operator-admin

#!/usr/bin/python3 -I
# isort: skip_file
import os
import stat
import sys
from pathlib import Path

INSTALL_ROOT = Path(__file__).resolve().parent


def require_root_owned_code(path: Path) -> None:
    for candidate in (path, path.resolve()):
        current = Path("/")
        for part in candidate.parts[1:]:
            current /= part
            metadata = current.lstat()
            if metadata.st_uid != 0 or (
                not stat.S_ISLNK(metadata.st_mode) and stat.S_IMODE(metadata.st_mode) & 0o022
            ):
                raise SystemExit(f"unsafe privileged code path: {current}")


if os.geteuid() == 0:
    require_root_owned_code(Path(sys.executable))
    require_root_owned_code(INSTALL_ROOT / "operator-admin")
    require_root_owned_code(INSTALL_ROOT / "authority_admin.py")
    require_root_owned_code(INSTALL_ROOT / "authority_broker.py")

os.chdir("/")
os.environ.clear()
os.environ["LANG"] = "C"
sys.path.insert(0, str(INSTALL_ROOT))

from authority_admin import main  # noqa: E402


if __name__ == "__main__":
    raise SystemExit(main())