florian.richer/command_gateway
Archived
1
0
Fork 0
Code Activity

[DAEMON] Add whitelist command support

Browse source
This commit is contained in:
Florian RICHER 2023-03-13 20:37:35 +01:00
parent 2ee52a7aef
commit 515d4519c7
2 changed files with 12 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
src/daemon/configuration/mod.rs
View file

@ -11,7 +11,7 @@ impl Configuration {
pub fn read_or_create() -> Self {
let path = std::path::Path::new("configuration.yml");
let file = std::fs::File::open(path)
.map_err(|_| format!("No such file configuration.yml"))
.map_err(|_| "No such file configuration.yml".to_string())
.unwrap();
let buffer = std::io::BufReader::new(file);
serde_yaml::from_reader(buffer).unwrap()

11
src/daemon/server.rs
View file

@ -1,6 +1,7 @@
#![cfg_attr(not(unix), allow(unused_imports))]
use tonic::{Code, Request, Response, Status};
use libcommand::Command;
use libcommand::interpreter::{
unix_server::Unix,
@ -18,6 +19,16 @@ impl Unix for DaemonServer {
request: Request<AuthorizeRequest>,
) -> Result<Response<AuthorizeResponse>, Status> {
let session = libcommand::Session::from(request.get_ref().pid);
let cmd = Command::from(request.get_ref().command_arg.as_ref());
let conf = super::CONFIGURATION.lock()
.map_err(|e| Status::internal(e.to_string()))?;
let conf = conf.as_ref().ok_or_else(|| Status::internal("Configuration not loaded"))?;
if !conf.command_allowed(&cmd.command) {
return Err(Status::permission_denied("Command not authorized"));
}
let session_id = session.id.clone();
super::SESSIONS.lock().unwrap().push(session);