bin/shill_login_user

#!/bin/sh

# Copyright (c) 2012 The Chromium OS Authors. All rights reserved.
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.

# Perform login tasks for shill.  This script is called by the "login"
# init script.

# Shill expects to find a user profile in /var/run/shill/user_profiles.
# There are 3 possible places a user profile could exist.  We should
# use them in the following priority order:
#
#  - "New style" cryptohome store -- we create a link to it in
#    /var/run/shill/user_profiles so if shill restarts while the
#    user is logged in, shill can regain access to the profile.
#  - User profile in ~chronos/shill -- if the above does not
#    exist, we validate this profile and move it to the cryptohome.
#    We then create a link to it using the step above.
#  - Old flimflam profile in ~chronos/flimflam -- If the above
#    does not exist, we move this to ~chronos/shill as an
#    intermediate step then use the steps above to validate,
#    and copy to the cryptohome profile.

set -e
# The login init script calls this script with the login name of the
# user whose profile is being loaded.
user=$1
script_name=$(basename $0)

# Reference to older connection manager profile.
flimflam_profile_dir=~chronos/flimflam
flimflam_profile="${flimflam_profile_dir}/flimflam.profile"

# NB: must quote ~chronos in command sent over dbus; don't want it expanded.
profile_user=chronos
profile_name="~${profile_user}/shill"
profile_link_root=/var/run/shill/user_profiles
profile_link_dir="$profile_link_root/$profile_user"

old_profile_dir=~chronos/shill
old_profile="$old_profile_dir/shill.profile"

if [ -n "$user" ] ; then
  cryptohome_dir=$(cryptohome-path system ${user})
  if [ ! -d "$cryptohome_dir" ] ; then
    logger -t "$script_name" \
      "User cryptohome dir $cryptohome_dir does not exist"
    exit 1
  fi
else
  # If no user is given, create a temporary profile directory which will
  # be erased on logout.
  cryptohome_dir="/var/run/shill/guest_user_profile"
  rm -rf "$cryptohome_dir"
fi

cryptohome_profile_dir="$cryptohome_dir/shill"
cryptohome_profile="$cryptohome_profile_dir/shill.profile"

if [ ! -d "$cryptohome_profile_dir" ]; then
  if ! mkdir -p --mode=700 $cryptohome_profile_dir ; then
    logger -t "$script_name" \
      "Failed to create shill user profile directory $cryptohome_profile_dir"
    exit 1
  fi
fi

if ! mkdir -p --mode 0700 "$profile_link_root"; then
  logger -t "$script_name" \
    "Unable to create shill user profile link directory"
fi
rm -f "$profile_link_root"/*
ln -s "$cryptohome_profile_dir" "$profile_link_dir" ||
  logger -t "$script_name" \
    "Failed to create shill user cryptohome link $profile_link_dir"

if [ ! -f "$cryptohome_profile" ]; then
  if [ -f "$flimflam_profile" ]; then
    if [ -f "$old_profile" ]; then
      logger -t "$script_name" "Removing outdated flimflam user profile"
      rm -f "$flimflam_profile"
      rmdir --ignore-fail-on-non-empty "$flimflam_profile_dir"
    else
      old_profile="$flimflam_profile"
      old_profile_dir="$flimflam_profile_dir"
    fi
  fi

  if [ -f "$old_profile" ] ; then
    test_profile="$cryptohome_profile_dir/shill.profile.test"
    mv "$old_profile" "$test_profile" ||
      logger -t "$script_name" "Failed to test-move old shill profile"
    rmdir --ignore-fail-on-non-empty "$old_profile_dir"

    # Inspect profile to make sure it makes sense as a shill profile,
    # and is properly owned.  Do so while it's in a directory whose
    # contents are unlikely to be modified underneath us.
    if [ -h "$test_profile" ] ; then
      logger -t "$script_name" "Old shill profile is a symlink"
    elif [ ! -f "$test_profile" ] ; then
      logger -t "$script_name" "Old shill profile is not a regular file"
    elif [ ! -O "$test_profile" ] ; then
      logger -t "$script_name" "Old shill profile was not properly owned"
    else
      logger -t "$script_name" "Moving old shill profile from $old_profile"
      mv "$test_profile" "$cryptohome_profile" ||
        logger -t "$script_name" "Failed to copy old shill profile"
    fi
    rm -rf "$test_profile"
  fi
  if [ -e "$old_profile" ] ; then
    # Old profile exists but does not resolve to a regular file!?
    logger -t "$script_name" "Old shill profile is not a file or was not moved"
    rm -rf "$old_profile"
    rmdir --ignore-fail-on-non-empty "$old_profile_dir"
  fi

  if [ ! -f "$cryptohome_profile" ]; then
    # If profile still does not exist, ask shill to create one.
    dbus-send --system --dest=org.chromium.flimflam --print-reply / \
      org.chromium.flimflam.Manager.CreateProfile string:$profile_name ||
        logger -t "$script_name" "Failed to create $profile_name profile"
  fi
fi

# Push user's network profile
dbus-send --system --dest=org.chromium.flimflam --print-reply / \
  org.chromium.flimflam.Manager.PushProfile string:$profile_name ||
    logger -t "$script_name" "Failed to push $profile_name profile"