go/multipass: file/file.go annotate

annotate file/file.go @ 9:e58bfc7fc207

Make multipass files default all-readable.

author	Paul Fisher <paul@pfish.zone>
date	Sun, 25 Oct 2015 10:45:32 -0400
parents	c18bc7b9d1d9
children	1246b4b9028b

rev	line source
0 c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	1 // Package file handles I/O for single password files.
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	2 //
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	3 // A password file contains multiple passwords for a single user.
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	4 // It starts with a banner that indicates the version of the file,
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	5 // then has entries in the format specified by auth.Entry.
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	6
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	7 package file
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	8
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	9 import (
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	10 "bufio"
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	11 "errors"
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	12 "os"
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	13 "os/user"
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	14 "syscall"
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	15
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	16 "path"
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	17
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	18 "golang.org/x/sys/unix"
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	19 "pfish.zone/go/multipass/auth"
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	20 )
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	21
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	22 const (
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	23 // the Banner acts as a version indicator
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	24 Banner = "# Multipass v0.1 password file"
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	25 )
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	26
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	27 var (
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	28 // Raised when
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	29 ErrorBadFile = errors.New("multipass/file: Invalid file format")
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	30 )
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	31
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	32 type ShadowFile struct {
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	33 name string
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	34 }
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	35
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	36 // ForUser gets the given user's ShadowFile.
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	37 func ForUser(username string) (*ShadowFile, error) {
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	38 u, err := user.Lookup(username)
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	39 if err != nil {
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	40 return nil, err
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	41 }
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	42 return New(path.Join(u.HomeDir, MultipassFile)), nil
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	43 }
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	44
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	45 // ForMe gets the current user's ShadowFile.
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	46 func ForMe() (*ShadowFile, error) {
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	47 u, err := user.Current()
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	48 if err != nil {
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	49 return nil, err
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	50 }
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	51 return New(path.Join(u.HomeDir, MultipassFile)), nil
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	52 }
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	53
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	54 // New creates a ShadowFile for reading at the given path.
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	55 // If a file needs to be created, uses the given GID to create it.
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	56 func New(name string) *ShadowFile {
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	57 f := new(ShadowFile)
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	58 f.name = name
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	59 return f
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	60 }
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	61
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	62 func (f *ShadowFile) newFilename() string {
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	63 return f.name + ".new"
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	64 }
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	65
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	66 func (f ShadowFile) open() (os.File, *bufio.Scanner, error) {
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	67 file, err := os.Open(f.name)
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	68 if err != nil {
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	69 return nil, nil, err
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	70 }
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	71 scanner := bufio.NewScanner(file)
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	72 if !scanner.Scan() {
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	73 file.Close()
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	74 return nil, nil, err
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	75 }
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	76 if scanner.Text() != Banner {
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	77 file.Close()
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	78 return nil, nil, ErrorBadFile
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	79 }
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	80 return file, scanner, nil
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	81 }
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	82
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	83 func (f *ShadowFile) Authenticate(password string) (bool, error) {
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	84 file, scanner, err := f.open()
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	85 if err != nil {
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	86 return false, err
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	87 }
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	88 defer file.Close()
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	89
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	90 for scanner.Scan() {
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	91 entry, err := auth.EntryFromShadow(scanner.Text())
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	92 // Skip invalid lines.
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	93 if err != nil {
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	94 continue
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	95 }
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	96 if entry.Authenticate(password) {
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	97 return true, nil
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	98 }
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	99 }
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	100 return false, nil
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	101 }
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	102
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	103 func (f ShadowFile) Add(entry auth.Entry) error {
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	104 handle, err := f.openWrite()
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	105 if err != nil {
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	106 return err
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	107 }
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	108 err = handle.write(entry)
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	109 if err != nil {
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	110 handle.bail()
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	111 return err
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	112 }
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	113 for handle.next() {
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	114 if entry, err := handle.entry(); err == nil {
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	115 // If we get an invalid entry, just skip it.
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	116 if err := handle.write(entry); err != nil {
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	117 handle.bail()
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	118 return err
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	119 }
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	120 }
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	121 }
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	122 return handle.finalize()
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	123 }
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	124
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	125 func (f ShadowFile) openWrite() (writeHandle, error) {
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	126 return openWriteHandle(f.newFilename(), f.name)
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	127 }
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	128
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	129 type writeHandle struct {
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	130 // We write to a file handle pointing to tempName.
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	131 tempName string
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	132 tempFile *os.File
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	133 writer *bufio.Writer
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	134
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	135 // It will eventually move to fileName, which is our source file.
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	136 fileName string
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	137 // If inFile is nil, we're creating a new multipass file.
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	138 inFile *os.File
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	139 scanner *bufio.Scanner
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	140 }
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	141
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	142 func openWriteHandle(tempName, fileName string) (*writeHandle, error) {
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	143 h := new(writeHandle)
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	144 h.tempName = tempName
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	145 h.fileName = fileName
9 e58bfc7fc207 Make multipass files default all-readable. Paul Fisher <paul@pfish.zone> parents: 0 diff changeset	146 // Open the output file, readable by everybody, but only if it doesn't exist.
e58bfc7fc207 Make multipass files default all-readable. Paul Fisher <paul@pfish.zone> parents: 0 diff changeset	147 // This prevents race conditions.
0 c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	148 oldUmask := unix.Umask(077)
9 e58bfc7fc207 Make multipass files default all-readable. Paul Fisher <paul@pfish.zone> parents: 0 diff changeset	149 tempFile, err := os.OpenFile(tempName, os.O_CREATE \| os.O_EXCL \| os.O_WRONLY \| os.O_SYNC, 0600)
0 c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	150 unix.Umask(oldUmask)
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	151 if err != nil {
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	152 return nil, err
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	153 }
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	154 h.tempFile = tempFile
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	155 // Open the input file.
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	156 inFile, err := os.Open(fileName)
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	157 if err == nil {
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	158 // Prepare to read in the input file, if it exists.
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	159 h.inFile = inFile
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	160 h.scanner = bufio.NewScanner(h.inFile)
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	161 if !h.scanner.Scan() {
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	162 return nil, ErrorBadFile
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	163 }
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	164 if h.scanner.Text() != Banner {
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	165 return nil, ErrorBadFile
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	166 }
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	167 // Change the owner and group of the new file to that of the old.
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	168 inStat, err := h.inFile.Stat()
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	169 if err != nil {
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	170 h.bail()
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	171 return nil, err
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	172 }
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	173 inStatUnix := inStat.Sys().(*syscall.Stat_t)
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	174 if err := h.tempFile.Chown(int(inStatUnix.Uid), int(inStatUnix.Gid)); err != nil {
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	175 h.bail()
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	176 return nil, err
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	177 }
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	178 if err := h.tempFile.Chmod(inStat.Mode()); err != nil {
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	179 h.bail()
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	180 return nil, err
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	181 }
9 e58bfc7fc207 Make multipass files default all-readable. Paul Fisher <paul@pfish.zone> parents: 0 diff changeset	182 } else {
e58bfc7fc207 Make multipass files default all-readable. Paul Fisher <paul@pfish.zone> parents: 0 diff changeset	183 // TODO(pfish): Restrict ACL to only multipass authenticators.
e58bfc7fc207 Make multipass files default all-readable. Paul Fisher <paul@pfish.zone> parents: 0 diff changeset	184 if err := h.tempFile.Chmod(0644); err != nil {
e58bfc7fc207 Make multipass files default all-readable. Paul Fisher <paul@pfish.zone> parents: 0 diff changeset	185 h.bail()
e58bfc7fc207 Make multipass files default all-readable. Paul Fisher <paul@pfish.zone> parents: 0 diff changeset	186 return nil, err
e58bfc7fc207 Make multipass files default all-readable. Paul Fisher <paul@pfish.zone> parents: 0 diff changeset	187 }
0 c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	188 }
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	189 h.writer = bufio.NewWriter(h.tempFile)
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	190 if _, err := h.writer.WriteString(Banner + "\n"); err != nil {
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	191 return nil, err
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	192 }
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	193 return h, nil
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	194 }
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	195
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	196 func (h *writeHandle) bail() {
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	197 h.tempFile.Close()
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	198 h.inFile.Close()
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	199 os.Remove(h.tempName)
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	200 }
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	201
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	202 func (h *writeHandle) next() bool {
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	203 // If the scanner is nil, then we have no input file and therefore no next.
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	204 return h.scanner != nil && h.scanner.Scan()
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	205 }
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	206
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	207 func (h writeHandle) entry() (auth.Entry, error) {
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	208 return auth.EntryFromShadow(h.scanner.Text())
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	209 }
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	210
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	211 func (h writeHandle) write(entry auth.Entry) error {
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	212 if _, err := h.writer.WriteString(entry.Encode()); err != nil {
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	213 return err
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	214 }
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	215 _, err := h.writer.WriteString("\n")
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	216 return err
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	217 }
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	218
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	219 func (h *writeHandle) finalize() error {
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	220 h.inFile.Close()
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	221 // Make absolutely completely sure we're synced.
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	222 if err := h.writer.Flush(); err != nil {
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	223 h.tempFile.Close()
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	224 os.Remove(h.tempName)
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	225 return err
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	226 }
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	227 if err := h.tempFile.Sync(); err != nil {
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	228 h.tempFile.Close()
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	229 os.Remove(h.tempName)
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	230 return err
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	231 }
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	232 // Close the file.
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	233 if err := h.tempFile.Close(); err != nil {
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	234 os.Remove(h.tempName)
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	235 return err
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	236 }
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	237 // And atomically write it over the new one.
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	238 err := os.Rename(h.tempName, h.fileName)
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	239 if err != nil {
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	240 return err
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	241 }
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	242 // If we get here, everything succeeded, and only in this case
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	243 // will the multipass shadow file have been updated.
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	244 return nil
c18bc7b9d1d9 Basic binaries. checkpassword doesn't yet work. Paul Fisher <paul@pfish.zone> parents: diff changeset	245 }

Mercurial > go > multipass

annotate file/file.go @ 9:e58bfc7fc207