PAL.C.T MINI SHELL
BEGIN { push(@INC, ".."); };
eval "use WebminCore;";
&init_config();
&foreign_require("virtual-server", "virtual-server-lib.pl");
$config{'auth'} ||= "Basic";
%access = &get_module_acl();
sub can_edit_domain
{
return &virtual_server::can_edit_domain($_[0]);
}
# list_reps(&domain)
# Returns a list of all repositories in some domain
sub list_reps
{
local (@rv, $f);
opendir(DIR, "$_[0]->{'home'}/svn");
while($f = readdir(DIR)) {
if ($f ne "." && $f ne "..") {
push(@rv, { 'dom' => $_[0],
'rep' => $f,
'dir' => "$_[0]->{'home'}/svn/$f" });
}
}
closedir(DIR);
return @rv;
}
sub svn_check
{
return &text('feat_echeck', "<tt>$config{'svnadmin'}</tt>")
if (!&has_command($config{'svnadmin'}));
return undef;
}
# list_rep_users(&domain, rep)
# Returns a list of all users with access to some repository
sub list_rep_users
{
local $lref = &virtual_server::read_file_lines_as_domain_user(
$_[0], &conf_file($_[0]));
local (@rv, $inrep, $l);
foreach $l (@$lref) {
if ($l =~ /^\s*\[(.*):\/\S*\]/) {
$inrep = $1;
}
elsif ($l =~ /^\s*(\S+)\s*=\s*(\S+)/) {
push(@rv, { 'user' => $1,
'perms' => $2 }) if ($inrep eq $_[1]);
}
}
return @rv;
}
# save_rep_users(&domain, &rep, &users)
# Updates the list of users for some repository
sub save_rep_users
{
local ($dom, $rep, $users) = @_;
local $conf_file = &conf_file($_[0]);
&lock_file($conf_file);
local $lref = &virtual_server::read_file_lines_as_domain_user($dom, $conf_file);
local ($start, $end) = &rep_users_lines($dom, $rep, $lref);
local @lines = ( "[$rep->{'rep'}:/]",
map { "$_->{'user'} = $_->{'perms'}" } @$users );
if (defined($start)) {
splice(@$lref, $start, $end-$start+1, @lines);
}
else {
push(@$lref, @lines);
}
&virtual_server::flush_file_lines_as_domain_user($dom, $conf_file);
&unlock_file($conf_file);
&virtual_server::set_permissions_as_domain_user($dom, 0755, $conf_file);
}
# rep_users_lines(&domain, &rep, &lref)
sub rep_users_lines
{
local ($dom, $rep, $lref) = @_;
local ($start, $end, $l, $inrep);
local $lnum = 0;
foreach $l (@$lref) {
if ($l =~ /^\s*\[(.*):\/\S*\]/) {
if ($1 eq $rep->{'rep'}) {
$start = $end = $lnum;
$inrep = 1;
}
else {
$inrep = 0;
}
}
elsif ($l =~ /^\s*(\S+)\s*=\s*(\S+)/ && $inrep) {
$end = $lnum;
}
$lnum++;
}
return ($start, $end);
}
# create_rep(&domain, &rep, type)
# Create a repository directory and perms file entry
sub create_rep
{
local ($dom, $rep, $type) = @_;
$rep->{'dir'} = "$dom->{'home'}/svn/$rep->{'rep'}";
local $qdir = quotemeta($rep->{'dir'});
local $cmd;
if (&supports_fs_type()) {
$cmd = "svnadmin create --fs-type $type $qdir 2>&1";
}
else {
$cmd = "svnadmin create $qdir 2>&1";
}
local ($out, $ex) = &virtual_server::run_as_domain_user($dom, $cmd);
if ($ex) {
return $out;
}
&set_rep_permissions($dom, $rep);
local $cfile = &conf_file($dom);
&lock_file($cfile);
local $lref = &virtual_server::read_file_lines_as_domain_user($dom, $cfile);
local ($start, $end) = &rep_users_lines($dom, $rep, $lref);
if (!defined($start)) {
push(@$lref, "[$rep->{'rep'}:/]");
&virtual_server::flush_file_lines_as_domain_user($dom, $cfile);
}
&unlock_file($cfile);
}
# set_rep_permissions(&domain, &rep)
# Sets the ownership and permissions on a repository
sub set_rep_permissions
{
local ($dom, $rep) = @_;
local $qdir = quotemeta($rep->{'dir'});
local $webuser = &virtual_server::get_apache_user($dom);
local @uinfo = getpwnam($webuser);
&virtual_server::run_as_domain_user($dom, "chmod -R 770 $qdir");
&virtual_server::run_as_domain_user($dom,
"find $qdir -type d | xargs chmod g+s");
&system_logged("chown -R $uinfo[2] $qdir");
}
# delete_rep(&domain, &rep)
# Delete a repository directory and perms file entry
sub delete_rep
{
local ($dom, $rep) = @_;
local $qdir = quotemeta($rep->{'dir'});
local $quser = quotemeta($dom->{'user'});
&system_logged("chown -R $quser:$quser $qdir");
&virtual_server::unlink_file_as_domain_user(
$dom, "$dom->{'home'}/svn/$rep->{'rep'}");
local $cfile = &conf_file($dom);
&lock_file($cfile);
local $lref = &virtual_server::read_file_lines_as_domain_user($dom, $cfile);
local ($start, $end) = &rep_users_lines($dom, $rep, $lref);
if (defined($start)) {
splice(@$lref, $start, $end-$start+1);
&virtual_server::flush_file_lines_as_domain_user($dom, $cfile);
}
&unlock_file($cfile);
}
sub supports_fs_type
{
local $out = &backquote_command("$config{'svnadmin'} help create 2>&1", 1);
return $config{'canfs'} && $out =~ /\-\-fs\-type/;
}
# passwd_file(&domain)
sub passwd_file
{
if ($config{'passfile'}) {
return "$_[0]->{'home'}/$config{'passfile'}";
}
else {
return "$_[0]->{'home'}/etc/svn.basic.passwd";
}
}
sub conf_file
{
return "$_[0]->{'home'}/etc/svn-access.conf";
}
# list_users(&domain)
sub list_users
{
local $users;
&foreign_require("htaccess-htpasswd", "htaccess-lib.pl");
if ($config{'auth'} eq 'Digest') {
$users = &htaccess_htpasswd::list_digest_users(&passwd_file($_[0]));
}
else {
$users = &htaccess_htpasswd::list_users(&passwd_file($_[0]));
}
return @$users;
}
# get_repository_email(&domain, &rep)
# Returns the email address to notify when changes to some repo are committed
sub get_repository_email
{
local ($dom, $rep) = @_;
local $pc = "$dom->{'home'}/svn/$rep->{'rep'}/hooks/post-commit";
local $lref = &read_file_lines($pc);
local ($prog, $email);
foreach my $l (@$lref) {
if ($l =~ /^\s*EMAIL="(.*)"/) {
$email = $1;
}
elsif ($l =~ /^\S+\/commit-email.pl.*\$EMAIL/ &&
$l !~ /^\#/) {
$prog = 1;
}
}
return $prog && $email ? $email : undef;
}
# save_repository_email(&domain, &rep, email)
# Updates the email address to notify when changes to some repo are committed
sub save_repository_email
{
local ($dom, $rep, $email) = @_;
local $pc = "$dom->{'home'}/svn/$rep->{'rep'}/hooks/post-commit";
&lock_file($pc);
local $lref = &virtual_server::read_file_lines_as_domain_user($dom, $pc);
local $svnlook = &has_command("svnlook");
if (!@$lref && $email) {
# Create initial file
$svnlook || &error("Could not find the svnlook command");
push(@$lref, "#!/bin/sh",
"EMAIL=\"$email\"",
"REPOS=\"\$1\"",
"REV=\"\$2\"",
"SVNLOOK=\"$svnlook\"",
"export SVNLOOK",
"$module_root_directory/commit-email.pl --from $dom->{'emailto'} -s \"SubVersion commit\" \"\$REPOS\" \"\$REV\" \"\$EMAIL\"");
&virtual_server::flush_file_lines_as_domain_user($dom, $pc);
&virtual_server::set_permissions_as_domain_user($dom, 0755, $pc);
}
elsif (@$lref && $email) {
# Just update email, comment and SVNLOOK in program
foreach my $l (@$lref) {
if ($l =~ /^\s*EMAIL="(.*)"/) {
$l = "EMAIL=\"$email\"";
}
elsif ($l =~ /^#\S+\/commit-email.pl/) {
$l =~ s/^#//;
}
elsif ($l =~ /^\s*SVNLOOK="(.*)"/ && $svnlook) {
$l = "SVNLOOK=\"$svnlook\"";
}
}
&virtual_server::flush_file_lines_as_domain_user($dom, $pc);
}
elsif (@$lref && !$email) {
# Comment out the program
foreach my $l (@$lref) {
if ($l =~ /^\S+\/commit-email.pl.*\$EMAIL/ && $l !~ /^\#/) {
$l = "#$l";
}
}
&virtual_server::flush_file_lines_as_domain_user($dom, $pc);
}
&unlock_file($pc);
}
# dump_rep(&domain, &rep, file)
# Dumps the contents of a repository to a file
sub dump_rep
{
local ($dom, $rep, $file) = @_;
local $cmd = "svnadmin dump -q ".quotemeta("$dom->{'home'}/svn/$rep->{'rep'}").
" 2>&1 >".quotemeta($file);
local $out = &virtual_server::run_as_domain_user($dom, $cmd);
return $out =~ /failed|error/i || !-r $file || $? ?
"<pre>".&html_escape($out)."</pre>" : undef;
}
# load_rep(&domain, &rep, file)
# Loads the contents of a repository from a file
sub load_rep
{
local ($dom, $rep, $file) = @_;
local $qdir = quotemeta($rep->{'dir'});
local $quser = quotemeta($dom->{'user'});
&system_logged("chown -R $quser:$quser $qdir");
local $cmd = "svnadmin load -q ".quotemeta("$dom->{'home'}/svn/$rep->{'rep'}").
" 2>&1 <".quotemeta($file);
local $out = &virtual_server::run_as_domain_user($dom, $cmd);
if ($out =~ /failed|error/i || $?) {
return "<pre>".&html_escape($out)."</pre>";
}
else {
&set_rep_permissions($dom, $rep);
return undef;
}
}
# set_user_password(&svn-user, &virtualmin-user, &domain)
# Sets password fields for an SVN user based on their virtualmin user hash
sub set_user_password
{
local ($newuser, $user, $dom) = @_;
if ($config{'auth'} eq 'Digest' && $user->{'pass_digest'}) {
# Digest mode .. use existing hashed password
$newuser->{'digest'} = 1;
$newuser->{'dom'} = $dom->{'dom'};
$newuser->{'pass'} = $user->{'pass_digest'};
}
elsif ($config{'auth'} eq 'Digest') {
# Digest mode .. need to re-hash from plain pass
$newuser->{'digest'} = 1;
$newuser->{'dom'} = $dom->{'dom'};
if ($user->{'user'} eq $dom->{'user'}) {
# User is domain owner, use stored digest hash or re-hash
# plaintext password
$newuser->{'pass'} = $dom->{'digest_enc_pass'} ||
&htaccess_htpasswd::digest_password(
$newuser->{'user'}, $dom->{'dom'}, $dom->{'pass'});
}
elsif ($user->{'passmode'} == 3 ||
defined($user->{'plainpass'})) {
# Regular mailbox, for which password is known
$newuser->{'pass'} = &htaccess_htpasswd::digest_password(
$newuser->{'user'}, $dom->{'dom'},$user->{'plainpass'});
}
else {
$newuser->{'pass'} = "UNKNOWN";
}
}
elsif ($user->{'pass_crypt'}) {
# Use stored crypt format hash
$newuser->{'pass'} = $user->{'pass_crypt'};
}
elsif ($user->{'pass'} =~ /^\$/ && $user->{'plainpass'}) {
# MD5-hashed, re-hash plain version
if ($user->{'user'} eq $dom->{'user'}) {
# User is domain owner, use stored DES hash or re-hash
# plaintext password
$newuser->{'pass'} = $dom->{'crypt_enc_pass'} ||
&unix_crypt($dom->{'pass'}, substr(time(), -2));
}
else {
# Regular mailbox, for which password is known
$newuser->{'pass'} = &unix_crypt($user->{'plainpass'},
substr(time(), -2));
}
}
else {
# Just copy hashed password
$newuser->{'digest'} = 0;
$newuser->{'pass'} = $user->{'pass'};
}
}
1;
y~or5J ={Eeu磝Qk ᯘG{?+]ן?wM3X^歌>{7پK>on\jy R g/=fOroNVv~Y+ NGuÝHWyw[eQʨSb> >}Gmx[o[<{Ϯ_qF vM IENDB`