X-Git-Url: http://git.iain.cx/?a=blobdiff_plain;f=opt%2Fbin%2Fbecome;h=07801c396abfec719a70d720d561e53e7c4e6d64;hb=2f4249cac9aa299fd3e2c36b7b6e17c19ff92854;hp=d95864686a727451d8f088ab52cd0098951e5689;hpb=43bd09dddc21deb45cee89c4bff4e094c9acab09;p=profile.git diff --git a/opt/bin/become b/opt/bin/become index d958646..07801c3 100755 --- a/opt/bin/become +++ b/opt/bin/become @@ -3,21 +3,42 @@ chdir=0 kerberos=0 x11=0 -while getopts ":kx" opt; do +copy=0 +dir= +while getopts ":D:cd:kx" opt; do case $opt in + D) + copy=1 + dir=$OPTARG + ;; c) chdir=1;; + d) dir=$OPTARG;; k) kerberos=1;; x) x11=1;; esac done shift $((OPTIND-1)) +srcdir=${0%/*} +[ "$srcdir" = "$0" -o "$srcdir" = "." ] && srcdir=$PWD +if [ -n "$dir" ]; then + if [ $copy = 1 ]; then + if ! cp "$srcdir/became" "$dir/became"; then + echo >&2 "Failed to copy $srcdir/became to $dir!" + exit 100 + fi + fi +else + dir=$srcdir +fi + user="$1"; shift if [ -z "$user" ]; then - echo >&2 "Usage: become [-c] [-k] [-x] " - echo >&2 "Options: -c Stay in current directory even if target user is not root." - echo >&2 " -k Delegate Kerberos credentials even if target user is not root." - echo >&2 " -x Delegate X11 cookie even if target user is not root." + echo >&2 "Usage: become [-c] [-d ] [-k] [-x] " + echo >&2 "Options: -c Stay in current directory even if target user is not root." + echo >&2 " -d Look for \"became\" script in given directory." + echo >&2 " -k Delegate Kerberos credentials even if target user is not root." + echo >&2 " -x Delegate X11 cookie even if target user is not root." exit 1 fi @@ -59,6 +80,29 @@ for candidate in "$HOME" "$PROFILE_HOME"; do [ -f "$userprofile" ] || userprofile= done +# Preserve environment variables. +ignore_environment_user=0 +for candidate in "$HOME" "$PROFILE_HOME"; do + [ -n "$candidate" ] || continue + BECOME="$candidate/.become/environment" + [ -d "$BECOME" ] || continue + + # Script to run when becoming any user. + [ -z "$allusersenvironment" ] && allusersenvironment="$BECOME/all" + [ -f "$allusersenvironment" ] || allusersenvironment= + + # Set $HOME/all sticky to ignore $PROFILE_HOME/$user. + if [ "$candidate" = "$HOME" ]; then + [ -k "$BECOME/all" ] && ignore_environment_user=1 + else + [ $ignore_environment_user = 1 ] && continue + fi + + # Environment variables to preserve when becomeing this user. + [ -z "$userenvironment" ] && userenvironment="$BECOME/$user" + [ -f "$userenvironment" ] || userenvironment= +done + file="${TMPDIR:-/tmp}/$USER.become.$user.$RANDOM.$$" umask=$(builtin umask -p) builtin umask 077 @@ -93,12 +137,18 @@ else fi echo >&3 ". ${PROFILE_HOME:-$HOME}/.bash_profile" -[ -f "$allusersprofile" ] && cat >&3 2>/dev/null "$allusersprofile" -[ -f "$userprofile" ] && cat >&3 2>/dev/null "$userprofile" +for profile in "$allusersprofile" "$userprofile"; do + [ -f "$profile" ] && cat >&3 2>/dev/null "$profile" +done +for environment in "$allusersenvironment" "$userenvironment"; do + [ -f "$environment" ] || continue + while read -d $'\n' variable; do + variable=${variable%%=*} + eval "[ -z \${$variable:+set} ] || echo >&3 \"$variable='\$$variable'\"" + done < "$environment" +done [ $chdir = 1 ] && echo >&3 2>/dev/null "cd - &>/dev/null" exec 3>&- -dir=$(dirname "$0") -[ "$dir" = "." ] && dir="$PWD" exec sudo -H -u "$user" "$dir/became" exit 111