mirror of
https://github.com/laurivosandi/certidude
synced 2024-12-23 00:25:18 +00:00
Add workaround for chroot issues
This commit is contained in:
parent
0435b802af
commit
4a94715c68
@ -786,7 +786,13 @@ def certidude_serve(user, port, listen, enable_signature):
|
|||||||
app.add_sink(StaticResource(os.path.join(os.path.dirname(__file__), "static")))
|
app.add_sink(StaticResource(os.path.join(os.path.dirname(__file__), "static")))
|
||||||
|
|
||||||
httpd = make_server(listen, port, app, ThreadingWSGIServer)
|
httpd = make_server(listen, port, app, ThreadingWSGIServer)
|
||||||
|
|
||||||
if user:
|
if user:
|
||||||
|
# Load required utils which cannot be imported from chroot
|
||||||
|
# TODO: Figure out better approach
|
||||||
|
from jinja2.debug import make_traceback as _make_traceback
|
||||||
|
"".encode("charmap")
|
||||||
|
|
||||||
_, _, uid, gid, gecos, root, shell = pwd.getpwnam(user)
|
_, _, uid, gid, gecos, root, shell = pwd.getpwnam(user)
|
||||||
if uid == 0:
|
if uid == 0:
|
||||||
click.echo("Please specify unprivileged user")
|
click.echo("Please specify unprivileged user")
|
||||||
@ -796,7 +802,7 @@ def certidude_serve(user, port, listen, enable_signature):
|
|||||||
os.setuid(uid)
|
os.setuid(uid)
|
||||||
os.umask(0o007)
|
os.umask(0o007)
|
||||||
elif os.getuid() == 0:
|
elif os.getuid() == 0:
|
||||||
click.echo("Warning: running as root, this is not reccommended!")
|
click.echo("Warning: running as root, this is not recommended!")
|
||||||
httpd.serve_forever()
|
httpd.serve_forever()
|
||||||
|
|
||||||
@click.group("strongswan", help="strongSwan helpers")
|
@click.group("strongswan", help="strongSwan helpers")
|
||||||
|
Loading…
Reference in New Issue
Block a user