thevar1able/ClickHouse
1
0
Fork 0
mirror of https://github.com/ClickHouse/ClickHouse.git synced 2024-11-22 07:31:57 +00:00
Code Issues Packages Projects Releases Wiki Activity

preserve uid gid if running with sudo

Browse Source
This commit is contained in:
Yakov Olkhovskiy 2023-03-02 00:42:02 +00:00
parent 5398865280
commit 566a0e166f
1 changed files with 28 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

28
utils/self-extracting-executable/decompressor.cpp
View File

@ -168,6 +168,24 @@ int decompress(char * input, char * output, off_t start, off_t end, size_t max_n
return 0; return 0;
} }
bool getSudoIDs(uid_t &sudo_uid, uid_t &sudo_gid)
{
sudo_uid = 0;
sudo_gid = 0;
if (getuid() || geteuid() || getenv("SUDO_USER") == nullptr || getenv("SUDO_UID") == nullptr || getenv("SUDO_GID") == nullptr)
return false;
char * str_end;
long id = strtol(getenv("SUDO_UID"), &str_end, 10);
if (*str_end == 0)
sudo_uid = static_cast<uid_t>(id);
id = strtol(getenv("SUDO_GID"), &str_end, 10);
if (*str_end == 0)
sudo_gid = static_cast<uid_t>(id);
return true;
}
/// Read data about files and decomrpess them. /// Read data about files and decomrpess them.
int decompressFiles(int input_fd, char * path, char * name, bool & have_compressed_analoge, bool & has_exec, char * decompressed_suffix, uint64_t * decompressed_umask) int decompressFiles(int input_fd, char * path, char * name, bool & have_compressed_analoge, bool & has_exec, char * decompressed_suffix, uint64_t * decompressed_umask)
@ -220,6 +238,10 @@ int decompressFiles(int input_fd, char * path, char * name, bool & have_compress
return 1; return 1;
} }
uid_t sudo_uid = 0;
uid_t sudo_gid = 0;
getSudoIDs(sudo_uid, sudo_gid);
FileData file_info; FileData file_info;
/// Decompress files with appropriate file names /// Decompress files with appropriate file names
for (size_t i = 0; i < le64toh(metadata.number_of_files); ++i) for (size_t i = 0; i < le64toh(metadata.number_of_files); ++i)
@ -319,6 +341,9 @@ int decompressFiles(int input_fd, char * path, char * name, bool & have_compress
perror("fsync"); perror("fsync");
if (0 != close(output_fd)) if (0 != close(output_fd))
perror("close"); perror("close");
if (sudo_uid && sudo_gid)
chown(file_name, sudo_uid, sudo_gid);
} }
if (0 != munmap(input, info_in.st_size)) if (0 != munmap(input, info_in.st_size))
@ -532,6 +557,9 @@ int main(int/* argc*/, char* argv[])
return 1; return 1;
} }
if (uid_t sudo_uid = 0, sudo_gid = 0; getSudoIDs(sudo_uid, sudo_gid))
chown(static_cast<char *>(self), sudo_uid, sudo_gid);
if (has_exec) if (has_exec)
{ {
#if !defined(OS_DARWIN) && !defined(OS_FREEBSD) #if !defined(OS_DARWIN) && !defined(OS_FREEBSD)