82 lines
2.4 KiB
Go
82 lines
2.4 KiB
Go
// This file was originally part of the project "LURE - Linux User REpository", created by Elara Musayelyan.
|
|
// It has been modified as part of "ALR - Any Linux Repository" by the ALR Authors.
|
|
//
|
|
// ALR - Any Linux Repository
|
|
// Copyright (C) 2025 The ALR Authors
|
|
//
|
|
// This program is free software: you can redistribute it and/or modify
|
|
// it under the terms of the GNU General Public License as published by
|
|
// the Free Software Foundation, either version 3 of the License, or
|
|
// (at your option) any later version.
|
|
//
|
|
// This program is distributed in the hope that it will be useful,
|
|
// but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
// GNU General Public License for more details.
|
|
//
|
|
// You should have received a copy of the GNU General Public License
|
|
// along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
|
|
package handlers
|
|
|
|
import (
|
|
"context"
|
|
"io"
|
|
"io/fs"
|
|
"path/filepath"
|
|
"strings"
|
|
"time"
|
|
|
|
"golang.org/x/exp/slices"
|
|
"mvdan.cc/sh/v3/interp"
|
|
)
|
|
|
|
func RestrictedReadDir(allowedPrefixes ...string) interp.ReadDirHandlerFunc2 {
|
|
return func(ctx context.Context, s string) ([]fs.DirEntry, error) {
|
|
path := filepath.Clean(s)
|
|
for _, allowedPrefix := range allowedPrefixes {
|
|
if strings.HasPrefix(path, allowedPrefix) {
|
|
return interp.DefaultReadDirHandler2()(ctx, s)
|
|
}
|
|
}
|
|
|
|
return nil, fs.ErrNotExist
|
|
}
|
|
}
|
|
|
|
func RestrictedStat(allowedPrefixes ...string) interp.StatHandlerFunc {
|
|
return func(ctx context.Context, s string, b bool) (fs.FileInfo, error) {
|
|
path := filepath.Clean(s)
|
|
for _, allowedPrefix := range allowedPrefixes {
|
|
if strings.HasPrefix(path, allowedPrefix) {
|
|
return interp.DefaultStatHandler()(ctx, s, b)
|
|
}
|
|
}
|
|
|
|
return nil, fs.ErrNotExist
|
|
}
|
|
}
|
|
|
|
func RestrictedOpen(allowedPrefixes ...string) interp.OpenHandlerFunc {
|
|
return func(ctx context.Context, s string, i int, fm fs.FileMode) (io.ReadWriteCloser, error) {
|
|
path := filepath.Clean(s)
|
|
for _, allowedPrefix := range allowedPrefixes {
|
|
if strings.HasPrefix(path, allowedPrefix) {
|
|
return interp.DefaultOpenHandler()(ctx, s, i, fm)
|
|
}
|
|
}
|
|
|
|
return NopRWC{}, nil
|
|
}
|
|
}
|
|
|
|
func RestrictedExec(allowedCmds ...string) interp.ExecHandlerFunc {
|
|
return func(ctx context.Context, args []string) error {
|
|
if slices.Contains(allowedCmds, args[0]) {
|
|
return interp.DefaultExecHandler(2*time.Second)(ctx, args)
|
|
}
|
|
|
|
return nil
|
|
}
|
|
}
|