use rrsync to restrict rsync access

[schsh.git] / makeschsh

diff --git a/makeschsh b/makeschsh
index 0dbb0aab2edc77427cb3362512317ce954722287..0c661452ea12015f6685e7ed1aae69620bde28db 100755 (executable)
--- a/makeschsh
+++ b/makeschsh
@@ -1,4 +1,4 @@
-#!/usr/bin/python
+#!/usr/bin/python3

 #~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~#
 # Configuration
 schsh = "/usr/local/bin/schsh"
 #~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~#
 # Configuration
 schsh = "/usr/local/bin/schsh"


@@ -12,7 +12,7 @@ chroots = "/var/lib/schsh"
 import os, sys, subprocess, pwd, grp
 
 if os.getuid() != 0:
 import os, sys, subprocess, pwd, grp
 
 if os.getuid() != 0:

-       print "Run this a root, please."
+       print("Run this a root, please.")

        sys.exit(1)
 
 
        sys.exit(1)
 
 


@@ -23,40 +23,41 @@ def setup(name):
        userpw = pwd.getpwnam(name)
        
        # schroot configuration
        userpw = pwd.getpwnam(name)
        
        # schroot configuration

-       with open("/etc/schroot/chroot.d/user-"+name, "w") as f:
-               print >>f, """[user-{0}]
+       with open("/etc/schroot/chroot.d/schsh-"+name, "w") as f:
+               print("""[schsh-{0}]

 type=directory
 directory={1}
 users={0}
 type=directory
 directory={1}
 users={0}

-profile=user
-setup.fstab=user/user-{0}.fstab
-""".format(name, chroot)
-       with open("/etc/schroot/user/user-"+name+".fstab", "w") as f:
-               print >>f, """# <file system> <mount point>   <type>  <options>       <dump>  <pass>
-/bin          \t/bin          \tnone  \trw,bind       \t0     \t0
-/lib          \t/lib          \tnone  \trw,bind       \t0     \t0
-/usr/bin      \t/usr/bin      \tnone  \trw,bind       \t0     \t0
-/usr/lib      \t/usr/lib      \tnone  \trw,bind       \t0     \t0
-/home/{0}/data\t/data         \tnone  \trw,bind       \t0     \t0
-""".replace(' ', '').format(name) # need to remove spaces so schroot does not complain
+profile=schsh
+setup.fstab=schsh/{0}.fstab
+""".format(name, chroot), file=f)
+       with open("/etc/schroot/schsh/"+name+".fstab", "w") as f:
+               # no spaces, schroot does not like them
+               print("# <file system> <mount point>   <type>  <options>       <dump>  <pass>", file=f)
+               # system folders
+               for folder in ("/lib", "/lib64", "/usr/bin", "/usr/lib", "/usr/lib64", "/usr/share/", "/usr/local/bin"):
+                       if os.path.exists(folder):
+                               print("{0}\t{0}\tnone\trw,bind\t0\t0".format(folder), file=f)
+               # user folder
+               print("/home/{0}/data\t/data\tnone\trw,bind\t0\t0".format(name), file=f)

        
        # setup the schroot directory
        os.mkdir(chroot)
        
        # setup the schroot directory
        os.mkdir(chroot)

-       for folder in ["etc", "dev", "bin", "usr", "data"]:
+       for folder in ["etc", "dev", "data"]:

                os.mkdir(os.path.join(chroot, folder))
        
        # setup /etc/passwd and /etc/group
        with open(os.path.join(chroot, "etc", "passwd"), "w") as f:
                os.mkdir(os.path.join(chroot, folder))
        
        # setup /etc/passwd and /etc/group
        with open(os.path.join(chroot, "etc", "passwd"), "w") as f:

-               print >>f, "root:x:0:0:root:/root:/bin/bash"
-               print >>f, "{0}:x:{1}:{2}:,,,:/data:/bin/false".format(name, userpw.pw_uid, userpw.pw_gid)
+               print("root:x:0:0:root:/root:/bin/bash", file=f)
+               print("{0}:x:{1}:{2}:,,,:/data:/bin/false".format(name, userpw.pw_uid, userpw.pw_gid), file=f)

        with open(os.path.join(chroot, "etc", "group"), "w") as f:
        with open(os.path.join(chroot, "etc", "group"), "w") as f:

-               print >>f, "root:x:0:"
+               print("root:x:0:", file=f)

                usergrp = grp.getgrgid(userpw.pw_gid)
                usergrp = grp.getgrgid(userpw.pw_gid)

-               print >>f, "{0}:x:{1}:".format(usergrp.gr_name, usergrp.gr_gid)
+               print("{0}:x:{1}:".format(usergrp.gr_name, usergrp.gr_gid), file=f)

                if group:
                        groupgrp = grp.getgrnam(group)
                        assert usergrp.gr_gid != groupgrp.gr_gid
                if group:
                        groupgrp = grp.getgrnam(group)
                        assert usergrp.gr_gid != groupgrp.gr_gid

-                       print >>f, "{0}:x:{1}:{2}".format(groupgrp.gr_name, groupgrp.gr_gid, name)
+                       print("{0}:x:{1}:{2}".format(groupgrp.gr_name, groupgrp.gr_gid, name), file=f)

        
        # user configuration
        if userpw.pw_shell != schsh:
        
        # user configuration
        if userpw.pw_shell != schsh:


@@ -67,8 +68,8 @@ setup.fstab=user/user-{0}.fstab
        # done!
 
 if len(sys.argv) <= 1:
        # done!
 
 if len(sys.argv) <= 1:

-       print "Usage: %s <usernames>" % sys.argv[0]
+       print("Usage: %s <usernames>" % sys.argv[0])

 else:
        for name in sys.argv[1:]:
 else:
        for name in sys.argv[1:]:

-               print "Setting up",name
+               print("Setting up",name)

                setup(name)
                setup(name)