elvis 0.0.1

data/LICENSE.md

@@ -0,0 +1,13 @@
+Copyright 2011 Square Inc.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

data/README.md

@@ -0,0 +1,16 @@
+Elvis synopsis
+============================
+
+  system "id"
+  Elvis.run_as(nobody) {
+    system "id"
+  }
+  system "id"
+
+
+Elvis limitations
+============================
+
+ * Elvis currently supports linux and OSX. set*id() functions behave very differently on different unixes, patches welcome.
+ * Elvis cannot be used with JRuby because of the JVM model. Instead, spawn a subprocess.
+ * Elvis cannot be used in conjunction with threads, as it modifies process global state.

data/lib/elvis.rb

@@ -0,0 +1,71 @@
+#!/usr/bin/ruby
+
+require 'etc'
+
+module Elvis
+  
+  def Elvis.check_threads
+    if Thread.list.length != 1
+      raise "Elvis.run_as cannot be used with threads"
+    end
+  end
+  arch, os = RUBY_PLATFORM.split('-')
+  if os =~ /^darwin/
+    def Elvis.run_as(user)
+      check_threads
+      pw = Etc.getpwnam(user)
+      
+      original_uid = Process.euid
+      original_gid = Process.egid
+      original_groups = Process.groups
+      begin
+        Process::Sys.setregid(pw.gid, pw.gid)
+        Process.initgroups(user, pw.gid)
+        Process::Sys.seteuid(pw.uid)
+        Process::Sys.setreuid(pw.uid, -1)
+        
+        yield
+      ensure
+        Process::Sys.setreuid(original_uid, original_uid)
+        Process::Sys.setregid(original_gid, original_gid)
+        Process.groups = original_groups
+      end
+    end
+  elsif os == "linux"
+    def Elvis.run_as(user)
+      check_threads
+      pw = Etc.getpwnam(user)
+      
+      original_uid = Process.euid
+      original_gid = Process.egid
+      original_groups = Process.groups
+      begin
+        Process::Sys.setresgid(pw.gid, pw.gid, -1)
+        Process.initgroups(user, pw.gid)
+        Process::Sys.setresuid(pw.uid, pw.uid, -1)
+        
+        yield
+      ensure
+        Process::Sys.setresuid(original_uid, original_uid, -1)
+        Process::Sys.setresgid(original_gid, original_gid, -1)
+        Process.groups = original_groups
+      end
+    end
+  else
+    raise "unknown platform: #{RUBY_PLATFORM}. set*id() functions do not have reliable behavior between systems."
+  end
+end
+
+if __FILE__ == $0
+  print "Starting up as:   "
+  system "id"
+  begin
+    Elvis.run_as(ARGV.first) {
+      print "inside block as:  "
+      system "id"
+    }
+  ensure
+    print "outside block as: "
+    system "id"
+  end
+end

metadata

@@ -0,0 +1,70 @@
+--- !ruby/object:Gem::Specification 
+name: elvis
+version: !ruby/object:Gem::Version 
+  hash: 29
+  prerelease: 
+  segments: 
+  - 0
+  - 0
+  - 1
+  version: 0.0.1
+platform: ruby
+authors: 
+- Evan Miller
+autorequire: 
+bindir: bin
+cert_chain: []
+
+date: 2012-08-24 00:00:00 Z
+dependencies: []
+
+description: When you're root, sometimes it's handy to drop privileges temporarily to impersonate a user
+email: 
+- evan@squareup.com
+executables: []
+
+extensions: []
+
+extra_rdoc_files: 
+- LICENSE.md
+files: 
+- lib/elvis.rb
+- README.md
+- LICENSE.md
+homepage: https://github.com/square/prodeng/tree/master/elvis
+licenses: []
+
+post_install_message: 
+rdoc_options: 
+- --charset=UTF-8
+require_paths: 
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement 
+  none: false
+  requirements: 
+  - - ">="
+    - !ruby/object:Gem::Version 
+      hash: 3
+      segments: 
+      - 0
+      version: "0"
+required_rubygems_version: !ruby/object:Gem::Requirement 
+  none: false
+  requirements: 
+  - - ">="
+    - !ruby/object:Gem::Version 
+      hash: 23
+      segments: 
+      - 1
+      - 3
+      - 6
+      version: 1.3.6
+requirements: []
+
+rubyforge_project: 
+rubygems_version: 1.8.24
+signing_key: 
+specification_version: 3
+summary: Elvis impersonates users
+test_files: []
+