REDROOM

Navigation

Breadcrumbs

Create

Edit File Size: 1.92 KB

/proc/thread-self/root/etc/security/namespace.init

Text Base64

#!/bin/sh
# It receives as arguments:
# - $1 polydir path (see WARNING below)
# - $2 instance path (see WARNING below)
# - $3 flag whether the instance dir was newly created (0 - no, 1 - yes)
# - $4 user name
# - $5 flag whether the polydir path ($1) is safe (0 - unsafe, 1 -safe)
# - $6 flag whether the instance path ($2) is safe (0 - unsafe, 1 - safe)
#
# WARNING: This script is invoked with full root privileges. Accessing
# the polydir ($1) and the instance ($2) directories in this context may be
# extremely dangerous as those can be under user control. The flags $5 and $6
# are provided to let you know if all the segments part of the path (except the
# last one) are owned by root and are writable by root only. If the path does
# not meet these criteria, you expose yourself to possible symlink attacks when
# accessing these path.
# However, even if the path components are safe, the content of the
# directories may still be owned/writable by a user, so care must be taken!
#
# The following section will copy the contents of /etc/skel if this is a
# newly created home directory.

# Executes only if the polydir path is safe
if [ "$5" = 1 ]; then

if [ "$3" = 1 ]; then
            # This line will fix the labeling on all newly created directories
            [ -x /sbin/restorecon ] && /sbin/restorecon "$1"
            user="$4"
            passwd=$(getent passwd "$user")
            homedir=$(echo "$passwd" | cut -f6 -d":")
            if [ "$1" = "$homedir" ]; then
                    gid=$(echo "$passwd" | cut -f4 -d":")
                    cp -rT /etc/skel "$homedir"
                    chown -R "$user":"$gid" "$homedir"
                    mask=$(sed -E -n 's/^UMASK[[:space:]]+([^#[:space:]]+).*/\1/p' /etc/login.defs)
                    mode=$(printf "%o" $((0777 & ~mask)))
                    chmod ${mode:-700} "$homedir"
                    [ -x /sbin/restorecon ] && /sbin/restorecon -R "$homedir"
            fi
    fi
fi
exit 0

Exit & Reset Text mode: syntax highlighting auto-detects file type.

Name	Size	Perms	Modified	Actions
console.apps DIR	-	drwxr-xr-x	2026-05-29 02:18:56	Edit Download recursive recursive
console.perms.d DIR	-	drwxr-xr-x	2025-12-17 18:53:57	Edit Download recursive recursive
limits.d DIR	-	drwxr-xr-x	2025-12-17 18:54:00	Edit Download recursive recursive
namespace.d DIR	-	drwxr-xr-x	2025-12-17 18:54:01	Edit Download recursive recursive
access.conf	4.46 KB	lrw-r--r--	2025-12-17 18:53:56	Edit Download recursive recursive
chroot.conf	82 B	lrw-r--r--	2025-12-17 18:53:57	Edit Download recursive recursive
console.handlers	624 B	lrw-r--r--	2025-12-17 18:53:57	Edit Download recursive recursive
console.perms	939 B	lrw-r--r--	2025-12-17 18:53:57	Edit Download recursive recursive
faillock.conf	2.18 KB	lrw-r--r--	2025-12-17 18:53:58	Edit Download recursive recursive
group.conf	3.55 KB	lrw-r--r--	2025-12-17 18:53:59	Edit Download recursive recursive
limits.conf	2.37 KB	lrw-r--r--	2025-12-17 18:54:00	Edit Download recursive recursive
namespace.conf	1.41 KB	lrw-r--r--	2025-12-17 18:54:01	Edit Download recursive recursive
namespace.init	1.92 KB	lrwxr-xr-x	2025-12-17 18:54:01	Edit Download recursive recursive
opasswd	0 B	lrw-------	2025-12-17 18:54:07	Edit Download recursive recursive
pam_env.conf	2.90 KB	lrw-r--r--	2025-12-17 18:53:58	Edit Download recursive recursive
pwhistory.conf	517 B	lrw-r--r--	2025-12-17 18:54:02	Edit Download recursive recursive
sepermit.conf	419 B	lrw-r--r--	2025-12-17 18:54:03	Edit Download recursive recursive
time.conf	2.13 KB	lrw-r--r--	2025-12-17 18:54:04	Edit Download recursive recursive

Directory Contents