ExternalVendorCode/genode
1
0
Fork 0
mirror of https://github.com/genodelabs/genode.git synced 2025-01-03 04:26:45 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Adaptation to chroot 'writeable' attribute

Browse Source 
Issue #2643
This commit is contained in:
Norman Feske 2018-02-16 10:29:32 +01:00
parent 2e9a19d5b0
commit eabe83d4f2
6 changed files with 37 additions and 14 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

30
repos/gems/recipes/raw/depot_download/depot_download.config
View File

@ -34,6 +34,28 @@
</config> </config>
</start> </start>
<start name="depot_ro">
<binary name="chroot"/>
<resource name="RAM" quantum="1M" />
<provides> <service name="File_system"/> </provides>
<config> <default-policy path="/" writeable="no"/> </config>
<route>
<service name="File_system"> <parent label="depot"/> </service>
<any-service> <parent/> </any-service>
</route>
</start>
<start name="public_ro">
<binary name="chroot"/>
<resource name="RAM" quantum="1M" />
<provides> <service name="File_system"/> </provides>
<config> <default-policy path="/" writeable="no"/> </config>
<route>
<service name="File_system"> <parent label="public"/> </service>
<any-service> <parent/> </any-service>
</route>
</start>
<start name="manager"> <start name="manager">
<binary name="depot_download_manager"/> <binary name="depot_download_manager"/>
<resource name="RAM" quantum="1M"/> <resource name="RAM" quantum="1M"/>
@ -54,10 +76,10 @@
<route> <route>
<service name="ROM" label="config"> <child name="report_rom"/> </service> <service name="ROM" label="config"> <child name="report_rom"/> </service>
<service name="Report"> <child name="report_rom"/> </service> <service name="Report"> <child name="report_rom"/> </service>
<service name="File_system" label="depot"> <parent label="depot"/> </service> <service name="File_system" label="depot"> <child name="depot_ro"/> </service>
<service name="File_system" label="depot_rw"> <parent label="depot_rw"/> </service> <service name="File_system" label="depot_rw"> <parent label="depot"/> </service>
<service name="File_system" label="public"> <parent label="public"/> </service> <service name="File_system" label="public"> <child name="public_ro"/> </service>
<service name="File_system" label="public_rw"> <parent label="public_rw"/> </service> <service name="File_system" label="public_rw"> <parent label="public"/> </service>
<any-service> <parent/> <any-child/> </any-service> <any-service> <parent/> <any-child/> </any-service>
</route> </route>
</start> </start>

6
repos/gems/run/depot_download.run
View File

@ -72,10 +72,8 @@ append config {
</dir> </dir>
<dir name="public"> <ram/> </dir> <dir name="public"> <ram/> </dir>
</vfs> </vfs>
<policy label="depot_download -> depot_rw" root="/depot" writeable="yes"/> <policy label="depot_download -> depot" root="/depot" writeable="yes"/>
<policy label="depot_download -> depot" root="/depot"/> <policy label="depot_download -> public" root="/public" writeable="yes"/>
<policy label="depot_download -> public_rw" root="/public" writeable="yes"/>
<policy label="depot_download -> public" root="/public"/>
</config> </config>
</start> </start>

4
repos/gems/run/sculpt.run
View File

@ -598,14 +598,14 @@ append depot_deploy_config {
<route> <route>
<service name="File_system"> <parent label="rw"/> </service> <service name="File_system"> <parent label="rw"/> </service>
</route> </route>
<config> <default-policy path="/vm/debian"/> </config> <config> <default-policy path="/vm/debian" writeable="yes"/> </config>
</start> </start>
<start name="shared_fs" pkg="} [depot_user]/pkg/[current_pkg chroot] {"> <start name="shared_fs" pkg="} [depot_user]/pkg/[current_pkg chroot] {">
<route> <route>
<service name="File_system"> <parent label="rw"/> </service> <service name="File_system"> <parent label="rw"/> </service>
</route> </route>
<config> <default-policy path="/shared"/> </config> <config> <default-policy path="/shared" writeable="yes"/> </config>
</start> </start>
<start name="usb_devices_rom" pkg="} [depot_user]/pkg/[current_pkg rom_filter] {"> <start name="usb_devices_rom" pkg="} [depot_user]/pkg/[current_pkg rom_filter] {">

2
repos/gems/run/sculpt/download_runtime.config
View File

@ -100,7 +100,7 @@
<binary name="chroot"/> <binary name="chroot"/>
<resource name="RAM" quantum="1M" /> <resource name="RAM" quantum="1M" />
<provides> <service name="File_system"/> </provides> <provides> <service name="File_system"/> </provides>
<config> <default-policy path="/vm/debian"/> </config> <config> <default-policy path="/vm/debian" writeable="yes"/> </config>
<route> <route>
<service name="File_system"> <child name="fs"/> </service> <service name="File_system"> <child name="fs"/> </service>
<any-service> <parent/> </any-service> <any-service> <parent/> </any-service>

4
repos/gems/run/sculpt/update_runtime.config
View File

@ -72,7 +72,7 @@
<binary name="chroot"/> <binary name="chroot"/>
<resource name="RAM" quantum="1M" /> <resource name="RAM" quantum="1M" />
<provides> <service name="File_system"/> </provides> <provides> <service name="File_system"/> </provides>
<config> <default-policy path="/depot"/> </config> <config> <default-policy path="/depot" writeable="yes"/> </config>
<route> <route>
<service name="File_system"> <child name="fs"/> </service> <service name="File_system"> <child name="fs"/> </service>
<any-service> <parent/> </any-service> <any-service> <parent/> </any-service>
@ -83,7 +83,7 @@
<binary name="chroot"/> <binary name="chroot"/>
<resource name="RAM" quantum="1M" /> <resource name="RAM" quantum="1M" />
<provides> <service name="File_system"/> </provides> <provides> <service name="File_system"/> </provides>
<config> <default-policy path="/public"/> </config> <config> <default-policy path="/public" writeable="yes"/> </config>
<route> <route>
<service name="File_system"> <child name="fs"/> </service> <service name="File_system"> <child name="fs"/> </service>
<any-service> <parent/> </any-service> <any-service> <parent/> </any-service>

5
repos/gems/src/app/depot_download_manager/gen_chroot.cc
View File

@ -23,7 +23,10 @@ void Depot_download_manager::gen_chroot_start_content(Xml_generator &xml,
xml.node("config", [&] () { xml.node("config", [&] () {
xml.node("default-policy", [&] () { xml.node("default-policy", [&] () {
xml.attribute("path", Path("/", user)); }); }); xml.attribute("path", Path("/", user));
xml.attribute("writeable", "yes");
});
});
xml.node("provides", [&] () { xml.node("provides", [&] () {
xml.node("service", [&] () { xml.node("service", [&] () {