Gecko [ www.finalhopeacademy.com ]

Name	Size	Permission
SvnCLBrowse	18.08 KB	-rwxr-xr-x
blame.py	2.99 KB	-rwxr-xr-x
check-modified.py	1.64 KB	-rwxr-xr-x
dumpprops.py	2.24 KB	-rwxr-xr-x
get-location-segments.py	3.9 KB	-rwxr-xr-x
getfile.py	1.83 KB	-rwxr-xr-x
getlocks_test.c	8.51 KB	-rw-r--r--
geturl.py	1.33 KB	-rwxr-xr-x
headrev.c	7.14 KB	-rw-r--r--
info.rb	2.48 KB	-rw-r--r--
minimal_client.c	9.3 KB	-rw-r--r--
putfile.py	2.47 KB	-rwxr-xr-x
revplist.py	2.19 KB	-rwxr-xr-x
svnlog2html.rb	2.71 KB	-rwxr-xr-x
svnlook.py	12.6 KB	-rwxr-xr-x
svnlook.rb	13.23 KB	-rwxr-xr-x
svnput.c	11.43 KB	-rw-r--r--
svnserve-sgid.c	1.82 KB	-rw-r--r--
svnshell.py	11.16 KB	-rwxr-xr-x
svnshell.rb	11.2 KB	-rwxr-xr-x
testwrite.c	8.76 KB	-rw-r--r--

Code Editor : svnserve-sgid.c

/*
 *
 * Licensed to the Apache Software Foundation (ASF) under one
 * or more contributor license agreements.  See the NOTICE file
 * distributed with this work for additional information
 * regarding copyright ownership.  The ASF licenses this file
 * to you under the Apache License, Version 2.0 (the
 * "License"); you may not use this file except in compliance
 * with the License.  You may obtain a copy of the License at
 *
 *   http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing,
 * software distributed under the License is distributed on an
 * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
 * KIND, either express or implied.  See the License for the
 * specific language governing permissions and limitations
 * under the License.
 *
 */

/*
 * Wrapper to run the svnserve process setgid.
 * The idea is to avoid the problem that some interpreters like bash
 * invoked by svnserve in hook scripts will reset the effective gid to
 * the real gid, nuking the effect of an ordinary setgid svnserve binary.
 * Sadly, to set the real gid portably, you need to be root, if only
 * for a moment.
 * Also smashes the environment to something known, so that games
 * can't be played to try to break the security of the hook scripts,
 * by setting IFS, PATH, and similar means.
 */
/*
 * Written by Perry Metzger, and placed into the public domain.
 */

#include <stdio.h>
#include <unistd.h>

#define REAL_PATH "/usr/bin/svnserve.real"

char *newenv[] = { "PATH=/bin:/usr/bin", "SHELL=/bin/sh", NULL };

int
main(int argc, char **argv)
{
	if (setgid(getegid()) == -1) {
		perror("setgid(getegid())");
		return 1;
	}

if (seteuid(getuid()) == -1) {
		perror("seteuid(getuid())");
		return 1;
	}

execve(REAL_PATH, argv, newenv);
	perror("attempting to exec " REAL_PATH " failed");
	return 1;
}

${this.title}

Code Editor : svnserve-sgid.c