| 1 |
okoeroo |
388 |
#!/usr/bin/perl -w |
| 2 |
|
|
# $Id: $ |
| 3 |
|
|
# |
| 4 |
|
|
# Wrapper script to wrap the current environment into a single |
| 5 |
|
|
# environment variable GLEXEC_ENV. This variable is passed |
| 6 |
|
|
# onto the glexec child process, where it can be unpacked to |
| 7 |
|
|
# restore the environment variables that were lost when the |
| 8 |
|
|
# set-uid glexec was invoked. |
| 9 |
|
|
# Intended usage: |
| 10 |
|
|
# export GLEXEC_ENV=`glexec_wrapenv.pl` |
| 11 |
|
|
# /opt/glite/sbin/glexec glexec_unwrapenv.pl <YOUR-COMMAND> |
| 12 |
|
|
# By default the following environment variables are NOT wrapped: |
| 13 |
|
|
# HOME LOGNAME USER X509_USER_PROXY _ (yes that's '_' !) |
| 14 |
|
|
# A user can add more env vars to be excluded using either |
| 15 |
|
|
# --exclude=A --exclude=B |
| 16 |
|
|
# or |
| 17 |
|
|
# --exclude=A,B,... |
| 18 |
|
|
# |
| 19 |
|
|
# Copyright (c) 2009 by |
| 20 |
|
|
# Jan Just Keijser (janjust@nikhef.nl) |
| 21 |
|
|
# Nikhef |
| 22 |
|
|
# Amsterdam |
| 23 |
|
|
# The Netherlands |
| 24 |
|
|
|
| 25 |
|
|
use strict; |
| 26 |
|
|
use warnings; |
| 27 |
|
|
|
| 28 |
|
|
use Compress::Zlib qw(deflateInit Z_OK); |
| 29 |
|
|
use Getopt::Long qw(GetOptions); |
| 30 |
|
|
use MIME::Base64 qw(encode_base64); |
| 31 |
|
|
|
| 32 |
|
|
# These variables are excluded by default |
| 33 |
|
|
my @env_blacklist = ( "HOME", "LOGNAME", "USER", "X509_USER_PROXY", "_" ); |
| 34 |
|
|
|
| 35 |
|
|
my @exclude_env; |
| 36 |
|
|
my $key; |
| 37 |
|
|
my $buf; |
| 38 |
|
|
my $encoded_buf = ''; |
| 39 |
|
|
my $output = ''; |
| 40 |
|
|
|
| 41 |
|
|
GetOptions ("exclude=s" => \@exclude_env); |
| 42 |
|
|
@exclude_env = split( /,/, join( ',', @exclude_env, @env_blacklist) ); |
| 43 |
|
|
|
| 44 |
|
|
# go through all environment variables and encode them as separate |
| 45 |
|
|
# key-value pair entities. This will enable us to later unpack them. |
| 46 |
|
|
foreach $key (keys(%ENV)) |
| 47 |
|
|
{ |
| 48 |
|
|
if ( ! grep { /$key/ } @exclude_env ) |
| 49 |
|
|
{ |
| 50 |
|
|
$buf = $key . "=" . $ENV{$key}; |
| 51 |
|
|
$encoded_buf .= encode_base64($buf, '') . " "; |
| 52 |
|
|
} |
| 53 |
|
|
else |
| 54 |
|
|
{ |
| 55 |
|
|
printf STDERR "Skipping $key\n"; |
| 56 |
|
|
} |
| 57 |
|
|
} |
| 58 |
|
|
|
| 59 |
|
|
# Compress the encoded env vars to save some memory |
| 60 |
|
|
my $x = deflateInit() |
| 61 |
|
|
or die "Cannot create a deflation stream\n" ; |
| 62 |
|
|
|
| 63 |
|
|
my ($deflated_buf, $status) = $x->deflate( $encoded_buf ); |
| 64 |
|
|
$status == Z_OK or die "deflation failed\n"; |
| 65 |
|
|
$output = $deflated_buf; |
| 66 |
|
|
|
| 67 |
|
|
($deflated_buf, $status) = $x->flush(); |
| 68 |
|
|
$status == Z_OK or die "deflation failed\n"; |
| 69 |
|
|
$output .= $deflated_buf; |
| 70 |
|
|
|
| 71 |
|
|
# Finally, encode the compressed stream again and print it out |
| 72 |
|
|
print encode_base64( $output, '' ); |
| 73 |
|
|
|
Parent Directory
| 
Revision Log