diff options
| author | Ophestra Umiker <cat@ophivana.moe> | 2024-09-16 20:32:07 +0900 |
|---|---|---|
| committer | Ophestra Umiker <cat@ophivana.moe> | 2024-09-16 20:32:07 +0900 |
| commit | 03c24c51224e85eb96527a512f5f0483464fc810 (patch) | |
| tree | 2feede4d9448fc881b0d4b8a193c0c82f6627221 /internal/acl | |
| parent | 8bdae74ebe172239573bab9fca634cf350cbd29d (diff) | |
move acl and xcb binding packages to top level
These packages are reasonably clean and do not interact with other packages.
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
Diffstat (limited to 'internal/acl')
| -rw-r--r-- | internal/acl/c.go | 99 | ||||
| -rw-r--r-- | internal/acl/export.go | 86 |
2 files changed, 0 insertions, 185 deletions
diff --git a/internal/acl/c.go b/internal/acl/c.go deleted file mode 100644 index 89bc0469..00000000 --- a/internal/acl/c.go +++ /dev/null @@ -1,99 +0,0 @@ -package acl - -import ( - "errors" - "fmt" - "syscall" - "unsafe" -) - -//#include <stdlib.h> -//#include <sys/acl.h> -//#include <acl/libacl.h> -//#cgo linux LDFLAGS: -lacl -import "C" - -type acl struct { - val C.acl_t - freed bool -} - -func aclGetFile(path string, t C.acl_type_t) (*acl, error) { - p := C.CString(path) - a, err := C.acl_get_file(p, t) - C.free(unsafe.Pointer(p)) - - if errors.Is(err, syscall.ENODATA) { - err = nil - } - return &acl{val: a, freed: false}, err -} - -func (a *acl) setFile(path string, t C.acl_type_t) error { - if C.acl_valid(a.val) != 0 { - return fmt.Errorf("invalid acl") - } - - p := C.CString(path) - _, err := C.acl_set_file(p, t, a.val) - C.free(unsafe.Pointer(p)) - return err -} - -func (a *acl) removeEntry(tt C.acl_tag_t, tq int) error { - var e C.acl_entry_t - - // get first entry - if r, err := C.acl_get_entry(a.val, C.ACL_FIRST_ENTRY, &e); err != nil { - return err - } else if r == 0 { - // return on acl with no entries - return nil - } - - for { - if r, err := C.acl_get_entry(a.val, C.ACL_NEXT_ENTRY, &e); err != nil { - return err - } else if r == 0 { - // return on drained acl - return nil - } - - var ( - q int - t C.acl_tag_t - ) - - // get current entry tag type - if _, err := C.acl_get_tag_type(e, &t); err != nil { - return err - } - - // get current entry qualifier - if rq, err := C.acl_get_qualifier(e); err != nil { - // neither ACL_USER nor ACL_GROUP - if errors.Is(err, syscall.EINVAL) { - continue - } - - return err - } else { - q = *(*int)(rq) - C.acl_free(rq) - } - - // delete on match - if t == tt && q == tq { - _, err := C.acl_delete_entry(a.val, e) - return err - } - } -} - -func (a *acl) free() { - if a.freed { - panic("acl already freed") - } - C.acl_free(unsafe.Pointer(a.val)) - a.freed = true -} diff --git a/internal/acl/export.go b/internal/acl/export.go deleted file mode 100644 index aeb8ed96..00000000 --- a/internal/acl/export.go +++ /dev/null @@ -1,86 +0,0 @@ -package acl - -import "unsafe" - -//#include <stdlib.h> -//#include <sys/acl.h> -//#include <acl/libacl.h> -//#cgo linux LDFLAGS: -lacl -import "C" - -const ( - Read = C.ACL_READ - Write = C.ACL_WRITE - Execute = C.ACL_EXECUTE - - TypeDefault = C.ACL_TYPE_DEFAULT - TypeAccess = C.ACL_TYPE_ACCESS - - UndefinedTag = C.ACL_UNDEFINED_TAG - UserObj = C.ACL_USER_OBJ - User = C.ACL_USER - GroupObj = C.ACL_GROUP_OBJ - Group = C.ACL_GROUP - Mask = C.ACL_MASK - Other = C.ACL_OTHER -) - -func UpdatePerm(path string, uid int, perms ...C.acl_perm_t) error { - // read acl from file - a, err := aclGetFile(path, TypeAccess) - if err != nil { - return err - } - // free acl on return if get is successful - defer a.free() - - // remove existing entry - if err = a.removeEntry(User, uid); err != nil { - return err - } - - // create new entry if perms are passed - if len(perms) > 0 { - // create new acl entry - var e C.acl_entry_t - if _, err = C.acl_create_entry(&a.val, &e); err != nil { - return err - } - - // get perm set of new entry - var p C.acl_permset_t - if _, err = C.acl_get_permset(e, &p); err != nil { - return err - } - - // add target perms - for _, perm := range perms { - if _, err = C.acl_add_perm(p, perm); err != nil { - return err - } - } - - // set perm set to new entry - if _, err = C.acl_set_permset(e, p); err != nil { - return err - } - - // set user tag to new entry - if _, err = C.acl_set_tag_type(e, User); err != nil { - return err - } - - // set qualifier (uid) to new entry - if _, err = C.acl_set_qualifier(e, unsafe.Pointer(&uid)); err != nil { - return err - } - } - - // calculate mask after update - if _, err = C.acl_calc_mask(&a.val); err != nil { - return err - } - - // write acl to file - return a.setFile(path, TypeAccess) -} |
