/brz/remove-bazaar

To get this branch, use:
bzr branch http://gegoxaren.bato24.eu/bzr/brz/remove-bazaar
2070.5.1 by Andrew Bennetts
Add ChrootTransportDecorator.
1
# Copyright (C) 2006 Canonical Ltd
2
#
3
# This program is free software; you can redistribute it and/or modify
4
# it under the terms of the GNU General Public License as published by
5
# the Free Software Foundation; either version 2 of the License, or
6
# (at your option) any later version.
7
#
8
# This program is distributed in the hope that it will be useful,
9
# but WITHOUT ANY WARRANTY; without even the implied warranty of
10
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
11
# GNU General Public License for more details.
12
#
13
# You should have received a copy of the GNU General Public License
14
# along with this program; if not, write to the Free Software
15
# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
16
17
"""Implementation of Transport that prevents access to locations above a set
18
root.
19
"""
2018.5.42 by Robert Collins
Various hopefully improvements, but wsgi is broken, handing over to spiv :).
20
from urlparse import urlparse
2070.5.1 by Andrew Bennetts
Add ChrootTransportDecorator.
21
22
from bzrlib import errors, urlutils
23
from bzrlib.transport.decorator import TransportDecorator, DecoratorServer
24
25
26
class ChrootTransportDecorator(TransportDecorator):
27
    """A decorator that can convert any transport to be chrooted.
28
2018.5.42 by Robert Collins
Various hopefully improvements, but wsgi is broken, handing over to spiv :).
29
    This is requested via the 'chroot+' prefix to get_transport().
2018.5.46 by Andrew Bennetts
Fix ChrootTransportDecorator's clone to pass less surprising offsets to the decorated transport's clone.
30
31
    :ivar chroot_url: the root of this chroot
32
    :ivar chroot_relative: this transport's location relative to the chroot
33
        root.  e.g. A chroot_relative of '/' means this location is the same as
34
        chroot_url.
2070.5.1 by Andrew Bennetts
Add ChrootTransportDecorator.
35
    """
36
37
    def __init__(self, url, _decorated=None, chroot=None):
38
        super(ChrootTransportDecorator, self).__init__(url,
39
                _decorated=_decorated)
40
        if chroot is None:
41
            self.chroot_url = self._decorated.base
42
        else:
43
            self.chroot_url = chroot
2018.5.42 by Robert Collins
Various hopefully improvements, but wsgi is broken, handing over to spiv :).
44
        self.chroot_relative = '/' + self._decorated.base[len(self.chroot_url):]
2070.5.1 by Andrew Bennetts
Add ChrootTransportDecorator.
45
46
    @classmethod
47
    def _get_url_prefix(self):
48
        """Chroot transport decorators are invoked via 'chroot+'"""
49
        return 'chroot+'
50
51
    def _ensure_relpath_is_child(self, relpath):
52
        abspath = self.abspath(relpath)
53
        chroot_base = self._get_url_prefix() + self.chroot_url
54
        real_relpath = urlutils.relative_url(chroot_base, abspath)
55
        if real_relpath == '..' or real_relpath.startswith('../'):
56
            raise errors.PathNotChild(relpath, self.chroot_url)
57
58
    # decorated methods
2018.5.54 by Andrew Bennetts
Fix ChrootTransportDecorator's abspath method to be consistent with its clone
59
    def abspath(self, relpath):
60
        try:
61
            url = urlutils.join('fake:///', relpath)
62
        except errors.InvalidURLJoin:
63
            raise errors.PathNotChild(relpath, self.chroot_url)
64
        normalised_abspath = url[len('fake:///'):]
65
        return self._get_url_prefix() + self.chroot_url + normalised_abspath[1:]
66
2070.5.1 by Andrew Bennetts
Add ChrootTransportDecorator.
67
    def append_file(self, relpath, f, mode=None):
68
        self._ensure_relpath_is_child(relpath)
69
        return TransportDecorator.append_file(self, relpath, f, mode=mode)
70
71
    def append_bytes(self, relpath, bytes, mode=None):
72
        self._ensure_relpath_is_child(relpath)
73
        return TransportDecorator.append_bytes(self, relpath, bytes, mode=mode)
74
75
    def clone(self, offset=None):
2018.5.42 by Robert Collins
Various hopefully improvements, but wsgi is broken, handing over to spiv :).
76
        if offset is None: return self
77
        # the new URL we want to clone to is
78
        # self.chroot_url + an adjusted self.chroot_relative, with the leading
79
        # / removed.
2018.5.46 by Andrew Bennetts
Fix ChrootTransportDecorator's clone to pass less surprising offsets to the decorated transport's clone.
80
        new_relpath = urlutils.joinpath(self.chroot_relative, offset)
81
        assert new_relpath.startswith('/')
82
        new_url = self.chroot_url + new_relpath[1:]
83
        # Clone the decorated transport according to this new path.
84
        assert new_url.startswith(self.chroot_url), (
85
            'new_url (%r) does not start with %r'
86
            % (new_url, self._decorated.base))
87
        path = urlutils.relative_url(self._decorated.base, new_url)
88
        decorated_clone = self._decorated.clone(path)
89
        return ChrootTransportDecorator(self._get_url_prefix() + new_url,
2018.5.42 by Robert Collins
Various hopefully improvements, but wsgi is broken, handing over to spiv :).
90
            decorated_clone, self.chroot_url)
2070.5.1 by Andrew Bennetts
Add ChrootTransportDecorator.
91
92
    def delete(self, relpath):
93
        self._ensure_relpath_is_child(relpath)
94
        return TransportDecorator.delete(self, relpath)
95
96
    def delete_tree(self, relpath):
97
        self._ensure_relpath_is_child(relpath)
98
        return TransportDecorator.delete_tree(self, relpath)
99
100
    def get(self, relpath):
101
        self._ensure_relpath_is_child(relpath)
102
        return TransportDecorator.get(self, relpath)
103
104
    def get_bytes(self, relpath):
105
        self._ensure_relpath_is_child(relpath)
106
        return TransportDecorator.get_bytes(self, relpath)
107
108
    def has(self, relpath):
109
        self._ensure_relpath_is_child(relpath)
110
        return TransportDecorator.has(self, relpath)
111
112
    def list_dir(self, relpath):
113
        self._ensure_relpath_is_child(relpath)
114
        return TransportDecorator.list_dir(self, relpath)
115
116
    def lock_read(self, relpath):
117
        self._ensure_relpath_is_child(relpath)
118
        return TransportDecorator.lock_read(self, relpath)
119
120
    def lock_write(self, relpath):
121
        self._ensure_relpath_is_child(relpath)
122
        return TransportDecorator.lock_write(self, relpath)
123
124
    def mkdir(self, relpath, mode=None):
125
        self._ensure_relpath_is_child(relpath)
126
        return TransportDecorator.mkdir(self, relpath, mode=mode)
127
128
    def put_bytes(self, relpath, bytes, mode=None):
129
        self._ensure_relpath_is_child(relpath)
130
        return TransportDecorator.put_bytes(self, relpath, bytes, mode=mode)
131
132
    def put_file(self, relpath, f, mode=None):
133
        self._ensure_relpath_is_child(relpath)
134
        return TransportDecorator.put_file(self, relpath, f, mode=mode)
135
136
    def rename(self, rel_from, rel_to):
137
        self._ensure_relpath_is_child(rel_from)
138
        self._ensure_relpath_is_child(rel_to)
139
        return TransportDecorator.rename(self, rel_from, rel_to)
140
141
    def rmdir(self, relpath):
142
        self._ensure_relpath_is_child(relpath)
143
        return TransportDecorator.rmdir(self, relpath)
144
145
    def stat(self, relpath):
146
        self._ensure_relpath_is_child(relpath)
147
        return TransportDecorator.stat(self, relpath)
148
149
150
class ChrootServer(DecoratorServer):
151
    """Server for the ReadonlyTransportDecorator for testing with."""
152
153
    def get_decorator_class(self):
154
        return ChrootTransportDecorator
155
156
157
def get_test_permutations():
158
    """Return the permutations to be used in testing."""
159
    return [(ChrootTransportDecorator, ChrootServer),
160
            ]