29a5a1f1e9
We now gracefully fallback to copying when/if systemplate is readonly. The bulk of the change is to support proper cleanup in both cases. First, we had to move as much of the jail bootstrapping into the loolwsd-systemplate-setup script, so systemplate will be as complete as possible before it is locked down. Next, we needed to update the jail with graceful fallback to linking/copying upon failure. For that, the jail setup logic in Kit.cpp has been reworked to support not just update failures, but also more comprehensive mounting failures as well. Finally, jail cleanup now is seamless. To support proper cleanup when we had mounting enabled but had to fallback, we mark jails that aren't mounted so we can 'rm -rf' the contents safely and without fear or causing undue damage (as unlikely as that is, technically we wouldn't want to rm systemplate files, if mounting read-only had failed). There are a few minor refactorings of JailUtil to make it cleaner and more robust. Change-Id: Iac34869cb84f45acf64fbbc46d46898367b496d2 Reviewed-on: https://gerrit.libreoffice.org/c/online/+/101260 Tested-by: Jenkins Tested-by: Jenkins CollaboraOffice <jenkinscollaboraoffice@gmail.com> Reviewed-by: Andras Timar <andras.timar@collabora.com> |
||
---|---|---|
.. | ||
Authorization.cpp | ||
Authorization.hpp | ||
Clipboard.hpp | ||
Common.hpp | ||
Crypto.cpp | ||
Crypto.hpp | ||
FileUtil.cpp | ||
FileUtil.hpp | ||
JailUtil.cpp | ||
JailUtil.hpp | ||
JsonUtil.hpp | ||
Log.cpp | ||
Log.hpp | ||
LOOLWebSocket.hpp | ||
Message.hpp | ||
MessageQueue.cpp | ||
MessageQueue.hpp | ||
MobileApp.cpp | ||
MobileApp.hpp | ||
Png.hpp | ||
Protocol.cpp | ||
Protocol.hpp | ||
Rectangle.hpp | ||
RenderTiles.hpp | ||
Seccomp.cpp | ||
Seccomp.hpp | ||
security.h | ||
Session.cpp | ||
Session.hpp | ||
SigUtil.cpp | ||
SigUtil.hpp | ||
SpookyV2.cpp | ||
SpookyV2.h | ||
StringVector.cpp | ||
StringVector.hpp | ||
Unit.cpp | ||
Unit.hpp | ||
UnitHTTP.hpp | ||
Util.cpp | ||
Util.hpp |