aboutsummaryrefslogtreecommitdiffhomepage
path: root/internal/acl
diff options
context:
space:
mode:
authorOphestra Umiker <cat@ophivana.moe>2024-09-16 20:32:07 +0900
committerOphestra Umiker <cat@ophivana.moe>2024-09-16 20:32:07 +0900
commit03c24c51224e85eb96527a512f5f0483464fc810 (patch)
tree2feede4d9448fc881b0d4b8a193c0c82f6627221 /internal/acl
parent8bdae74ebe172239573bab9fca634cf350cbd29d (diff)
move acl and xcb binding packages to top level
These packages are reasonably clean and do not interact with other packages. Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
Diffstat (limited to 'internal/acl')
-rw-r--r--internal/acl/c.go99
-rw-r--r--internal/acl/export.go86
2 files changed, 0 insertions, 185 deletions
diff --git a/internal/acl/c.go b/internal/acl/c.go
deleted file mode 100644
index 89bc0469..00000000
--- a/internal/acl/c.go
+++ /dev/null
@@ -1,99 +0,0 @@
-package acl
-
-import (
- "errors"
- "fmt"
- "syscall"
- "unsafe"
-)
-
-//#include <stdlib.h>
-//#include <sys/acl.h>
-//#include <acl/libacl.h>
-//#cgo linux LDFLAGS: -lacl
-import "C"
-
-type acl struct {
- val C.acl_t
- freed bool
-}
-
-func aclGetFile(path string, t C.acl_type_t) (*acl, error) {
- p := C.CString(path)
- a, err := C.acl_get_file(p, t)
- C.free(unsafe.Pointer(p))
-
- if errors.Is(err, syscall.ENODATA) {
- err = nil
- }
- return &acl{val: a, freed: false}, err
-}
-
-func (a *acl) setFile(path string, t C.acl_type_t) error {
- if C.acl_valid(a.val) != 0 {
- return fmt.Errorf("invalid acl")
- }
-
- p := C.CString(path)
- _, err := C.acl_set_file(p, t, a.val)
- C.free(unsafe.Pointer(p))
- return err
-}
-
-func (a *acl) removeEntry(tt C.acl_tag_t, tq int) error {
- var e C.acl_entry_t
-
- // get first entry
- if r, err := C.acl_get_entry(a.val, C.ACL_FIRST_ENTRY, &e); err != nil {
- return err
- } else if r == 0 {
- // return on acl with no entries
- return nil
- }
-
- for {
- if r, err := C.acl_get_entry(a.val, C.ACL_NEXT_ENTRY, &e); err != nil {
- return err
- } else if r == 0 {
- // return on drained acl
- return nil
- }
-
- var (
- q int
- t C.acl_tag_t
- )
-
- // get current entry tag type
- if _, err := C.acl_get_tag_type(e, &t); err != nil {
- return err
- }
-
- // get current entry qualifier
- if rq, err := C.acl_get_qualifier(e); err != nil {
- // neither ACL_USER nor ACL_GROUP
- if errors.Is(err, syscall.EINVAL) {
- continue
- }
-
- return err
- } else {
- q = *(*int)(rq)
- C.acl_free(rq)
- }
-
- // delete on match
- if t == tt && q == tq {
- _, err := C.acl_delete_entry(a.val, e)
- return err
- }
- }
-}
-
-func (a *acl) free() {
- if a.freed {
- panic("acl already freed")
- }
- C.acl_free(unsafe.Pointer(a.val))
- a.freed = true
-}
diff --git a/internal/acl/export.go b/internal/acl/export.go
deleted file mode 100644
index aeb8ed96..00000000
--- a/internal/acl/export.go
+++ /dev/null
@@ -1,86 +0,0 @@
-package acl
-
-import "unsafe"
-
-//#include <stdlib.h>
-//#include <sys/acl.h>
-//#include <acl/libacl.h>
-//#cgo linux LDFLAGS: -lacl
-import "C"
-
-const (
- Read = C.ACL_READ
- Write = C.ACL_WRITE
- Execute = C.ACL_EXECUTE
-
- TypeDefault = C.ACL_TYPE_DEFAULT
- TypeAccess = C.ACL_TYPE_ACCESS
-
- UndefinedTag = C.ACL_UNDEFINED_TAG
- UserObj = C.ACL_USER_OBJ
- User = C.ACL_USER
- GroupObj = C.ACL_GROUP_OBJ
- Group = C.ACL_GROUP
- Mask = C.ACL_MASK
- Other = C.ACL_OTHER
-)
-
-func UpdatePerm(path string, uid int, perms ...C.acl_perm_t) error {
- // read acl from file
- a, err := aclGetFile(path, TypeAccess)
- if err != nil {
- return err
- }
- // free acl on return if get is successful
- defer a.free()
-
- // remove existing entry
- if err = a.removeEntry(User, uid); err != nil {
- return err
- }
-
- // create new entry if perms are passed
- if len(perms) > 0 {
- // create new acl entry
- var e C.acl_entry_t
- if _, err = C.acl_create_entry(&a.val, &e); err != nil {
- return err
- }
-
- // get perm set of new entry
- var p C.acl_permset_t
- if _, err = C.acl_get_permset(e, &p); err != nil {
- return err
- }
-
- // add target perms
- for _, perm := range perms {
- if _, err = C.acl_add_perm(p, perm); err != nil {
- return err
- }
- }
-
- // set perm set to new entry
- if _, err = C.acl_set_permset(e, p); err != nil {
- return err
- }
-
- // set user tag to new entry
- if _, err = C.acl_set_tag_type(e, User); err != nil {
- return err
- }
-
- // set qualifier (uid) to new entry
- if _, err = C.acl_set_qualifier(e, unsafe.Pointer(&uid)); err != nil {
- return err
- }
- }
-
- // calculate mask after update
- if _, err = C.acl_calc_mask(&a.val); err != nil {
- return err
- }
-
- // write acl to file
- return a.setFile(path, TypeAccess)
-}