comparison mercurial/ui.py @ 3013:494521a3f142

Only read .hg/hgrc files from trusted users/groups

The list of trusted users and groups is specified in the [trusted]
section of a hgrc; the current user is always trusted; "*" can be
used to trust all users/groups.

Global hgrc files are always read.

On Windows (and other systems that don't have the pwd and grp modules),
all .hg/hgrc files are read.

3012:abcd6ae3cf5a

        self.overlay = {}
        if parentui is None:
            # this is the parent of all ui children
            self.parentui = None
            self.readhooks = list(readhooks)
            self.cdata = ConfigParser.SafeConfigParser()
            self.readconfig(util.rcpath())

            self.quiet = self.configbool("ui", "quiet")
            self.verbose = self.configbool("ui", "verbose")

            self.revlogopts = self.configrevlog()
        else:
            # parentui may point to an ui object which is already a child
            self.parentui = parentui.parentui or parentui
            self.readhooks = list(parentui.readhooks or readhooks)
            parent_cdata = self.parentui.cdata
            self.cdata = ConfigParser.SafeConfigParser(parent_cdata.defaults())
            # make interpolation work
            for section in parent_cdata.sections():
                self.cdata.add_section(section)

    def readconfig(self, fn, root=None):
        if isinstance(fn, basestring):
            fn = [fn]
        for f in fn:
            try:
                self.cdata.read(f)
            except ConfigParser.ParsingError, inst:
                raise util.Abort(_("Failed to parse %s\n%s") % (f, inst))
        # translate paths relative to root (or home) into absolute paths
        if root is None:
            root = os.path.expanduser('~')
        for name, path in self.configitems("paths"):
            if path and "://" not in path and not os.path.isabs(path):
                self.cdata.set("paths", name, os.path.join(root, path))
        for hook in self.readhooks:
            hook(self)

    def setconfig(self, section, name, val):
        self.overlay[(section, name)] = val

3013:494521a3f142

        self.overlay = {}
        if parentui is None:
            # this is the parent of all ui children
            self.parentui = None
            self.readhooks = list(readhooks)
            self.trusted_users = {}
            self.trusted_groups = {}
            self.cdata = ConfigParser.SafeConfigParser()
            self.readconfig(util.rcpath())

            self.quiet = self.configbool("ui", "quiet")
            self.verbose = self.configbool("ui", "verbose")

            self.revlogopts = self.configrevlog()
        else:
            # parentui may point to an ui object which is already a child
            self.parentui = parentui.parentui or parentui
            self.readhooks = list(parentui.readhooks or readhooks)
            self.trusted_users = parentui.trusted_users.copy()
            self.trusted_groups = parentui.trusted_groups.copy()
            parent_cdata = self.parentui.cdata
            self.cdata = ConfigParser.SafeConfigParser(parent_cdata.defaults())
            # make interpolation work
            for section in parent_cdata.sections():
                self.cdata.add_section(section)

    def readconfig(self, fn, root=None):
        if isinstance(fn, basestring):
            fn = [fn]
        for f in fn:
            try:
                fp = open(f)
            except IOError:
                continue
            if ((self.trusted_users or self.trusted_groups) and
                '*' not in self.trusted_users and
                '*' not in self.trusted_groups):
                st = util.fstat(fp)
                user = util.username(st.st_uid)
                group = util.groupname(st.st_gid)
                if (user not in self.trusted_users and
                    group not in self.trusted_groups):
                    self.warn(_('not reading file %s from untrusted '
                                'user %s, group %s\n') % (f, user, group))
                    continue
            try:
                self.cdata.readfp(fp, f)
            except ConfigParser.ParsingError, inst:
                raise util.Abort(_("Failed to parse %s\n%s") % (f, inst))
        # translate paths relative to root (or home) into absolute paths
        if root is None:
            root = os.path.expanduser('~')
        for name, path in self.configitems("paths"):
            if path and "://" not in path and not os.path.isabs(path):
                self.cdata.set("paths", name, os.path.join(root, path))
        user = util.username()
        if user is not None:
            self.trusted_users[user] = 1
            for user in self.configlist('trusted', 'users'):
                self.trusted_users[user] = 1
            for group in self.configlist('trusted', 'groups'):
                self.trusted_groups[group] = 1
        for hook in self.readhooks:
            hook(self)

    def setconfig(self, section, name, val):
        self.overlay[(section, name)] = val