FilesExpand file tree

 master

/

socket.go

Copy path

Blame

More file actions

Blame

More file actions

Latest commit

 

History

History

History

97 lines (87 loc) · 2.85 KB

 master

/

socket.go

Copy path

Top

File metadata and controls

• Code
• Blame

97 lines (87 loc) · 2.85 KB

Raw

Copy raw file

Download raw file

Open symbols panel

Edit and raw actions

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

55

56

57

58

59

60

61

62

63

64

65

66

67

68

69

70

71

72

73

74

75

76

77

78

79

80

81

82

83

84

85

86

87

88

89

90

91

92

93

94

95

96

97

// Copyright 2012 Google Inc. All Rights Reserved.

//

// Licensed under the Apache License, Version 2.0 (the "License");

// you may not use this file except in compliance with the License.

// You may obtain a copy of the License at

//

// http://www.apache.org/licenses/LICENSE-2.0

//

// Unless required by applicable law or agreed to in writing, software

// distributed under the License is distributed on an "AS IS" BASIS,

// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.

// See the License for the specific language governing permissions and

// limitations under the License.

package main

import (

"fmt"

"log"

"net"

"os"

"path/filepath"

"syscall"

)

// A Socket is a wrapper around a Unix socket that verifies directory

// permissions.

type Socket struct {

Dir string

}

func defaultDir() string {

sockPath := ".git-credential-cache"

if home := os.Getenv("HOME"); home != "" {

return filepath.Join(home, sockPath)

}

log.Printf("socket: cannot find HOME path. using relative directory %q for socket", sockPath)

return sockPath

}

// DefaultSocket is a Socket in the $HOME/.git-credential-cache directory.

var DefaultSocket = Socket{Dir: defaultDir()}

// Listen announces the local network address of the unix socket. The

// permissions on the socket directory are verified before attempting

// the actual listen.

func (s Socket) Listen() (net.Listener, error) {

network, addr := "unix", s.Path()

if err := s.mkdir(); err != nil {

return nil, &net.OpError{Op: "listen", Net: network, Addr: &net.UnixAddr{Name: addr, Net: network}, Err: err}

}

return net.Listen(network, addr)

}

// Dial connects to the unix socket. The permissions on the socket directory

// are verified before attempting the actual dial.

func (s Socket) Dial() (net.Conn, error) {

network, addr := "unix", s.Path()

if err := s.checkPermissions(); err != nil {

return nil, &net.OpError{Op: "dial", Net: network, Addr: &net.UnixAddr{Name: addr, Net: network}, Err: err}

}

return net.Dial(network, addr)

}

// Path returns the fully specified file name of the unix socket.

func (s Socket) Path() string {

return filepath.Join(s.Dir, "persistent-https-proxy-socket")

}

func (s Socket) mkdir() error {

if err := s.checkPermissions(); err == nil {

return nil

} else if !os.IsNotExist(err) {

return err

}

if err := os.MkdirAll(s.Dir, 0700); err != nil {

return err

}

return s.checkPermissions()

}

func (s Socket) checkPermissions() error {

fi, err := os.Stat(s.Dir)

if err != nil {

return err

}

if !fi.IsDir() {

return fmt.Errorf("socket: got file, want directory for %q", s.Dir)

}

if fi.Mode().Perm() != 0700 {

return fmt.Errorf("socket: got perm %o, want 700 for %q", fi.Mode().Perm(), s.Dir)

}

if st := fi.Sys().(*syscall.Stat_t); int(st.Uid) != os.Getuid() {

return fmt.Errorf("socket: got uid %d, want %d for %q", st.Uid, os.Getuid(), s.Dir)

}

return nil

}