Gecko [ gandhischool.edu.np ]

Name	Size	Permission
apparmor	[ DIR ]	drwxr-xr-x
apparmor.d	[ DIR ]	drwxr-xr-x
apparmor_parser	11.23 MB	-rwxr-xr-x
complete.sh	5.27 KB	-rw-r--r--
etelpmoc.sh	6.87 KB	-rw-r--r--
info	116 B	-rw-r--r--
preseed.json	841 B	-rw-r--r--
snap-bootstrap	12.32 MB	-rwxr-xr-x
snap-confine	197.01 KB	-rwxr-xr-x
snap-confine.caps	104 B	-rw-r--r--
snap-debug-info.sh	2.27 KB	-rwxr-xr-x
snap-device-helper	61.94 KB	-rwxr-xr-x
snap-discard-ns	45.89 KB	-rwxr-xr-x
snap-exec	5.01 MB	-rwxr-xr-x
snap-failure	3.04 MB	-rwxr-xr-x
snap-fde-keymgr	4.7 MB	-rwxr-xr-x
snap-gdb-shim	1.01 MB	-rwxr-xr-x
snap-gdbserver-shim	1.01 MB	-rwxr-xr-x
snap-gpio-helper	2.89 MB	-rwxr-xr-x
snap-mgmt	9.86 KB	-rwxr-xr-x
snap-mgmt-selinux	3.19 KB	-rwxr-xr-x
snap-preseed	10.71 MB	-rwxr-xr-x
snap-recovery-chooser	8.61 MB	-rwxr-xr-x
snap-repair	7.99 MB	-rwxr-xr-x
snap-seccomp	2.8 MB	-rwxr-xr-x
snap-update-ns	6.03 MB	-rwxr-xr-x
snapctl	7.69 MB	-rwxr-xr-x
snapd	28.28 MB	-rwxr-xr-x
snapd-apparmor	2.54 MB	-rwxr-xr-x
snapd.core-fixup.sh	3.74 KB	-rwxr-xr-x
snapd.run-from-snap	73 B	-rwxr-xr-x
system-shutdown	37.66 KB	-rwxr-xr-x

Code Editor : snap-mgmt-selinux

#!/bin/bash

set -e
set +x

STATIC_SNAP_MOUNT_DIR="/snap"

show_help() {
    exec cat <<'EOF'
Usage: snap-mgmt-selinux.sh [OPTIONS]

A helper script to manage SELinux contexts used by snapd

Arguments:
  --snap-mount-dir=<path>                   Provide a path to be used as $STATIC_SNAP_MOUNT_DIR
  --patch-selinux-mount-context=<context>   Add SELinux context to mount units
  --remove-selinux-mount-context=<context>  Remove SELinux context from mount units
EOF
}

SNAP_UNIT_PREFIX="$(systemd-escape -p ${STATIC_SNAP_MOUNT_DIR})"

patch_selinux_mount_context() {
    if ! command -v selinuxenabled > /dev/null; then
        return
    fi
    if ! selinuxenabled; then
        # The tools are there, but SELinux is not enabled
        return
    fi

selinux_mount_context="$1"
    remove="$2"
    if ! echo "$selinux_mount_context" | grep -qE '[a-zA-Z0-9_]+(:[a-zA-Z0-9_]+){2,3}'; then
        echo "invalid mount context '$selinux_mount_context'"
        exit 1
    fi
    context_opt="context=$selinux_mount_context"

mounts=$(systemctl list-unit-files --no-legend --full "$SNAP_UNIT_PREFIX-*.mount" | cut -f1 -d ' ' || true)
    changed_mounts=
    for unit in $mounts; do
        # Ensure its really a snap mount unit or systemd unit
        if ! grep -q 'What=/var/lib/snapd/snaps/' "/etc/systemd/system/$unit" && ! grep -q 'X-Snappy=yes' "/etc/systemd/system/$unit"; then
            echo "Skipping non-snapd systemd unit $unit"
            continue
        fi

if [ "$remove" == "" ]; then
            if grep -q "Options=.*,$context_opt" < "/etc/systemd/system/$unit"; then
                # already patched
                continue
            fi

if ! sed -i -e "s#^\$Options=nodev.*\$#\\1,$context_opt#" "/etc/systemd/system/$unit"; then
                echo "Cannot patch $unit"
            fi

changed_mounts="$changed_mounts $unit"
        elif [ "$remove" == "remove" ]; then
            if ! grep -q "Options=.*,$context_opt" < "/etc/systemd/system/$unit"; then
                # Not patched
                continue
            fi

if ! sed -i -e "s#^\$Options=nodev.*\$,$context_opt\$,.*\$\\?#\\1\\2#" "/etc/systemd/system/$unit"; then
                echo "Cannot patch $unit"
            fi

changed_mounts="$changed_mounts $unit"
        fi
    done

if [ -z "$changed_mounts" ]; then
        # Nothing changed, no need to reload
        return
    fi

systemctl daemon-reload

for unit in $changed_mounts; do
        if ! systemctl try-restart "$unit" ; then
            echo "Cannot restart $unit"
        fi
    done
}

while [ -n "$1" ]; do
    case "$1" in
        --help)
            show_help
            exit
            ;;
        --snap-mount-dir=*)
            STATIC_SNAP_MOUNT_DIR=${1#*=}
            SNAP_UNIT_PREFIX=$(systemd-escape -p "$STATIC_SNAP_MOUNT_DIR")
            shift
            ;;
        --patch-selinux-mount-context=*)
            patch_selinux_mount_context "${1#*=}"
            shift
            ;;
        --remove-selinux-mount-context=*)
            patch_selinux_mount_context "${1#*=}" remove
            shift
            ;;
        *)
            echo "Unknown command: $1"
            exit 1
            ;;
    esac
done

${this.title}

Code Editor : snap-mgmt-selinux