bug 222012. Better enforce persistent directory location

CASA/CASA.changes

@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Thu Jan  4 13:37:03 MST 2007 - jnorman@novell.com
+
+- Bug 221012. Based on code review, enhance persistent directory
+  policy.
+
 -------------------------------------------------------------------
 Wed Jan  3 08:12:10 MST 2007 - jnorman@novell.com
 

CASA/micasad/cache/SecretStore.cs

@@ -37,6 +37,11 @@ using sscs.crypto;
 
 using Novell.CASA.CASAPolicy;
 
+#if LINUX
+using Mono.Unix.Native;
+#endif
+
+
 namespace sscs.cache
 {
     class SecretStore
@@ -1135,5 +1140,43 @@ namespace sscs.cache
 			Mono.Unix.Native.Syscall.umask(permissions);
 #endif
         }
+
+        internal bool IsDirectoryOwnedByUser(string sPath)
+        {
+
+#if LINUX
+            try
+            {
+                Stat stat = new Stat();
+                int rcode = Syscall.stat(sPath, out stat);
+
+                if (stat.st_uid == (uint)this.user.UserIdentifier.GetUID())
+                {
+                    FilePermissions fp = stat.st_mode;
+                    if ((fp & FilePermissions.S_IWUSR) != FilePermissions.S_IWUSR)
+                    {                        
+                        return false;                        
+                    }
+                    else
+                    {
+                        return true;
                     }
                 }
+                else
+                {
+                    return false;                                        
+                }
+
+            }
+            catch (Exception e)
+            {
+                return false;
+            }
+            
+#else
+            return true;
+#endif
+        }
+    }
+}
+

CASA/micasad/verbs/ObjectSerialization.cs

@@ -277,9 +277,12 @@ namespace sscs.verbs
 				cpd.SetErrorMessage("Directory not allowed");
 				return wo;			
 			}
-	
 #endif
-
+            if (!ssStore.IsDirectoryOwnedByUser(sNewDir))
+            {
+                cpd.SetErrorMessage("Directory not owned by user");
+                return wo;
+            }
 
             // copy all .miCASA* files to new location
 			string[] files = Directory.GetFiles(sOldDir, ".miCASA*");