#!/bin/bash

# a library file for redoing file ownership and permissions as we feel is
# appropriate.  this approach is a little bit specific to our way of doing
# things, but it does handle a lot of important fixes everyone would want,
# like making ~/.ssh really secure.

# cleans up the ownership and permissions for all of the important files and dirs.
function reapply_cool_permissions()
{
  local cooluser="$1"; shift

#hmmm: check for non empty name.
  local homebase="/home/$cooluser"

  # first build a list of dirs based on their location in /home/archives.
  local arch_builder="archons basement codebarn games imaginations musix pooling prewar_toaster stuffing toaster walrus"
  local ARCHIVE_TOP=/home/archives
  local dirname
  local arch_addin
  for dirname in $arch_builder; do
    arch_addin+="$ARCHIVE_TOP/$dirname "
  done
#echo arch addin now is: $arch_addin

  # now another round with similar setup, to ensure we get any directories
  # that actually live out in /z but not in /home/archives.
  ARCHIVE_TOP=/z
  for dirname in $arch_builder; do
    arch_addin+="$ARCHIVE_TOP/$dirname "
  done
#echo arch addin now is: $arch_addin

  # special case that makes our software hierarchy folder, if it doesn't exist.
  # everything else is only re-permed if it exists.
  if [ ! -d "$DEFAULT_FEISTYMEOW_ORG_DIR" ]; then
    sudo mkdir "$DEFAULT_FEISTYMEOW_ORG_DIR"
    continue_on_error "making directory: $DEFAULT_FEISTYMEOW_ORG_DIR"
  fi

  # fix some permissions for important security considerations.
  if [ -d $homebase/.ssh ]; then
    harsh_perm $homebase/.ssh
  fi

#hmmm: consider adding feisty meow apex to the dirname list below.

  # iterate across the list of dirs we want cooluser to own and change their ownership.
  for dirname in $homebase \
        $DEFAULT_FEISTYMEOW_ORG_DIR \
        /usr/local/${cooluser} \
        /home/games \
        $arch_addin; do
    if [ -d "$dirname" -o -L "$dirname" ]; then
      echo "revising ownership on '$dirname'"
      sudo chown -R ${cooluser}:${cooluser} "$dirname"
      continue_on_error "chowning for ${cooluser}: $dirname"
    fi
  done

  # special case for archives directory in stuffing.
  if [ -d /z/stuffing -o -L /z/stuffing ]; then
    sudo chown ${cooluser}:${cooluser} /z/
    continue_on_error "chowning /z for ${cooluser}"
    sudo chmod g+rx,o+rx /z
    continue_on_error "chmodding /z/ for ${cooluser}"
    sudo chown ${cooluser}:${cooluser} /z/stuffing/
    continue_on_error "chowning /z/stuffing for ${cooluser}"
    sudo chmod g+rx,o-rwx /z/stuffing
    continue_on_error "chmodding /z/stuffing for ${cooluser}"
    pushd /z/stuffing &>/dev/null
    if [ -d archives -o -L archives ]; then
      sudo chown ${cooluser}:${cooluser} archives/
      continue_on_error "chowning /z/stuffing/archives for ${cooluser}"
      sudo chmod -R g+rwx archives
      continue_on_error "chmodding /z/stuffing/archives for ${cooluser}"
    fi
    popd &>/dev/null
  fi

  # make the log files readable by normal humans.
  sudo bash $FEISTY_MEOW_SCRIPTS/security/normal_perm.sh /var/log
  continue_on_error "setting normal perms on /var/log"
}

# this block should execute when the script is actually run, rather
# than when it's just being sourced.

# this runs the cool permission applier on the current user.
if [[ $0 =~ .*cool_permissionator\.sh.* ]]; then
  THISDIR="$( \cd "$(\dirname "$0")" && /bin/pwd )"
  export FEISTY_MEOW_APEX="$( \cd "$THISDIR/../.." && \pwd )"
  source "$THISDIR/../core/launch_feisty_meow.sh"
  continue_on_error "sourcing the feisty meow launcher"
  coolio="$USER"
  reapply_cool_permissions "$coolio"
  continue_on_error "reapplying cool permissions on $coolio"
fi