1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-13 13:18:06 +03:00
samba-mirror/source3/script/tests/fake_snap.pl
David Disseldorp via samba-technical f9d4158f0b tests/fake_snap: sanitize paths
Ensure fake_snap.pl can be run in taint mode (-T), by sanitizing paths
and the PATH env. This fixes the following samba3.rpc.fsrvp selftest
failures:
Insecure dependency in mkdir while running setgid at (eval 2) line 4.
snap create failed: NT_STATUS_UNSUCCESSFUL
snap create failed for shadow copy of /home/ddiss/isms/samba/st/nt4_dc/share

Bug: https://bugzilla.samba.org/show_bug.cgi?id=12988

Signed-off-by: David Disseldorp <ddiss@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>

Autobuild-User(master): Jeremy Allison <jra@samba.org>
Autobuild-Date(master): Tue Aug 29 04:54:51 CEST 2017 on sn-devel-144
2017-08-29 04:54:50 +02:00

84 lines
1.7 KiB
Perl
Executable File

#!/usr/bin/perl -w
use strict;
use File::Path qw(rmtree);
use POSIX ();
sub _untaint_path
{
my ($path) = @_;
if ($path =~ /^(.*)$/) {
return $1;
}
die "bad path";
}
sub _create_snapshot
{
my ($base_path) = _untaint_path(shift);
my $time_str = POSIX::strftime("%Y.%m.%d-%H.%M.%S" , localtime());
my $snap_path = $base_path . "/.snapshots/\@GMT-" . $time_str;
my $ret;
$ENV{'PATH'} = '/bin:/usr/bin'; # untaint PATH
POSIX::mkdir($base_path . "/.snapshots", 0755);
# add trailing slash to src path to ensure that only contents is copied
$ret = system("rsync", "-a", "--exclude=.snapshots/", "${base_path}/",
$snap_path);
if ($ret != 0) {
print STDERR "rsync failed with $ret\n";
} else {
print "$snap_path\n";
}
return $ret;
}
sub _delete_snapshot
{
my $base_path = _untaint_path(shift);
my $snap_path = _untaint_path(shift);
# we're doing a recursive delete, so do some sanity checks
if ((index($snap_path, $base_path) != 0) || (index($snap_path, ".snapshots") == -1)) {
print STDERR "invalid snap_path: $snap_path\n";
return -1;
}
$ENV{'PATH'} = '/bin:/usr/bin'; # untaint PATH
rmtree($snap_path, {error => \my $err});
if (@$err) {
for my $diag (@$err) {
my ($file, $message) = %$diag;
if ($file eq '') {
print STDERR "rmtree error: $message\n";
} else {
print STDERR "rmtree error $file: $message\n";
}
}
return -1;
}
return 0;
}
my $ret;
my $num_args = $#ARGV + 1;
my $cmd = shift;
if (($num_args == 2) && ($cmd eq "--check")) {
$ret = 0;
} elsif (($num_args == 2) && ($cmd eq "--create")) {
$ret = _create_snapshot($ARGV[0]);
} elsif (($num_args == 3) && ($cmd eq "--delete")) {
$ret = _delete_snapshot($ARGV[0], $ARGV[1]);
} else {
print STDERR "invalid script argument\n";
$ret = -1;
}
exit $ret;