Home | History | Annotate | Download | only in Scripts 
      1 #!/bin/sh
      2 
      3 # Copyright (c) 2012 The Chromium Authors. All rights reserved.
      4 # Use of this source code is governed by a BSD-style license that can be
      5 # found in the LICENSE file.
      6 
      7 # Version = @@VERSION@@
      8 
      9 HELPERTOOLS=/Library/PrivilegedHelperTools
     10 SERVICE_NAME=org.chromium.chromoting
     11 CONFIG_FILE="$HELPERTOOLS/$SERVICE_NAME.json"
     12 SCRIPT_FILE="$HELPERTOOLS/$SERVICE_NAME.me2me.sh"
     13 USERS_TMP_FILE="$SCRIPT_FILE.users"
     14 PLIST=/Library/LaunchAgents/org.chromium.chromoting.plist
     15 PAM_CONFIG=/etc/pam.d/chrome-remote-desktop
     16 ENABLED_FILE="$HELPERTOOLS/$SERVICE_NAME.me2me_enabled"
     17 ENABLED_FILE_BACKUP="$ENABLED_FILE.backup"
     18 LOG_FILE=/var/log/org.chromium.chromoting.log
     19 
     20 KSADMIN=/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/MacOS/ksadmin
     21 KSUPDATE=https://tools.google.com/service/update2
     22 KSPID=com.google.chrome_remote_desktop
     23 KSPVERSION=@@VERSION@@
     24 
     25 function on_error {
     26   logger An error occurred during Chrome Remote Desktop setup.
     27   exit 1
     28 }
     29 
     30 function find_login_window_for_user {
     31   # This function mimics the behaviour of pgrep, which may not be installed
     32   # on Mac OS X.
     33   local user=$1
     34   ps -ec -u "$user" -o comm,pid | awk '$1 == "loginwindow" { print $2; exit }'
     35 }
     36 
     37 trap on_error ERR
     38 trap 'rm -f "$USERS_TMP_FILE"' EXIT
     39 
     40 logger Running Chrome Remote Desktop postflight script @@VERSION@@
     41 
     42 # Register a ticket with Keystone to keep this package up to date.
     43 $KSADMIN --register --productid "$KSPID" --version "$KSPVERSION" \
     44     --xcpath "$PLIST" --url "$KSUPDATE"
     45 
     46 # If there is a backup _enabled file, re-enable the service.
     47 if [[ -f "$ENABLED_FILE_BACKUP" ]]; then
     48   mv "$ENABLED_FILE_BACKUP" "$ENABLED_FILE"
     49 fi
     50 
     51 # Create the PAM configuration unless it already exists and has been edited.
     52 update_pam=1
     53 CONTROL_LINE="# If you edit this file, please delete this line."
     54 if [[ -f "$PAM_CONFIG" ]] && ! grep -qF "$CONTROL_LINE" "$PAM_CONFIG"; then
     55   update_pam=0
     56 fi
     57 
     58 if [[ "$update_pam" == "1" ]]; then
     59   logger Creating PAM config.
     60   cat > "$PAM_CONFIG" <<EOF
     61 # Copyright (c) 2012 The Chromium Authors. All rights reserved.
     62 # Use of this source code is governed by a BSD-style license that can be
     63 # found in the LICENSE file.
     64 
     65 auth       required   pam_deny.so
     66 account    required   pam_permit.so
     67 password   required   pam_deny.so
     68 session    required   pam_deny.so
     69 
     70 # This file is auto-updated by the Chrome Remote Desktop installer.
     71 $CONTROL_LINE
     72 EOF
     73 else
     74   logger PAM config has local edits. Not updating.
     75 fi
     76 
     77 # Create the log file (if this isn't created ahead of time
     78 # then directing output from the service there won't work).
     79 # Make sure admins have write privileges (CRD users are
     80 # typically admins)
     81 touch "$LOG_FILE"
     82 chown :admin "$LOG_FILE"
     83 chmod 660 "$LOG_FILE"
     84 
     85 # Load the service for each user for whom the service was unloaded in the
     86 # preflight script (this includes the root user, in case only the login screen
     87 # is being remoted and this is a Keystone-triggered update).
     88 # Also, in case this is a fresh install, load the service for the user running
     89 # the installer, so they don't have to log out and back in again.
     90 if [[ -n "$USER" && "$USER" != "root" ]]; then
     91   id -u "$USER" >> "$USERS_TMP_FILE"
     92 fi
     93 
     94 if [[ -r "$USERS_TMP_FILE" ]]; then
     95   for uid in $(sort "$USERS_TMP_FILE" | uniq); do
     96     logger Starting service for user "$uid".
     97 
     98     if [[ "$uid" = "0" ]]; then
     99       context="LoginWindow"
    100     else
    101       context="Aqua"
    102     fi
    103 
    104     # Load the launchd agent in the bootstrap context of user $uid's graphical
    105     # session, so that screen-capture and input-injection can work. To do this,
    106     # find the PID of a process which is running in that context. The
    107     # loginwindow process is a good candidate since the user (if logged in to
    108     # a session) will definitely be running it.
    109     pid="$(find_login_window_for_user "$uid")"
    110     if [[ -n "$pid" ]]; then
    111       launchctl bsexec "$pid" sudo -u "#$uid" launchctl load -w -S Aqua "$PLIST"
    112       launchctl bsexec "$pid" sudo -u "#$uid" launchctl start "$SERVICE_NAME"
    113     fi
    114   done
    115 fi
    116