1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
|
# Copyright (C) 2006-2010 Canonical Ltd
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 2 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
"""Implementation of Transport that prevents access to locations above a set
root.
"""
from __future__ import absolute_import
from bzrlib.transport import (
pathfilter,
register_transport,
)
class ChrootServer(pathfilter.PathFilteringServer):
"""User space 'chroot' facility.
The server's get_url returns the url for a chroot transport mapped to the
backing transport. The url is of the form chroot-xxx:/// so parent
directories of the backing transport are not visible. The chroot url will
not allow '..' sequences to result in requests to the chroot affecting
directories outside the backing transport.
PathFilteringServer does all the path sanitation needed to enforce a
chroot, so this is a simple subclass of PathFilteringServer that ignores
filter_func.
"""
def __init__(self, backing_transport):
pathfilter.PathFilteringServer.__init__(self, backing_transport, None)
def _factory(self, url):
return ChrootTransport(self, url)
def start_server(self):
self.scheme = 'chroot-%d:///' % id(self)
register_transport(self.scheme, self._factory)
class ChrootTransport(pathfilter.PathFilteringTransport):
"""A ChrootTransport.
Please see ChrootServer for details.
"""
def _filter(self, relpath):
# A simplified version of PathFilteringTransport's _filter that omits
# the call to self.server.filter_func.
return self._relpath_from_server_root(relpath)
def get_test_permutations():
"""Return the permutations to be used in testing."""
from bzrlib.tests import test_server
return [(ChrootTransport, test_server.TestingChrootServer)]
|