rails_pwnerer 0.6.7 → 0.6.8

data/CHANGELOG

@@ -1,3 +1,5 @@
+v0.6.8. Added command for re-keying an app (changing the db user's password).
+
 v0.6.7. Tighter permissions around the configuration database files.
 
 v0.6.6. Bugfix in configuration update system: wasn't retaining database settings.

data/README

@@ -75,6 +75,9 @@ rpwn db_console your_application
 * Configure DynDns for your application server
 sudo rpwn scaffold ddns full_host_name ddns_user ddns_password  
 
+* Change the database password
+sudp rpwn rekey your_application
+
 * Bring down all the applications (panic mode):
 sudo rpwn go down
 

data/lib/pwnage/app/config.rb

@@ -3,6 +3,10 @@ require 'yaml'
 
 class RailsPwnage::App::Config
   include RailsPwnage::Base
+  
+  def random_db_password
+    (0...16).map { |i| "abcdefghijklmnopqrstuvwxyz"[rand(26),1]}.join
+  end
 
   # fills inexsitent keys with their default values
   # setup: this effectively creates the baseline configuration db
@@ -24,7 +28,7 @@ class RailsPwnage::App::Config
     # the datbase user for the given application
     app_db[:db_user] ||= (app_name + '_' + instance_name)[0...16] # mySQL doesn't like long user names
     # the password of the database user for the given application
-    app_db[:db_pass] ||= (0...16).map { |i| "abcdefghijklmnopqrstuvwxyz"[rand(26),1]}.join
+    app_db[:db_pass] ||= random_db_password
     # a DNS name for server-based filtering (multiple apps on the same box)
     app_db[:dns_name] ||= ''
     # the environment to run the application in
@@ -57,6 +61,8 @@ class RailsPwnage::App::Config
     
     db_name, db_user, db_pass = app_config[:db_name], app_config[:db_user], app_config[:db_pass]
     app_config.clear
+    # TODO: don't restore the password, to force new password generation on the update
+    # this is useful so processes that were spawned before the update can't corrupt the db
     app_config[:db_name], app_config[:db_user], app_config[:db_pass] = db_name, db_user, db_pass
     
     populate_defaults app_name, instance_name, app_config
@@ -71,9 +77,21 @@ class RailsPwnage::App::Config
     end
     
     # TODO: if database settings changed, the database should be moved (re-created or re-keyed)
+    if db_pass != app_config[:db_pass]
+      db_pass = random_db_password if !db_pass || db_pass.empty?
+      RailsPwnage::Databaase.new.manage app_name, instance_name, :rekey
+    end
     
     RailsPwnage::Config.flush_db RailsPwnage::Config.app_db_name(app_name, instance_name)
   end
+  
+  def manage(app_name, instance_name, action)    
+    case action
+    when :rekey
+      app_config = RailsPwnage::Config[app_name, instance_name]
+      app_config[:db_pass] = random_db_password
+    end
+  end
 
   def setup(app_name, instance_name)
     update app_name, instance_name

data/lib/pwnage/app/database.rb

@@ -21,6 +21,11 @@ class RailsPwnage::App::Database
         CREATE DATABASE #{db_name};
         GRANT ALL ON #{db_name}.* TO '#{db_user}'@'localhost' IDENTIFIED BY '#{db_pass}' WITH GRANT OPTION;
 ENDSQL
+      when :rekey
+      sql_commands = <<ENDSQL
+        GRANT ALL ON #{db_name}.* TO '#{db_user}'@'localhost' IDENTIFIED BY '#{db_pass}' WITH GRANT OPTION;
+ENDSQL
+      
       when :drop
       sql_commands = <<ENDSQL
         DROP DATABASE #{db_name};
@@ -146,6 +151,9 @@ ENDSQL
       load_database app_name, instance_name
       configure_rails app_name, instance_name
       migrate_database app_name, instance_name
+    when :rekey
+      admin_database app_name, instance_name, :rekey
+      configure_rails app_name, instance_name
     end
   end
   

data/lib/pwnage/app/main.rb

@@ -85,6 +85,12 @@ module RailsPwnage::App
               mod.new.manage app, instance, action
             end
           end
+        when :rekey
+          self.update_app app, instance do
+            [Config, Database].each do |mod|
+              mod.new.manage app, instance, action
+            end
+          end          
         when :console
           Svn.new.manage app, instance, action
         when :db_console

data/lib/pwnage/executor.rb

@@ -89,6 +89,10 @@ class RailsPwnage::Executor
       app_name = args[1]
       instance_name = args[2] || '.'
       RailsPwnage::App.manage app_name, instance_name, :db_console
+    when 'rekey'
+      app_name = args[1]
+      instance_name = args[2] || '.'
+      RailsPwnage::App.manage app_name, instance_name, :rekey
      
     when 'showconfig', 'configshow', 'show_config', 'config_show', 'showconf'
       if args.length < 2

data/rails_pwnerer.gemspec

@@ -1,11 +1,11 @@
 
-# Gem::Specification for Rails_pwnerer-0.6.7
+# Gem::Specification for Rails_pwnerer-0.6.8
 # Originally generated by Echoe
 
 --- !ruby/object:Gem::Specification 
 name: rails_pwnerer
 version: !ruby/object:Gem::Version 
-  version: 0.6.7
+  version: 0.6.8
 platform: ruby
 authors: 
 - Victor Costan

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification 
 name: rails_pwnerer
 version: !ruby/object:Gem::Version 
-  version: 0.6.7
+  version: 0.6.8
 platform: ruby
 authors: 
 - Victor Costan