Skip to content
Snippets Groups Projects
  1. Nov 06, 2023
  2. Oct 29, 2023
  3. Oct 28, 2023
    • Reiner Hauser's avatar
      Fix comparison of KRB5CCNAME and EOS credential symlink · 2b1c6275
      Reiner Hauser authored
      We want to check if the content of $KRB5CCNAME (a string) is
      the same as the value of the EOS credential symlink. We call
      filesystem::read_symlink() to get the value of the link, but
      that returns a filesystem::path. When a path is implicitly
      converted to a string, it has a leading and trailing quote
      character.
      
      The result is that the comparison we do always fails, leading
      to the repeated execution of eosfusebind. Converting the
      path explicitly to a std::string avoids this.
      2b1c6275
  4. Oct 23, 2023
  5. Aug 28, 2023
  6. Aug 24, 2023
  7. Jan 10, 2023
  8. Mar 02, 2022
  9. Mar 01, 2022
  10. Feb 28, 2022
  11. Feb 26, 2022
    • Reiner Hauser's avatar
      Fix execution in sudo path · d013e8f3
      Reiner Hauser authored
      The LD_LIBRARY_PATH variable has to be explicitly
      passed on the sudo command line, since sudo is
      itself a suid executable.
      
      The final execvp() call has to take the program
      from the argument list, since it depends on if
      we wrap it into sudo or not. Since we
      construct the path we can use execv() and
      don't do a search in PATH.
      d013e8f3
  12. Feb 25, 2022
  13. Jan 14, 2022
  14. Dec 14, 2021
    • Reiner Hauser's avatar
      Support sudo rules in PMGLauncher · 792b64a1
      Reiner Hauser authored
      If TDAQ_PMG_USE_SUDO=1 the PMGLauncher will rely on sudo
      to change uid/gids rather than on being a SUID executable.
      Note that this has highest priority and will fail if sudo
      does not allow the transition.
      
      Otherwise it falls back to old behaviour:
        - if it is suid, change uid/gid for new process
        - else execute as current uid
      792b64a1
  15. Dec 09, 2021
  16. Dec 06, 2021
  17. Nov 16, 2021
  18. Oct 11, 2021
  19. Oct 08, 2021
  20. Oct 07, 2021
    • Reiner Hauser's avatar
      Minor cosmetics · 1d989f6c
      Reiner Hauser authored
      1d989f6c
    • Reiner Hauser's avatar
      Optimize eosfusebind call. · dd672e9e
      Reiner Hauser authored
      We basically check if the binding for current uid/session
      already exists, and if it agrees with $KRBCCNAME we do
      nothing.
      
      This avoids starting a shell script for every process which
      may block on a lockfile just to do the same thing as every
      other process with the same uid started at this time.
      
      The downside is the pretty ugly code as the credential file
      name contains the uid (easy), session id (easy) and the
      start time of the session leader (must use /proc/${sid}/stats).
      dd672e9e
  21. Oct 06, 2021
  22. Oct 05, 2021
  23. Oct 04, 2021
  24. May 04, 2021
  25. Mar 02, 2021
  26. Mar 01, 2021
  27. Feb 23, 2021
  28. Feb 18, 2021
  29. Feb 09, 2021
  30. Jan 19, 2021
  31. Dec 01, 2020
Loading