mirror of
https://github.com/containers/podman.git
synced 2025-09-13 18:54:02 +08:00
3a76772bb1
Grab latest fixes from subpackages Including fixes for usernamespace chowning retaining file attributes Better logging of error messages. Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
78 lines
2.3 KiB
Go
78 lines
2.3 KiB
Go
// +build !windows
|
|
|
|
package graphdriver
|
|
|
|
import (
|
|
"fmt"
|
|
"os"
|
|
"syscall"
|
|
|
|
"github.com/containers/storage/pkg/idtools"
|
|
"github.com/containers/storage/pkg/system"
|
|
)
|
|
|
|
func platformLChown(path string, info os.FileInfo, toHost, toContainer *idtools.IDMappings) error {
|
|
sysinfo := info.Sys()
|
|
if st, ok := sysinfo.(*syscall.Stat_t); ok {
|
|
// Map an on-disk UID/GID pair from host to container
|
|
// using the first map, then back to the host using the
|
|
// second map. Skip that first step if they're 0, to
|
|
// compensate for cases where a parent layer should
|
|
// have had a mapped value, but didn't.
|
|
uid, gid := int(st.Uid), int(st.Gid)
|
|
if toContainer != nil {
|
|
pair := idtools.IDPair{
|
|
UID: uid,
|
|
GID: gid,
|
|
}
|
|
mappedUid, mappedGid, err := toContainer.ToContainer(pair)
|
|
if err != nil {
|
|
if (uid != 0) || (gid != 0) {
|
|
return fmt.Errorf("error mapping host ID pair %#v for %q to container: %v", pair, path, err)
|
|
}
|
|
mappedUid, mappedGid = uid, gid
|
|
}
|
|
uid, gid = mappedUid, mappedGid
|
|
}
|
|
if toHost != nil {
|
|
pair := idtools.IDPair{
|
|
UID: uid,
|
|
GID: gid,
|
|
}
|
|
mappedPair, err := toHost.ToHost(pair)
|
|
if err != nil {
|
|
return fmt.Errorf("error mapping container ID pair %#v for %q to host: %v", pair, path, err)
|
|
}
|
|
uid, gid = mappedPair.UID, mappedPair.GID
|
|
}
|
|
if uid != int(st.Uid) || gid != int(st.Gid) {
|
|
stat, err := os.Lstat(path)
|
|
if err != nil {
|
|
return fmt.Errorf("%s: lstat(%q): %v", os.Args[0], path, err)
|
|
}
|
|
cap, err := system.Lgetxattr(path, "security.capability")
|
|
if err != nil && err != system.ErrNotSupportedPlatform {
|
|
return fmt.Errorf("%s: Lgetxattr(%q): %v", os.Args[0], path, err)
|
|
}
|
|
|
|
// Make the change.
|
|
if err := syscall.Lchown(path, uid, gid); err != nil {
|
|
return fmt.Errorf("%s: chown(%q): %v", os.Args[0], path, err)
|
|
}
|
|
// Restore the SUID and SGID bits if they were originally set.
|
|
if (stat.Mode()&os.ModeSymlink == 0) && stat.Mode()&(os.ModeSetuid|os.ModeSetgid) != 0 {
|
|
if err := os.Chmod(path, stat.Mode()); err != nil {
|
|
return fmt.Errorf("%s: chmod(%q): %v", os.Args[0], path, err)
|
|
}
|
|
}
|
|
if cap != nil {
|
|
if err := system.Lsetxattr(path, "security.capability", cap, 0); err != nil {
|
|
return fmt.Errorf("%s: Lsetxattr(%q): %v", os.Args[0], path, err)
|
|
}
|
|
}
|
|
|
|
}
|
|
}
|
|
return nil
|
|
}
|