mirror of
https://github.com/galaxyproject/galaxy.git
synced 2026-09-19 10:51:34 +08:00
Matthias Bernt
aa200fe463
- check for external_chown_script == None - switched from string split to shlex.split - changed import order for pwd - stderr + exit -> just exit
50 lines
1.5 KiB
Python
Executable File
50 lines
1.5 KiB
Python
Executable File
#!/usr/bin/env python
|
|
import os
|
|
import sys
|
|
|
|
# you may configure the paths below which modifications are allowed.
|
|
# should contain the full paths to job_working_directory and new_file_path.
|
|
# if set to None every file can be modified by the script.
|
|
# this can increase security in particular if write access to this
|
|
# script is removed by the admin.
|
|
#
|
|
# ALLOWED_PATHS = [ "job_working_directory", "new_file_path" ]
|
|
ALLOWED_PATHS = None
|
|
|
|
|
|
def validate_paramaters():
|
|
if len(sys.argv) < 4:
|
|
sys.stderr.write("usage: %s path user_name gid\n" % sys.argv[0])
|
|
exit(1)
|
|
|
|
path = os.path.abspath( sys.argv[1] )
|
|
if ALLOWED_PATHS is None:
|
|
allowed = True
|
|
else:
|
|
allowed = False
|
|
for p in ALLOWED_PATHS:
|
|
if path.startswith( p ):
|
|
allowed = True
|
|
break
|
|
if not allowed:
|
|
sys.stderr.write( "owner and group modifications in %s are not allowed\n" % path )
|
|
sys.exit( 1 )
|
|
|
|
galaxy_user_name = sys.argv[2]
|
|
gid = sys.argv[3]
|
|
|
|
return path, galaxy_user_name, gid
|
|
|
|
|
|
def main():
|
|
path, galaxy_user_name, gid = validate_paramaters()
|
|
for cmd in [[ 'chown', '-Rh', galaxy_user_name, path ], [ 'chgrp', '-Rh', gid, path ]]:
|
|
p = os.subprocess.Popen(cmd, shell=False, stdout=os.subprocess.PIPE, stderr=os.subprocess.PIPE)
|
|
(stdoutdata, stderrdata) = p.communicate()
|
|
exitcode = p.returncode
|
|
if exitcode != 0:
|
|
sys.exit("external_chown_script: could not chown\ncmd was %s\n" % " ".join(cmd))
|
|
|
|
if __name__ == "__main__":
|
|
main()
|