1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
|
#! /bin/sh
# postinst script for wims
#
# see: dh_installdeb(1)
set -e
[ -e /usr/share/debconf/confmodule ] && . /usr/share/debconf/confmodule
# summary of how this script can be called:
# * <postinst> `configure' <most-recently-configured-version>
# * <old-postinst> `abort-upgrade' <new version>
# * <conflictor's-postinst> `abort-remove' `in-favour' <package>
# <new-version>
# * <deconfigured's-postinst> `abort-deconfigure' `in-favour'
# <failed-install-package> <version> `removing'
# <conflicting-package> <version>
# for details, see http://www.debian.org/doc/debian-policy/ or
# the debian-policy package
#
read_only_dirs(){
adm=/var/lib/wims/public_html/modules/adm
dirs="$(ls -d $adm/doc $adm/new $adm/sheet $adm/vote)
/var/lib/wims/bin
/var/lib/wims/log
/var/lib/wims/log/account
/var/lib/wims/log/classes
/var/lib/wims/log/classes/1011/forum
/var/lib/wims/log/classes/1011/forum/.threads
/var/lib/wims/log/forums
/var/lib/wims/log/modules
/var/lib/wims/log/referer
/var/lib/wims/public_html/bases/dic
/var/lib/wims/public_html/bases/doc
/var/lib/wims/public_html/bases/sheet
/var/lib/wims/public_html/bases/site
/var/lib/wims/public_html/bases/site/lists
/var/lib/wims/public_html/bases/site/pop
/var/lib/wims/public_html/bases/sys
/var/lib/wims/public_html/bin
/var/lib/wims/public_html/msg
/var/lib/wims/public_html/scripts/adm
/var/lib/wims/s2
/var/lib/wims/sessions
/var/lib/wims/src
/var/lib/wims/tmp/log"
for d in $dirs; do
mkdir -p $d
dpkg-statoverride --list $d > /dev/null || \
dpkg-statoverride --update --add wims wims 700 $d
# enforce the same if dpkg-statoverride did not that job
chmod 700 $d
done
true
}
adjust_maildir(){
maildir=""
if [ -f /etc/mailname ]; then maildir=$(cat /etc/mailname); fi
for f in themes/default/visitor.phtml \
themes/default/supervisor.phtml \
themes/standard/visitor.phtml \
themes/standard/supervisor.phtml ; do
source=/var/lib/wims/public_html/$f
if [ -n "$maildir" ]; then
sed 's/!mailurl \$wims_site_manager/!mailurl wims@'$maildir'/' $source.tpl > $source
else
cp $source.tpl $source
fi
done
}
msg_apache2_not_there="\
+========================================================+
| WIMS is not properly installed due to the missing |
| apache2 package. Please install apache2, and reinstall |
| wims after apache2's full configuration. |
+========================================================+"
msg_apache2_not_configured="\
+==========================================================+
| WIMS is not properly installed due to the apache2 |
| package not yet configured. Apache2 should be configured |
| shortly, so you just need to reinstall wims to achieve |
| its full configuration. |
+==========================================================+"
case "$1" in
configure)
# add some utilities in the set of trusted wims applications:
rm -f /var/lib/wims/bin/true; ln -s /bin/true /var/lib/wims/bin
rm -f /var/lib/wims/bin/false; ln -s /bin/false /var/lib/wims/bin
# giving all to wims user. That is a quick'n dirty hack !
# is it necessary ?
chown -R wims:wims /var/lib/wims /usr/lib/wims/bin /usr/lib/wims/other
# fixing permissions for some dirs
read_only_dirs;
# making wims suid, sgid
if ! dpkg-statoverride --list /var/lib/wims/public_html/wims >/dev/null 2>&1
then
dpkg-statoverride --update --add wims wims 6755 /var/lib/wims/public_html/wims 2>/dev/null
fi
# apply a fix (thanks to dmanye@urv.cat for the hint, which solves bug #817963
for f in /var/lib/wims/sessions /var/lib/wims/s2; do
if ! dpkg-statoverride --list $f >/dev/null 2>&1
then
dpkg-statoverride --update --add wims wims 755 $f 2>/dev/null
fi
done
#making /usr/lib/wims/bin private
if ! dpkg-statoverride --list /usr/lib/wims/bin >/dev/null 2>&1
then
dpkg-statoverride --update --add wims wims 700 /usr/lib/wims/bin 2>/dev/null
fi
#making wims.conf private
conffile=/var/lib/wims/log/wims.conf
[ -f $conffile ] || cp -f $conffile.distrib $conffile
if ! dpkg-statoverride --list $conffile >/dev/null 2>&1
then
dpkg-statoverride --update --add wims wims 600 $conffile 2>/dev/null
fi
# linking to /etc/wims
[ -e /etc/wims/wims.conf ] || \
[ -e $(readlink /etc/wims/wims.conf) ] ||
ln -s $conffile /etc/wims
# downgrading permissions for some wrappers
lambdawrapper=/var/lib/wims/public_html/bin/wrap..exec
dpkg-statoverride --update --force --add nowims nowims 6755 $lambdawrapper 2>/dev/null
rm -f /var/lib/wims/log/unsecure
# gives the write permission for wims over its config files
chown -R wims:root /etc/wims
# reconfigure the webserver if necessary
db_get wims/reconfigure-webserver
webservers="$RET"
db_stop || true
restart=""
# remove a previous file if existing for apache2.2
rm -f /etc/apache2/conf.d/wims.conf
# and create a symlink to the configuration managed by dh_apache2
# only when necessary
[ -d /etc/apache2/conf.d ] && \
ln -s ../conf-available/wims.conf /etc/apache2/conf.d/
# enable silently the cgi module
if [ -e /usr/share/apache2/apache2-maintscript-helper ]; then
if dpkg -l apache2 | grep -q ^ii; then
. /usr/share/apache2/apache2-maintscript-helper
apache2_invoke enmod cgi
else
echo $msg_apache2_not_configured
fi
else
echo $msg_apache2_not_there
fi
# restart webserver if necessary
for webserver in $restart; do
webserver=${webserver%,}
service $webserver reload || true
done
# modify the configuration for povray if this package is present
if [ -f /etc/povray/3.6/povray.conf ]; then
if ! grep -q wims /etc/povray/3.6/povray.conf; then
echo 'read+write* = /var/lib/wims/tmp' >> \
/etc/povray/3.6/povray.conf
fi
fi
# take in account the file /etc/mailname
adjust_maildir
# fix the link to the copyright file
ln -sf /usr/share/doc/wims/copyright /var/lib/wims/public_html/COPYING
# create some CSS stuff
cd /var/lib/wims/public_html/themes && ./mkcss.pl
# adjust ownship for some more directories
chown -R wims:wims /var/lib/wims/public_html/modules \
/var/lib/wims/public_html/scripts \
/var/lib/wims/public_html/gifs
chown -R wims:wims /var/lib/wims/tmp
chown -R wims:wims /var/lib/wims/public_html/bases
chown -R wims:wims /var/lib/wims/public_html/scripts
for d in qpuzzle spuzzle; do
puzzledir=/var/lib/wims/public_html/scripts/data/$d
[ ! -d $puzzledir ] || chown -R wims:wims $puzzledir
done
chown -R wims:wims /var/lib/wims/public_html/bases
# reindex all modules and other useful data
echo "Reindexing Wims modules, classes and miscellanea in the background"
echo "To watch the progress, see /var/lib/wims/nohup.out"
(cd /var/lib/wims; su wims -s /bin/sh -c "nice ionice -c3 nohup bin/mkindex" &)
;;
abort-upgrade|abort-remove|abort-deconfigure)
;;
*)
echo "postinst called with unknown argument \`$1'" >&2
exit 1
;;
esac
# dh_installdeb will replace this with shell code automatically
# generated by other debhelper scripts.
#DEBHELPER#
exit 0
|
