char *sge_make_tmpdir(lListElem *qep, u_long32 jobid, u_long32 jataskid, uid_t uid, gid_t gid, char *tmpdir)
{
const char *t;
DENTER(TOP_LAYER, "sge_make_tmpdir");
t = lGetString(qep, QU_tmpdir);
if (t == NULL) {
DRETURN(NULL);
}
/* Note could have multiple instantiations of same job, */
/* on same machine, under same queue */
sprintf(tmpdir, "%s/"sge_u32"."sge_u32".%s", t, jobid, jataskid, lGetString(qep, QU_qname));
DPRINTF(("making TMPDIR=%s\n", tmpdir));
sge_switch2start_user();
sge_mkdir(tmpdir, 0755, false, false);
/*
* chown is considered to be a security flaw, as an attacker might move the
* directory between the mkdir and chown.
* This is both nearly impossible here and would have no effect.
* Make flawfinder ignore it
*/
/* Flawfinder: ignore */
if (chown(tmpdir, uid, gid) != 0) {
dstring ds = DSTRING_INIT;
ERROR((SGE_EVENT, MSG_FILE_NOCHOWN_SS, tmpdir, sge_strerror(errno, &ds)));
sge_dstring_free(&ds);
unlink(tmpdir);
DRETURN(NULL);
}
sge_switch2admin_user();
DRETURN(tmpdir);
}
/*-------------------------------------------------------------------*/
void sge_setup_sge_execd(sge_gdi_ctx_class_t *ctx, const char* tmp_err_file_name)
{
char err_str[MAX_STRING_SIZE];
int allowed_get_conf_errors = 5;
char* spool_dir = NULL;
const char *unqualified_hostname = ctx->get_unqualified_hostname(ctx);
const char *admin_user = ctx->get_admin_user(ctx);
DENTER(TOP_LAYER, "sge_setup_sge_execd");
/* TODO: is this the right place to switch the user ?
ports below 1024 ok */
/*
** switch to admin user
*/
if (sge_set_admin_username(admin_user, err_str)) {
CRITICAL((SGE_EVENT, SFNMAX, err_str));
/* TODO: remove */
SGE_EXIT(NULL, 1);
}
if (sge_switch2admin_user()) {
CRITICAL((SGE_EVENT, SFNMAX, MSG_ERROR_CANTSWITCHTOADMINUSER));
/* TODO: remove */
SGE_EXIT(NULL, 1);
}
while (gdi2_wait_for_conf(ctx, &Execd_Config_List)) {
if (allowed_get_conf_errors-- <= 0) {
CRITICAL((SGE_EVENT, SFNMAX, MSG_EXECD_CANT_GET_CONFIGURATION_EXIT));
/* TODO: remove */
SGE_EXIT(NULL, 1);
}
sleep(1);
ctx->get_master(ctx, true);
}
sge_show_conf();
/* get aliased hostname */
/* TODO: is this call needed ? */
ctx->reresolve_qualified_hostname(ctx);
spool_dir = mconf_get_execd_spool_dir();
DPRINTF(("chdir(\"/\")----------------------------\n"));
sge_chdir_exit("/",1);
DPRINTF(("Making directories----------------------------\n"));
sge_mkdir(spool_dir, 0755, 1, 0);
DPRINTF(("chdir(\"%s\")----------------------------\n", spool_dir));
sge_chdir_exit(spool_dir,1);
sge_mkdir(unqualified_hostname, 0755, 1, 0);
DPRINTF(("chdir(\"%s\",me.unqualified_hostname)--------------------------\n",
unqualified_hostname));
sge_chdir_exit(unqualified_hostname, 1);
/* having passed the previous statement we may
log messages into the ERR_FILE */
if ( tmp_err_file_name != NULL) {
sge_copy_append((char*)tmp_err_file_name, ERR_FILE, SGE_MODE_APPEND);
}
sge_switch2start_user();
if ( tmp_err_file_name != NULL) {
unlink(tmp_err_file_name);
}
sge_switch2admin_user();
log_state_set_log_as_admin_user(1);
sprintf(execd_messages_file, "%s/%s/%s", spool_dir,
unqualified_hostname, ERR_FILE);
log_state_set_log_file(execd_messages_file);
sprintf(execd_spool_dir, "%s/%s", spool_dir,
unqualified_hostname);
DPRINTF(("Making directories----------------------------\n"));
sge_mkdir(EXEC_DIR, 0775, 1, 0);
sge_mkdir(JOB_DIR, 0775, 1, 0);
sge_mkdir(ACTIVE_DIR, 0775, 1, 0);
#if defined(PLPA_LINUX) || defined(SOLARIS86) || defined(SOLARISAMD64)
/* initialize processor topology */
if (initialize_topology() != true) {
DPRINTF(("Couldn't initizalize topology-----------------------\n"));
}
#endif
sge_free(&spool_dir);
DRETURN_VOID;
}
