rpms/anacron/FC-4 anacron-2.3-fdclose.patch, NONE, 1.1 anacron.init, 1.4, 1.5 anacron.spec, 1.13, 1.14

fedora-cvs-commits at redhat.com fedora-cvs-commits at redhat.com
Mon Mar 20 19:04:58 UTC 2006


Author: jvdias

Update of /cvs/dist/rpms/anacron/FC-4
In directory cvs.devel.redhat.com:/tmp/cvs-serv32176

Modified Files:
	anacron.init anacron.spec 
Added Files:
	anacron-2.3-fdclose.patch 
Log Message:
fix bug 185973: allow use of sendmail under selinux-policy-strict;  Fix initscript so changing runlevel shuts it down correctly

anacron-2.3-fdclose.patch:
 global.h |    1 +
 runjob.c |   40 ++++++++++++++++++++++++++++++----------
 2 files changed, 31 insertions(+), 10 deletions(-)

--- NEW FILE anacron-2.3-fdclose.patch ---
diff -uNr anacron-2.3-orig/global.h anacron-2.3/global.h
--- anacron-2.3-orig/global.h	2000-06-23 01:00:14.000000000 +0100
+++ anacron-2.3/global.h	2006-03-20 15:31:28.000000000 +0000
@@ -60,6 +60,7 @@
    int tab_line;
    int arg_num;
    int timestamp_fd;
+   int input_fd;
    int output_fd;
    int mail_header_size;
    pid_t job_pid;
diff -uNr anacron-2.3-orig/runjob.c anacron-2.3/runjob.c
--- anacron-2.3-orig/runjob.c	2006-02-21 14:05:08.000000000 +0000
+++ anacron-2.3/runjob.c	2006-03-20 15:32:32.000000000 +0000
@@ -38,12 +38,12 @@
 #include <langinfo.h>
 
 static int
-temp_file()
+temp_file(job_rec *jr)
 /* Open a temporary file and return its file descriptor */
 {
     const int max_retries = 50;
     char *name;
-    int fd, i;
+    int fdin, fdout, i;
 
     i = 0;
     name = NULL;
@@ -53,16 +53,24 @@
 	free(name);
 	name = tempnam(NULL, NULL);
 	if (name == NULL) die("Can't find a unique temporary filename");
-	fd = open(name, O_RDWR | O_CREAT | O_EXCL | O_APPEND,
-		  S_IRUSR | S_IWUSR);
+	fdout = open(name, O_WRONLY | O_CREAT | O_EXCL | O_APPEND,
+				S_IRUSR | S_IWUSR);
+	if ( fdout != -1 )
+		fdin = open(name, O_RDONLY, S_IRUSR | S_IWUSR);
 	/* I'm not sure we actually need to be so persistent here */
-    } while (fd == -1 && errno == EEXIST && i < max_retries);
+    } while (fdout == -1 && errno == EEXIST && i < max_retries);
     
-    if (fd == -1) die_e("Can't open temporary file");
+    if (fdout == -1) die_e("Can't open temporary file for writing");
+    if (fdin == -1) die_e("Can't open temporary file for reading");
     if (unlink(name)) die_e("Can't unlink temporary file");
     free(name);
-    fcntl(fd, F_SETFD, 1);    /* set close-on-exec flag */
-    return fd;
+    fcntl(fdout, F_SETFD, 1);    /* set close-on-exec flag */
+    fcntl(fdin, F_SETFD, 1);    /* set close-on-exec flag */
+
+    jr->input_fd = fdin;
+    jr->output_fd = fdout;
+
+    return fdout;
 }
 
 static off_t
@@ -170,17 +178,28 @@
     pid = xfork();
     if (pid == 0)
     {
+	long fdflags;
+
 	/* child */
 	in_background = 1;
 	/* set stdin to the job's output */
 	xclose(0);
-	if (dup2(jr->output_fd, 0) != 0) die_e("Can't dup2()");
+	if (dup2(jr->input_fd, 0) != 0) die_e("Can't dup2()");
 	if (lseek(0, 0, SEEK_SET) != 0) die_e("Can't lseek()");
 	umask(old_umask);
 	if (sigprocmask(SIG_SETMASK, &old_sigmask, NULL))
 	    die_e("sigprocmask error");
 	xcloselog();
 
+	/* Ensure stdout/stderr are sane before exec-ing sendmail */
+	xclose(1); xopen(1, "/dev/null", O_WRONLY);
+	xclose(2); xopen(2, "/dev/null", O_WRONLY);
+	xclose(jr->output_fd);
+
+	/* Ensure stdin is not appendable ... ? */
+	/* fdflags = fcntl(0, F_GETFL); fdflags &= ~O_APPEND; */
+	/* fcntl(0, F_SETFL, fdflags ); */
+
 	/* Here, I basically mirrored the way /usr/sbin/sendmail is called
 	 * by cron on a Debian system, except for the "-oem" and "-or0s"
 	 * options, which don't seem to be appropriate here.
@@ -225,7 +244,7 @@
     setup_env(jr);
 
     /* create temporary file for stdout and stderr of the job */
-    fd = jr->output_fd = temp_file();
+    temp_file(jr); fd = jr->output_fd;
     /* write mail header */
     xwrite(fd, "From: ");
     xwrite(fd, username());
@@ -283,6 +302,7 @@
     running_jobs--;
     if (mail_output) launch_mailer(jr);
     xclose(jr->output_fd);
+    xclose(jr->input_fd);
 }
 
 void


Index: anacron.init
===================================================================
RCS file: /cvs/dist/rpms/anacron/FC-4/anacron.init,v
retrieving revision 1.4
retrieving revision 1.5
diff -u -r1.4 -r1.5
--- anacron.init	9 Sep 2004 03:00:12 -0000	1.4
+++ anacron.init	20 Mar 2006 19:04:30 -0000	1.5
@@ -10,11 +10,13 @@
 [ -f /usr/sbin/anacron ] || exit 0
 
 prog="anacron"
+LOCKFILE=/var/lock/subsys/$prog
 
 start() {
     echo -n $"Starting $prog: " 
     daemon +19 anacron -s
     RETVAL=$?
+    touch $LOCKFILE
     echo
     return $RETVAL
 }
@@ -26,6 +28,7 @@
 	echo
     fi
     RETVAL=$?
+    rm -f $LOCKFILE
     return $RETVAL
 }
 
@@ -46,7 +49,7 @@
 	    start
 	    ;;
 	condrestart)
-	    if test "x`pidof anacron`" != x; then
+	    if [ -f $LOCKFILE ]; then
 		stop
 		start
 	    fi


Index: anacron.spec
===================================================================
RCS file: /cvs/dist/rpms/anacron/FC-4/anacron.spec,v
retrieving revision 1.13
retrieving revision 1.14
diff -u -r1.13 -r1.14
--- anacron.spec	16 Mar 2005 21:04:41 -0000	1.13
+++ anacron.spec	20 Mar 2006 19:04:30 -0000	1.14
@@ -1,7 +1,7 @@
 Summary: A cron-like program that can run jobs lost during downtime.
 Name: anacron
 Version: 2.3
-Release: 34
+Release: 36.FC4
 License: GPL
 Group: System Environment/Base
 Source: ftp://ftp.debian.org/debian/pool/main/a/anacron/%{name}_%{version}.orig.tar.gz
@@ -11,6 +11,7 @@
 Patch1: anacron-2.3-mail-content-type-77108.patch
 Patch2: anacron-2.3-noconst.patch
 Patch3: anacron-2.3-mailto.patch
+Patch4: anacron-2.3-fdclose.patch
 Requires: /bin/sh
 Requires: crontabs
 Prereq: /sbin/chkconfig
@@ -37,6 +38,7 @@
 %patch1 -p1 -b .charset
 %patch2 -p1 -b .noconst
 %patch3 -p1 -b .mailto
+%patch4 -p1 -b .fdclose
 
 %build
 make CFLAGS="$RPM_OPT_FLAGS" %{?_smp_mflags}
@@ -110,6 +112,13 @@
 %config /etc/cron.weekly/0anacron
 
 %changelog
+* Mon Mar 20 2006 Jason Vas Dias <jvdias at redhat.com> 2.3-36
+- fix bug 185973: allow use of sendmail under selinux-policy-strict:
+                  apply patch contributed by Ted Rule<ejtr at layer3.co.uk>
+
+* Wed Jan 11 2006 Peter Jones <pjones at redhat.com> 2.3-35
+- Fix initscript so changing runlevel shuts it down correctly
+
 * Wed Mar 16 2005 Jason Vas Dias <jvdias at redhat.com> 2.3-34
 - Rebuild with gcc4 in FC4.
 




More information about the fedora-cvs-commits mailing list