Changeset 28 in code for trunk/partage.go

Timestamp:

Oct 19, 2021, 7:42:00 AM (4 years ago)

Author:

dev

Message:

Provide ability to drop privileges on start

File:

• trunk/partage.go (modified) (4 diffs)

trunk/partage.go

@@ -8 +8 @@
         "net/http"
         "os"
+        "os/user"
         "time"
         "path"
         "syscall"
+        "strconv"
         "path/filepath"
         "html/template"
@@ -33 +35 @@
 var conf struct {
         bind     string
+        user     string
+        group    string
         baseuri  string
         filepath string
@@ -219 +223 @@
 func main() {
         flag.StringVar(&conf.bind,        "bind",        "0.0.0.0:8080", "Address to bind to (default: 0.0.0.0:8080)")
+        flag.StringVar(&conf.user,        "user",        "", "User to drop privileges to on startup (default: current user)")
+        flag.StringVar(&conf.group,       "group",       "", "Group to drop privileges to on startup (default: user's group)")
         flag.StringVar(&conf.baseuri,     "baseuri",     "http://127.0.0.1:8080", "Base URI to use for links (default: http://127.0.0.1:8080)")
         flag.StringVar(&conf.filepath,    "filepath",    "./files", "Path to save files to (default: ./files)")
@@ -236 +242 @@
         }
 
+        if conf.user != "" {
+                u, err := user.Lookup(conf.user)
+                if err != nil {
+                        fmt.Println(err)
+                        return
+                }
+
+                uid, _ := strconv.Atoi(u.Uid)
+                gid, _ := strconv.Atoi(u.Gid)
+
+                if conf.group != "" {
+                        g, err := user.LookupGroup(conf.group)
+                        if err != nil {
+                                fmt.Println(err)
+                                return
+                        }
+                        gid, _ = strconv.Atoi(g.Gid)
+                }
+
+                syscall.Setuid(uid)
+                syscall.Setgid(gid)
+        }
+
         http.HandleFunc("/", uploader)
         http.Handle(conf.filectx, http.StripPrefix(conf.filectx, http.FileServer(http.Dir(conf.filepath))))