1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
|
#
# Copyright OpenEmbedded Contributors
#
# SPDX-License-Identifier: GPL-2.0-only
#
import os
def sort_shadowutils_file(filename, mapping):
"""
Sorts a passwd or group file based on the numeric ID in the third column.
If a mapping is given, the name from the first column is mapped via that
dictionary instead (necessary for /etc/shadow and /etc/gshadow). If not,
a new mapping is created on the fly and returned.
"""
new_mapping = {}
with open(filename, 'rb+') as f:
lines = f.readlines()
# No explicit error checking for the sake of simplicity. /etc
# files are assumed to be well-formed, causing exceptions if
# not.
for line in lines:
entries = line.split(b':')
name = entries[0]
if mapping is None:
id = int(entries[2])
else:
id = mapping[name]
new_mapping[name] = id
# Sort by numeric id first, with entire line as secondary key
# (just in case that there is more than one entry for the same id).
lines.sort(key=lambda line: (new_mapping[line.split(b':')[0]], line))
# We overwrite the entire file, i.e. no truncate() necessary.
f.seek(0)
f.write(b''.join(lines))
return new_mapping
def sort_shadowutils_files(sysconfdir):
"""
Sorts shadow-utils 'passwd' and 'group' files in a rootfs' /etc directory
by ID.
"""
for main, shadow in (('passwd', 'shadow'),
('group', 'gshadow')):
filename = os.path.join(sysconfdir, main)
if os.path.exists(filename):
mapping = sort_shadowutils_file(filename, None)
filename = os.path.join(sysconfdir, shadow)
if os.path.exists(filename):
sort_shadowutils_file(filename, mapping)
def remove_shadowutils_backup_file(filename):
"""
Remove shadow-utils backup file for files like /etc/passwd.
"""
backup_filename = filename + '-'
if os.path.exists(backup_filename):
os.unlink(backup_filename)
def remove_shadowutils_backup_files(sysconfdir):
"""
Remove shadow-utils backup files in a rootfs /etc directory. They are not
needed in the initial root filesystem and sorting them can be inconsistent
(YOCTO #11043).
"""
for filename in (
'group',
'gshadow',
'passwd',
'shadow',
'subgid',
'subuid',
):
filepath = os.path.join(sysconfdir, filename)
remove_shadowutils_backup_file(filepath)
def tidy_shadowutils_files(sysconfdir):
"""
Tidy up shadow-utils files.
"""
remove_shadowutils_backup_files(sysconfdir)
sort_shadowutils_files(sysconfdir)
return True
|
