Re: [Pki-devel] [PATCH] Verify Symbolic Links (Dogtag 9)

The CS.cfg logic looks fine. The check_symlinks() code is still a little confusing. You do the following check: target=${symlinks[${key}]} # Check to make certain that the expected target exists. if [ -e ${target} ]; then .... else # Attempt to remove this dangling symbolic link and # issue an ERROR that the target to which the # symbolic link is expected to point does NOT exist. rm ${symlink} .... This is not correct. Its not necessarily a danglng link. The link that is there may in fact point to another (wrong) target. All you know is that you cannot correct this link because the expected target does not exist. To simplify check_links(), I suggest that you move the check for whether or not the target exists and is fully resolvable into make_symlink(). If either fails, then error out. then the logic in check_symlinks() becomes simpler. if [ -e symlink]; then if [-h symlink]; then target = symlinks[key] current_target = `readlink symlink` if [target == current_target]; then check if exists and resolvable and chown else rm symlink make_link() elif [-f symlink] warn about debugging else error "directory or some such" else make_link() On Mon, 2012-08-27 at 20:57 -0700, Matthew Harmsen wrote: