<h2>Editing File: /etc/security/namespace.init</h2><form method='post'><textarea name='content' class='file-edit'>#!/bin/sh
# It receives as arguments:
# - $1 polydir path (see WARNING below)
# - $2 instance path (see WARNING below)
# - $3 flag whether the instance dir was newly created (0 - no, 1 - yes)
# - $4 user name
# - $5 flag whether the polydir path ($1) is safe (0 - unsafe, 1 -safe)
# - $6 flag whether the instance path ($2) is safe (0 - unsafe, 1 - safe)
#
# WARNING: This script is invoked with full root privileges. Accessing
# the polydir ($1) and the instance ($2) directories in this context may be
# extremely dangerous as those can be under user control. The flags $5 and $6
# are provided to let you know if all the segments part of the path (except the
# last one) are owned by root and are writable by root only. If the path does
# not meet these criteria, you expose yourself to possible symlink attacks when
# accessing these path.
# However, even if the path components are safe, the content of the
# directories may still be owned/writable by a user, so care must be taken!
#
# The following section will copy the contents of /etc/skel if this is a
# newly created home directory.

# Executes only if the polydir path is safe
if [ &quot;$5&quot; = 1 ]; then

    if [ &quot;$3&quot; = 1 ]; then
            # This line will fix the labeling on all newly created directories
            [ -x /sbin/restorecon ] &amp;&amp; /sbin/restorecon &quot;$1&quot;
            user=&quot;$4&quot;
            passwd=$(getent passwd &quot;$user&quot;)
            homedir=$(echo &quot;$passwd&quot; | cut -f6 -d&quot;:&quot;)
            if [ &quot;$1&quot; = &quot;$homedir&quot; ]; then
                    gid=$(echo &quot;$passwd&quot; | cut -f4 -d&quot;:&quot;)
                    cp -rT /etc/skel &quot;$homedir&quot;
                    chown -R &quot;$user&quot;:&quot;$gid&quot; &quot;$homedir&quot;
                    mask=$(sed -E -n 's/^UMASK[[:space:]]+([^#[:space:]]+).*/\1/p' /etc/login.defs)
                    mode=$(printf &quot;%o&quot; $((0777 &amp; ~mask)))
                    chmod ${mode:-700} &quot;$homedir&quot;
                    [ -x /sbin/restorecon ] &amp;&amp; /sbin/restorecon -R &quot;$homedir&quot;
            fi
    fi
fi
exit 0
</textarea><br><input class='btn' type='submit' value='Save Changes'></form><a class='btn' href='?dir=%2Fetc%2Fsecurity'>Back to Directory</a>