bin/git-shell-verify

   1 #!/bin/sh
   2 #
   3 # Abort any push early if the pushing user doesn't have any push permissions
   4 # at all.  This avoids unnecessary traffic and unpacked object pollution.
   5 #
   6 # This script is intended for use from within the chroot jail and may or may
   7 # not work properly outside it.
   8
   9 set -e
  10
  11 if ! [ -x /usr/bin/perl ]; then
  12         # We are INSIDE the chroot
  13         reporoot=/@jailreporoot@
  14 else
  15         # We are NOT INSIDE the chroot
  16         reporoot=@reporoot@
  17 fi
  18 mob=@mob@
  19 webadmurl=@webadmurl@
  20
  21 # Only the following commands are allowed:
  22 #
  23 #   git-shell -c 'git-receive-pack dir'
  24 #   git-shell -c 'git receive-pack dir'
  25 #   git-shell -c 'git-upload-pack dir'
  26 #   git-shell -c 'git upload-pack dir'
  27 #   git-shell -c 'git-upload-archive dir'
  28 #   git-shell -c 'git upload-archive dir'
  29 #
  30 # where dir must start with $reporoot/ but a leading/trailing '/' is optional
  31 # as well as the final .git
  32
  33 if [ "$1" != "-c" ]; then
  34         echo forbidden >&2
  35         exit 1
  36 fi
  37
  38 dir="$2"
  39 type=''
  40 case "$2" in
  41         "git-receive-pack "*)   type='receive-pack';   dir="${dir#git-receive-pack }";;
  42         "git receive-pack "*)   type='receive-pack';   dir="${dir#git receive-pack }";;
  43         "git-upload-pack "*)    type='upload-pack';    dir="${dir#git-upload-pack }";;
  44         "git upload-pack "*)    type='upload-pack';    dir="${dir#git upload-pack }";;
  45         "git-upload-archive "*) type='upload-archive'; dir="${dir#git-upload-archive }";;
  46         "git upload-archive "*) type='upload-archive'; dir="${dir#git upload-archive }";;
  47         *)
  48                 echo forbidden >&2
  49                 exit 1
  50 esac
  51
  52 # valid project names only allow 0-9A-Za-z._+- plus the / separator and they
  53 # are always single quoted so the only valid directory names will always start
  54 # with a single quote and end with a single quote and not contain any internal
  55 # character that needs to be escaped.
  56
  57 case "$dir" in
  58         "'"*) :;;
  59         *)
  60                 echo forbidden >&2
  61                 exit 1
  62 esac
  63 case "$dir" in
  64         *"'") :;;
  65         *)
  66                 echo forbidden >&2
  67                 exit 1
  68 esac
  69
  70 # Some shells do not properly handle quoting after # or % so we cannot
  71 # put an explicit ' there in a way that works for all shells.  Instead
  72 # just remove a single character since we've already verified it's a '.
  73 dir="${dir#?}"; dir="${dir%?}"
  74
  75 # add a missing leading /
  76 case "$dir" in
  77         /*) :;;
  78         *)
  79                 dir="/$dir"
  80 esac
  81
  82 # remove a trailing /
  83 case "$dir" in
  84         *?/)
  85                 dir="${dir%/}"
  86 esac
  87
  88 # add a missing trailing .git
  89 case "$dir" in
  90         *.git) :;;
  91         *)
  92                 dir="$dir.git"
  93 esac
  94
  95 case "$dir" in
  96         "$reporoot/"*) :;;
  97         *)
  98                 echo forbidden >&2
  99                 exit 1
 100 esac
 101
 102 if ! [ -d "$dir" ] || ! [ -f "$dir/HEAD" ] || ! [ -d "$dir/objects" ]; then
 103         echo forbidden >&2
 104         exit 1
 105 fi
 106
 107 proj="${dir#$reporoot/}"; projbare="${proj%.git}"
 108
 109 if [ "$type" = 'receive-pack' ] && ! [ -f "$dir/.nofetch" ]; then
 110         echo "The $proj project is a mirror and may not be pushed to, sorry" >&2
 111         exit 3
 112 fi
 113
 114 if ! [ -x /usr/bin/perl ] && [ "$type" = 'receive-pack' ]; then
 115         # We are INSIDE the chroot trying to push
 116
 117         if ! can_user_push "$projbare"; then
 118                 # If mob is enabled and mob has push permissions and
 119                 # the current user is not the mob then it's a personal mob push
 120                 # presuming the special mob directory has been set up
 121                 if [ "$mob" = "mob" -a "$LOGNAME" != "mob" -a -d "$reporoot/$proj/mob" ] &&
 122                                                                 can_user_push "$projbare" mob; then
 123                         exec git-shell -c "git-receive-pack '$reporoot/$proj/mob'"
 124                         exit 1
 125                 fi
 126                 echo "The user '$LOGNAME' does not have push permissions for project '$proj'" >&2
 127                 echo "You may adjust push permissions at $webadmurl/editproj.cgi?name=$proj" >&2
 128                 exit 3
 129         fi
 130 fi
 131
 132 exec git-shell "$@"
 133 exit 1