mirror of
https://github.com/FirebirdSQL/firebird.git
synced 2025-01-23 12:43:03 +01:00
2b382f606b
2. Script to switch between classic and superclassic modes. 3. Changed lisences from LGPL to IDPL (with Mark's agreement)
180 lines
4.4 KiB
Bash
180 lines
4.4 KiB
Bash
#!/bin/sh
|
|
#
|
|
# The contents of this file are subject to the Initial
|
|
# Developer's Public License Version 1.0 (the "License");
|
|
# you may not use this file except in compliance with the
|
|
# License. You may obtain a copy of the License at
|
|
# http://www.ibphoenix.com/main.nfs?a=ibphoenix&page=ibp_idpl.
|
|
#
|
|
# Software distributed under the License is distributed AS IS,
|
|
# WITHOUT WARRANTY OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing rights
|
|
# and limitations under the License.
|
|
#
|
|
# The Original Code was created by Mark O'Donohue
|
|
# for the Firebird Open Source RDBMS project.
|
|
#
|
|
# Copyright (c) Mark O'Donohue <mark.odonohue@ludwig.edu.au>
|
|
# and all contributors signed below.
|
|
#
|
|
# All Rights Reserved.
|
|
# Contributor(s): ______________________________________.
|
|
# Alex Peshkoff
|
|
#
|
|
|
|
#------------------------------------------------------------------------
|
|
# init defaults
|
|
DefaultLibrary=libfbembed
|
|
|
|
#------------------------------------------------------------------------
|
|
# fixFilePermissions
|
|
# Change the permissions to restrict access to server programs to
|
|
# firebird group only. This is MUCH better from a saftey point of
|
|
# view than installing as root user, even if it requires a little
|
|
# more work.
|
|
|
|
|
|
fixFilePermissions() {
|
|
cd $FBRootDir
|
|
chown -R $RunUser:$RunGroup $FBRootDir
|
|
|
|
# Turn other access off.
|
|
chmod -R o= $FBRootDir
|
|
|
|
# Now fix up the mess.
|
|
|
|
# fix up directories
|
|
for i in `find $FBRootDir -print`
|
|
do
|
|
FileName=$i
|
|
if [ -d $FileName ]
|
|
then
|
|
chmod o=rx $FileName
|
|
fi
|
|
done
|
|
|
|
# set up the defaults for bin
|
|
cd $FBBin
|
|
for i in `ls`
|
|
do
|
|
chmod ug=rx,o= $i
|
|
done
|
|
|
|
# User can run these programs, they need to talk to server though.
|
|
# and they cannot actually create a database.
|
|
chmod a=rx isql
|
|
chmod a=rx qli
|
|
|
|
# set up libraries
|
|
cd $FBRootDir
|
|
cd lib
|
|
chmod a=rx lib*
|
|
|
|
# set up include files
|
|
cd $FBRootDir
|
|
cd include
|
|
chmod a=r *
|
|
|
|
# Fix lock files
|
|
cd $FBRootDir
|
|
for i in isc_init1 isc_lock1 isc_event1 isc_monitor1
|
|
do
|
|
FileName=$i.`hostname`
|
|
touch $FileName
|
|
chown $RunUser:$RunGroup $FileName
|
|
chmod ug=rw,o= $FileName
|
|
done
|
|
|
|
# Create log
|
|
touch firebird.log
|
|
|
|
# Fix the rest
|
|
chmod ug=rw,o= firebird.log
|
|
chmod a=r aliases.conf
|
|
chmod a=r firebird.conf
|
|
chmod a=r firebird.msg
|
|
chmod a=r help/help.fdb
|
|
chmod ug=rw,o= $SecurityDatabase
|
|
|
|
if [ "$RunUser" = "root" ]
|
|
# In that case we must open databases to the world...
|
|
# That's a pity, but required if root RunUser choosen.
|
|
then
|
|
chmod a=rw $SecurityDatabase
|
|
fi
|
|
|
|
# fix up examples' permissions
|
|
cd examples
|
|
|
|
# set a default of read all files in examples
|
|
for i in `find . -name '*' -type f -print`
|
|
do
|
|
chmod a=r $i
|
|
done
|
|
|
|
# set a default of read&search all dirs in examples
|
|
for i in `find . -name '*' -type d -print`
|
|
do
|
|
chmod a=rx $i
|
|
done
|
|
|
|
# make examples db's writable by group
|
|
for i in `find . -name '*.fdb' -print`
|
|
do
|
|
chown $RunUser:$RunUser $i
|
|
chmod ug=rw,o= $i
|
|
done
|
|
|
|
# fix up doc permissions
|
|
fixDocPermissions
|
|
|
|
cd $FBRootDir
|
|
}
|
|
|
|
|
|
#------------------------------------------------------------------------
|
|
# changeXinetdServiceUser
|
|
# Change the run user of the xinetd service
|
|
|
|
changeXinetdServiceUser() {
|
|
InitFile=/etc/xinetd.d/firebird
|
|
if [ -f $InitFile ]
|
|
then
|
|
editFile $InitFile user "\tuser\t\t\t= $RunUser"
|
|
fi
|
|
}
|
|
|
|
|
|
#------------------------------------------------------------------------
|
|
# Update inetd service entry
|
|
# This just adds/replaces the service entry line
|
|
|
|
updateInetdEntry() {
|
|
newLine="gds_db stream tcp nowait.30000 $RunUser $FBBin/fb_inet_server fb_inet_server # Firebird Database Remote Server"
|
|
replaceLineInFile /etc/inetd.conf "$newLine" "^gds_db"
|
|
}
|
|
|
|
|
|
#------------------------------------------------------------------------
|
|
# Update xinetd service entry
|
|
|
|
updateXinetdEntry() {
|
|
cp $FBRootDir/misc/firebird.xinetd /etc/xinetd.d/firebird
|
|
changeXinetdServiceUser
|
|
}
|
|
|
|
|
|
#------------------------------------------------------------------------
|
|
# Update inetd service entry
|
|
# Check to see if we have xinetd installed or plain inetd.
|
|
# Install differs for each of them.
|
|
|
|
updateInetdServiceEntry() {
|
|
if [ -d /etc/xinetd.d ]
|
|
then
|
|
updateXinetdEntry
|
|
else
|
|
updateInetdEntry
|
|
fi
|
|
}
|