mirror of
https://github.com/gravitational/teleport.git
synced 2026-11-01 21:52:02 +08:00
NajiObeid
7833dc63cb
* improve tsh configure messaging * missing param * improve cli output * remove unnecessary change * address pr comments * address pr comments
126 lines
3.1 KiB
Go
126 lines
3.1 KiB
Go
//go:build !windows
|
|
// +build !windows
|
|
|
|
/*
|
|
Copyright 2019 Gravitational, Inc.
|
|
|
|
Licensed under the Apache License, Version 2.0 (the "License");
|
|
you may not use this file except in compliance with the License.
|
|
You may obtain a copy of the License at
|
|
|
|
http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
Unless required by applicable law or agreed to in writing, software
|
|
distributed under the License is distributed on an "AS IS" BASIS,
|
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
See the License for the specific language governing permissions and
|
|
limitations under the License.
|
|
*/
|
|
|
|
package utils
|
|
|
|
import (
|
|
"errors"
|
|
"io/fs"
|
|
"os"
|
|
"os/user"
|
|
"path/filepath"
|
|
"strconv"
|
|
"syscall"
|
|
|
|
"github.com/gravitational/trace"
|
|
)
|
|
|
|
// PercentUsed returns percentage of disk space used. The percentage of disk
|
|
// space used is calculated from (total blocks - free blocks)/total blocks.
|
|
// The value is rounded to the nearest whole integer.
|
|
func PercentUsed(path string) (float64, error) {
|
|
var stat syscall.Statfs_t
|
|
err := syscall.Statfs(path, &stat)
|
|
if err != nil {
|
|
return 0, trace.Wrap(err)
|
|
}
|
|
ratio := float64(stat.Blocks-stat.Bfree) / float64(stat.Blocks)
|
|
return Round(ratio * 100), nil
|
|
}
|
|
|
|
// CanUserWriteTo attempts to check if a user has write access to certain path.
|
|
// It also works around the program being run as root and tries to check
|
|
// the permissions of the user who executed the program as root.
|
|
// This should only be used for string formatting or inconsequential use cases
|
|
// as it's not bullet proof and can report wrong results.
|
|
func CanUserWriteTo(path string) (bool, error) {
|
|
// prevent infinite loops with a max dir depth
|
|
var fileInfo os.FileInfo
|
|
var err error
|
|
|
|
for i := 0; i < 20; i++ {
|
|
fileInfo, err = os.Stat(path)
|
|
if err == nil {
|
|
break
|
|
}
|
|
if errors.Is(err, fs.ErrNotExist) {
|
|
path = filepath.Dir(path)
|
|
continue
|
|
}
|
|
|
|
return false, trace.BadParameter("failed to find path: %+v", err)
|
|
|
|
}
|
|
|
|
var uid int
|
|
var gid int
|
|
if stat, ok := fileInfo.Sys().(*syscall.Stat_t); ok {
|
|
uid = int(stat.Uid)
|
|
gid = int(stat.Gid)
|
|
}
|
|
|
|
var usr *user.User
|
|
if ogUser := os.Getenv("SUDO_USER"); ogUser != "" {
|
|
usr, err = user.Lookup(ogUser)
|
|
if err != nil {
|
|
return false, trace.NotFound("could not determine original user: %+v", err)
|
|
}
|
|
} else {
|
|
usr, err = user.Current()
|
|
if err != nil {
|
|
return false, trace.NotFound("could not determine current user: %+v", err)
|
|
}
|
|
}
|
|
|
|
perm := fileInfo.Mode().Perm()
|
|
|
|
// file is owned by the user
|
|
if strconv.Itoa(uid) == usr.Uid {
|
|
// file has u+wx permissions
|
|
if perm&syscall.S_IWUSR != 0 &&
|
|
perm&syscall.S_IXUSR != 0 {
|
|
return true, nil
|
|
}
|
|
}
|
|
|
|
// file and user have a group in common
|
|
groupIDs, err := usr.GroupIds()
|
|
if err != nil {
|
|
return false, trace.NotFound("could not determine current user group ids: %+v", err)
|
|
}
|
|
for _, groupID := range groupIDs {
|
|
if strconv.Itoa(gid) == groupID {
|
|
// file has g+wx permissions
|
|
if perm&syscall.S_IWGRP != 0 &&
|
|
perm&syscall.S_IXGRP != 0 {
|
|
return true, nil
|
|
}
|
|
break
|
|
}
|
|
}
|
|
|
|
// file has o+wx permissions
|
|
if perm&syscall.S_IWOTH != 0 &&
|
|
perm&syscall.S_IXOTH != 0 {
|
|
return true, nil
|
|
}
|
|
|
|
return false, nil
|
|
}
|