1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
|
# Copyright (C) 2006-2009 Canonical Ltd
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 2 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
"""Implementation of Transport that prevents access to locations above a set
root.
"""
from bzrlib.transport import (
get_transport,
pathfilter,
register_transport,
Server,
Transport,
unregister_transport,
)
class ChrootServer(pathfilter.PathFilteringServer):
"""User space 'chroot' facility.
The server's get_url returns the url for a chroot transport mapped to the
backing transport. The url is of the form chroot-xxx:/// so parent
directories of the backing transport are not visible. The chroot url will
not allow '..' sequences to result in requests to the chroot affecting
directories outside the backing transport.
PathFilteringServer does all the path sanitation needed to enforce a
chroot, so this is a simple subclass of PathFilteringServer that ignores
filter_func.
"""
def __init__(self, backing_transport):
pathfilter.PathFilteringServer.__init__(self, backing_transport, None)
def _factory(self, url):
return ChrootTransport(self, url)
def setUp(self):
self.scheme = 'chroot-%d:///' % id(self)
register_transport(self.scheme, self._factory)
class ChrootTransport(pathfilter.PathFilteringTransport):
"""A ChrootTransport.
Please see ChrootServer for details.
"""
def _filter(self, relpath):
# A simplified version of PathFilteringTransport's _filter that omits
# the call to self.server.filter_func.
return self._relpath_from_server_root(relpath)
class TestingChrootServer(ChrootServer):
def __init__(self):
"""TestingChrootServer is not usable until setUp is called."""
ChrootServer.__init__(self, None)
def setUp(self, backing_server=None):
"""Setup the Chroot on backing_server."""
if backing_server is not None:
self.backing_transport = get_transport(backing_server.get_url())
else:
self.backing_transport = get_transport('.')
ChrootServer.setUp(self)
def get_test_permutations():
"""Return the permutations to be used in testing."""
return [(ChrootTransport, TestingChrootServer)]
|