diff options
author | Eelco Dolstra <eelco.dolstra@logicblox.com> | 2013-02-27T16·18+0100 |
---|---|---|
committer | Eelco Dolstra <eelco.dolstra@logicblox.com> | 2013-02-27T16·18+0100 |
commit | 0111ba98ea0a91965ebb215b408ee1c10286a245 (patch) | |
tree | 72f93b5fce1cf62f980d18e29ae535c1b0881efe /src | |
parent | b008674e4616cd2596d8b02273deb52f8bcb7d6c (diff) |
Handle hard links to other files in the output
Diffstat (limited to 'src')
-rw-r--r-- | src/libstore/local-store.cc | 32 |
1 files changed, 26 insertions, 6 deletions
diff --git a/src/libstore/local-store.cc b/src/libstore/local-store.cc index ff6b6c71ce0c..2c439a66d647 100644 --- a/src/libstore/local-store.cc +++ b/src/libstore/local-store.cc @@ -509,7 +509,11 @@ void canonicaliseTimestampAndPermissions(const Path & path) } -static void canonicalisePathMetaData_(const Path & path, uid_t fromUid) +typedef std::pair<dev_t, ino_t> Inode; +typedef set<Inode> InodesSeen; + + +static void canonicalisePathMetaData_(const Path & path, uid_t fromUid, InodesSeen & inodesSeen) { checkInterrupt(); @@ -521,10 +525,24 @@ static void canonicalisePathMetaData_(const Path & path, uid_t fromUid) has already been checked in dumpPath(). */ assert(S_ISREG(st.st_mode) || S_ISDIR(st.st_mode) || S_ISLNK(st.st_mode)); - canonicaliseTimestampAndPermissions(path, st); + /* Fail if the file is not owned by the build user. This prevents + us from messing up the ownership/permissions of files + hard-linked into the output (e.g. "ln /etc/shadow $out/foo"). + However, ignore files that we chown'ed ourselves previously to + ensure that we don't fail on hard links within the same build + (i.e. "touch $out/foo; ln $out/foo $out/bar"). */ + if (fromUid != (uid_t) -1 && st.st_uid != fromUid) { + assert(!S_ISDIR(st.st_mode)); + if (inodesSeen.find(Inode(st.st_dev, st.st_ino)) == inodesSeen.end()) + throw BuildError(format("invalid ownership on file `%1%'") % path); + mode_t mode = st.st_mode & ~S_IFMT; + assert(st.st_uid == geteuid() && (mode == 0444 || mode == 0555) && st.st_mtime == mtimeStore); + return; + } + + inodesSeen.insert(Inode(st.st_dev, st.st_ino)); - if (fromUid != (uid_t) -1 && st.st_uid != fromUid) - throw BuildError(format("invalid ownership on file `%1%'") % path); + canonicaliseTimestampAndPermissions(path, st); /* Change ownership to the current uid. If it's a symlink, use lchown if available, otherwise don't bother. Wrong ownership @@ -547,14 +565,16 @@ static void canonicalisePathMetaData_(const Path & path, uid_t fromUid) if (S_ISDIR(st.st_mode)) { Strings names = readDirectory(path); foreach (Strings::iterator, i, names) - canonicalisePathMetaData_(path + "/" + *i, fromUid); + canonicalisePathMetaData_(path + "/" + *i, fromUid, inodesSeen); } } void canonicalisePathMetaData(const Path & path, uid_t fromUid) { - canonicalisePathMetaData_(path, fromUid); + InodesSeen inodesSeen; + + canonicalisePathMetaData_(path, fromUid, inodesSeen); /* On platforms that don't have lchown(), the top-level path can't be a symlink, since we can't change its ownership. */ |