Attachment 308015 Details for Bug 448439 – Script called by incrontab to fix security context after mounting /tmp

Script called by incrontab to fix security context after mounting /tmp

on_mount (text/plain), 1.01 KB, created by Joachim Katzer on 2008-06-02 21:45:35 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Joachim Katzer

Created: 2008-06-02 21:45:35 UTC

Size: 1.01 KB

patch

obsolete

>#!/bin/bash
>
>OLD_MTAB=/var/tmp/old-mtab
>MTAB_LOCK=/var/tmp/mtab.lock
>DEV_CTMP=/dev/mapper/ctmp
>START_MSG=${2-"initial mtab"}
>
>case "$1" in
>  "start" ) 
>        logger -t "$START_MSG" `cat /etc/mtab` 
>        cat /etc/mtab > $OLD_MTAB
>	rm -f "$MTAB_LOCK"
>	;;
>  "stop" ) rm -f "$OLD_MTAB" "$MTAB_LOCK" ;;
>  * ) if [ -f "$MTAB_LOCK" ] ; then 
>	exit 0
>      fi
>      if [ -f "$OLD_MTAB" ] ; then
>	touch "$MTAB_LOCK"
>	# Log additional lines in /etc/mtab (new mounts)
>	ADDED=`diff "$OLD_MTAB" /etc/mtab | grep '>'`
>	if [ -n "$ADDED" ] ; then
>	  logger -t "mounted" "$ADDED"
>	fi
>	# Log removed lines in /etc/mtab (new ummounts)
>	REMOVED=`diff "$OLD_MTAB" /etc/mtab | grep '<'`
>	if [ -n "$REMOVED" ] ; then
>	  logger -t "unmounted" "$REMOVED"
>	fi
>	# Log security context of /tmp if just mounted
>        if [[ "$ADDED" =~ "$DEV_CTMP" ]] ; then
> 	  logger -t "/tmp context" `ls -alZ /tmp` 
>	  /sbin/restorecon -r /tmp
> 	  logger -t "after restorecon" `ls -alZ /tmp` 
> 	fi
>        cat /etc/mtab > $OLD_MTAB
>      fi ;;
>esac
>rm -f "$MTAB_LOCK"

Actions: View

Attachments on bug 448439: 308015