import sys
|
|
|
|
# you may configure the paths below which modifications are allowed.
|
|
# should contain the full paths to job_working_directory and new_file_path.
|
|
# if set to None every file can be modified by the script.
|
|
# this can increase security in particular if write access to this
|
|
# script is removed by the admin.
|
|
#
|
|
# ALLOWED_PATHS = [ "job_working_directory", "new_file_path" ]
|
|
ALLOWED_PATHS = None
|
|
|
|
|
|
def validate_parameters():
|
|
if len(sys.argv) < 4:
|
|
sys.stderr.write("usage: %s path user_name gid\n" % sys.argv[0])
|
|
exit(1)
|
|
|
|
path = os.path.abspath( sys.argv[1] )
|
|
if ALLOWED_PATHS is None:
|
|
allowed = True
|
|
else:
|
|
allowed = False
|
|
for p in ALLOWED_PATHS:
|
|
if path.startswith( p ):
|
|
allowed = True
|
|
break
|
|
if not allowed:
|
|
sys.stderr.write( "owner and group modifications in %s are not allowed\n" % path )
|
|
sys.exit( 1 )
|
|
|
|
galaxy_user_name = sys.argv[2]
|
|
gid = sys.argv[3]
|
|
|
|
return path, galaxy_user_name, gid
|
|
|
|
|
|
def main():
|
|
path, galaxy_user_name, gid = validate_parameters()
|
|
for cmd in [[ 'chown', '-Rh', galaxy_user_name, path ], [ 'chgrp', '-Rh', gid, path ]]:
|
|
p = subprocess.Popen(cmd, shell=False, stdout=subprocess.PIPE, stderr=subprocess.PIPE)
|
|
(stdoutdata, stderrdata) = p.communicate()
|
|
exitcode = p.returncode
|
|
if exitcode != 0:
|
|
sys.exit("external_chown_script: could not chown\ncmd was %s\n" % " ".join(cmd))
|
|
|
|
|
|
if __name__ == "__main__":
|
|
main()
|