randogoth/svarbox
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

selinux fix, gitignores, ensure home folder

Browse source
This commit is contained in:
randogoth 2025-10-19 19:17:06 +03:00
parent 7f955b3923
commit 2826b7e645
7 changed files with 86 additions and 11 deletions
Download patch file Download diff file Expand all files Collapse all files

72
scripts/start-services.sh
View file

@ -6,6 +6,78 @@ TELNET_LOGIN="${TELNET_LOGIN:-/bin/login}"
TELNETD_BIN="${TELNETD_BIN:-/bin/busybox}"
ENABLE_TELNET="${ENABLE_TELNET:-1}"
ensure_dosuser_home() {
local dos_entry dos_home dos_uid dos_gid owner_uid owner_gid
local dos_user="dosuser"
if ! dos_entry="$(getent passwd "${dos_user}")"; then
echo "start-dos-services: unable to locate ${dos_user} account" >&2
exit 1
fi
dos_home="$(printf '%s\n' "${dos_entry}" | cut -d: -f6)"
dos_uid="$(printf '%s\n' "${dos_entry}" | cut -d: -f3)"
dos_gid="$(printf '%s\n' "${dos_entry}" | cut -d: -f4)"
if [ -z "${dos_home}" ]; then
echo "start-dos-services: ${dos_user} home directory not defined" >&2
exit 1
fi
if [ ! -d "${dos_home}" ]; then
if ! install -d -m 755 -o "${dos_user}" -g "${dos_user}" "${dos_home}"; then
echo "start-dos-services: failed to create ${dos_home}" >&2
exit 1
fi
fi
if runuser -u "${dos_user}" -- test -w "${dos_home}" 2>/dev/null; then
return
fi
if ! owner_uid="$(stat -c '%u' "${dos_home}")"; then
echo "start-dos-services: warning: unable to stat ${dos_home}" >&2
return
fi
if ! owner_gid="$(stat -c '%g' "${dos_home}")"; then
echo "start-dos-services: warning: unable to read group for ${dos_home}" >&2
return
fi
if [ "${owner_uid}" -ne "${dos_uid}" ] || [ "${owner_gid}" -ne "${dos_gid}" ]; then
echo "start-dos-services: adjusting ownership on ${dos_home} to ${dos_uid}:${dos_gid}" >&2
if ! chown -R "${dos_user}:${dos_user}" "${dos_home}" 2>/dev/null; then
echo "start-dos-services: warning: failed to adjust ownership on ${dos_home} (continuing; check volume permissions)" >&2
fi
fi
if runuser -u "${dos_user}" -- test -w "${dos_home}" 2>/dev/null; then
return
fi
if ! chmod u+rwx "${dos_home}" 2>/dev/null; then
echo "start-dos-services: warning: unable to update permissions on ${dos_home}" >&2
fi
if runuser -u "${dos_user}" -- test -w "${dos_home}" 2>/dev/null; then
return
fi
if command -v setfacl >/dev/null 2>&1; then
if setfacl -m "u:${dos_user}:rwx" "${dos_home}" 2>/dev/null; then
if runuser -u "${dos_user}" -- test -w "${dos_home}" 2>/dev/null; then
return
fi
else
echo "start-dos-services: warning: failed to grant ACL permissions on ${dos_home}" >&2
fi
fi
echo "start-dos-services: warning: ${dos_home} remains unwritable by ${dos_user}; ensure the bind mount allows UID ${dos_uid} to write." >&2
}
ensure_dosuser_home
if [ "$ENABLE_TELNET" = "1" ]; then
if [ ! -x "$TELNETD_BIN" ]; then
echo "Telnet disabled: telnetd binary not found at $TELNETD_BIN" >&2