Gecko [ paroquia-rio-de-mouro.pt ]

Name	Size	Permission	Date
complete.sh	5.23 KB	-rw-r--r--	2021-02-02 09:21
etelpmoc.sh	6.87 KB	-rw-r--r--	2021-02-02 09:21
info	15 B	-rw-r--r--	2021-02-08 05:33
snap-bootstrap	12.45 MB	-rwxr-xr-x	2021-02-08 05:39
snap-confine	108.2 KB	-rwsr-xr-x	2021-02-08 05:39
snap-device-helper	2.5 KB	-rwxr-xr-x	2021-02-08 05:39
snap-discard-ns	26.57 KB	-rwxr-xr-x	2021-02-08 05:39
snap-exec	3.22 MB	-rwxr-xr-x	2021-02-08 05:39
snap-failure	3.7 MB	-rwxr-xr-x	2021-02-08 05:39
snap-gdb-shim	14.41 KB	-rwxr-xr-x	2021-02-08 05:39
snap-gdbserver-shim	14.41 KB	-rwxr-xr-x	2021-02-08 05:39
snap-mgmt	7.6 KB	-rwxr-xr-x	2021-02-08 05:39
snap-preseed	7.36 MB	-rwxr-xr-x	2021-02-08 05:39
snap-recovery-chooser	6.85 MB	-rwxr-xr-x	2021-02-08 05:39
snap-repair	9.15 MB	-rwxr-xr-x	2021-02-08 05:39
snap-seccomp	2.2 MB	-rwxr-xr-x	2021-02-08 05:39
snap-update-ns	4.79 MB	-rwxr-xr-x	2021-02-08 05:39
snapctl	6.59 MB	-rwxr-xr-x	2021-02-08 05:39
snapd	21.66 MB	-rwxr-xr-x	2021-02-08 05:39
snapd-apparmor	3.47 KB	-rwxr-xr-x	2021-02-08 05:39
snapd.core-fixup.sh	3.74 KB	-rwxr-xr-x	2021-02-08 05:39
snapd.run-from-snap	73 B	-rwxr-xr-x	2021-02-08 05:39
system-shutdown	836.94 KB	-rwxr-xr-x	2021-02-08 05:39

Rename

#!/bin/sh
# udev callout to allow a snap to access a device node
set -e
# debugging
#exec >>/tmp/snap-device-helper.log
#exec 2>&1
#set -x
# end debugging

ACTION="$1"
APPNAME="$2"
DEVPATH="$3"
MAJMIN="$4"
[ -n "$APPNAME" ] || { echo "no app name given" >&2; exit 1; }
[ -n "$DEVPATH" ] || { echo "no devpath given" >&2; exit 1; }
[ -n "$MAJMIN" ] || { echo "no major/minor given" >&2; exit 0; }

NOSNAP="${APPNAME#snap_}"
[ "$NOSNAP" != "$APPNAME" ] || { echo "malformed appname $APPNAME" >&2; exit 1; }

# FIXME: this will break for instances that are called "hook" :(
# Handle hooks first, the nosnap part looks like this:
# - "$snap_hook_$hookname"
# - "$snap_$instance_hook_$hookname
# we need to make sure we change this to:
# - "$snap_hook.$hookname"
# - "$snap_$instance_hook.$hookname"
if [ -z "${NOSNAP##*_hook_hook_*}" ]; then
    # $instance is 'hook'; $snap_hook_hook.$hookname -> $snap_hook_hook.$hookname
    NOSNAP="${NOSNAP%_hook_*}_hook.${NOSNAP#*_hook_hook_}"
elif [ -z "${NOSNAP##*_hook_*}" ]; then
    # $snap_$instance_hook_$hookname -> $snap_$instance_hook.$hookname
    NOSNAP="${NOSNAP%_hook_*}_hook.${NOSNAP#*_hook_}"
fi

# Now deal with app/instance untangling
if [ "${NOSNAP#*_*_}" = "${NOSNAP}" ]; then
    # snap_<snap>_<app> -> snap.<snap>.<app>
    SNAPAPP="snap.${NOSNAP%_*}.${NOSNAP#*_}"
else
    # snap_<snap>_<instance>_<app> -> snap.<snap>_<instance>.<app>
    SNAPAPP="snap.${NOSNAP%_*}.${NOSNAP#*_*_}"
fi

DEVICES_CGROUP=${DEVICES_CGROUP:="/sys/fs/cgroup/devices"}
app_dev_cgroup="$DEVICES_CGROUP/$SNAPAPP"

# The cgroup is only present after snap start so ignore any cgroup changes
# (eg, 'add' on boot, hotplug, hotunplug) when the cgroup doesn't exist
# yet. LP: #1762182.
if [ ! -e "$app_dev_cgroup" ]; then
    exit 0
fi

# check if it's a block or char dev
# TODO: re-write this to be more robust, the bash variable substitution done 
# here is quite awkard :-/
if [ "${DEVPATH#*/block/}" != "$DEVPATH" ]; then
    type="b"
elif [ "${DEVPATH#*/nvme/nvme*/nvme*n*}" != "$DEVPATH" ]; then
    # char devices are .../nvme/nvme* but block devices are
    # .../nvme/nvme*/nvme*n* and .../nvme/nvme*/nvme*n*p*
    # so if have a device that has nvme/nvme*/nvme*n* in it,
    # treat it as a block device
    type="b"
else
    type="c"
fi

acl="$type $MAJMIN rwm"
case "$ACTION" in
    add|change)
        echo "$acl" > "$app_dev_cgroup/devices.allow"
        ;;
    remove)
        echo "$acl" > "$app_dev_cgroup/devices.deny"
        ;;
    *)
        echo "ERROR: unknown action $ACTION" >&2
        exit 1 ;;
esac