3 # Abort any push early if the pushing user doesn't have any push permissions
4 # at all. This avoids unnecessary traffic and unpacked object pollution.
6 # This script is intended for use from within the chroot jail and may or may
7 # not work properly outside it.
11 if ! [ -x /usr
/bin
/perl
]; then
12 # We are INSIDE the chroot
13 reporoot
=/@jailreporoot@
15 # We are NOT INSIDE the chroot
21 # Only the following commands are allowed:
23 # git-shell -c 'git-receive-pack dir'
24 # git-shell -c 'git receive-pack dir'
25 # git-shell -c 'git-upload-pack dir'
26 # git-shell -c 'git upload-pack dir'
27 # git-shell -c 'git-upload-archive dir'
28 # git-shell -c 'git upload-archive dir'
30 # where dir must start with $reporoot/ but a leading/trailing '/' is optional
31 # as well as the final .git
33 if [ "$1" != "-c" ]; then
41 "git-receive-pack "*) type='receive-pack'; dir
="${dir#git-receive-pack }";;
42 "git receive-pack "*) type='receive-pack'; dir
="${dir#git receive-pack }";;
43 "git-upload-pack "*) type='upload-pack'; dir
="${dir#git-upload-pack }";;
44 "git upload-pack "*) type='upload-pack'; dir
="${dir#git upload-pack }";;
45 "git-upload-archive "*) type='upload-archive'; dir
="${dir#git-upload-archive }";;
46 "git upload-archive "*) type='upload-archive'; dir
="${dir#git upload-archive }";;
52 # valid project names only allow 0-9A-Za-z._+- plus the / separator and they
53 # are always single quoted so the only valid directory names will always start
54 # with a single quote and end with a single quote and not contain any internal
55 # character that needs to be escaped.
70 # Some shells do not properly handle quoting after # or % so we cannot
71 # put an explicit ' there in a way that works for all shells. Instead
72 # just remove a single character since we've already verified it's a '.
73 dir
="${dir#?}"; dir
="${dir%?}"
75 # add a missing leading /
88 # add a missing trailing .git
102 if ! [ -d "$dir" ] ||
! [ -f "$dir/HEAD" ] ||
! [ -d "$dir/objects" ]; then
107 proj
="${dir#$reporoot/}"; projbare
="${proj%.git}"
109 if [ "$type" = 'receive-pack' ] && ! [ -f "$dir/.nofetch" ]; then
110 echo "The $proj project is a mirror and may not be pushed to, sorry" >&2
114 if ! [ -x /usr
/bin
/perl
] && [ "$type" = 'receive-pack' ]; then
115 # We are INSIDE the chroot trying to push
117 if ! can_user_push
"$projbare"; then
118 # If mob is enabled and mob has push permissions and
119 # the current user is not the mob then it's a personal mob push
120 # presuming the special mob directory has been set up
121 if [ "$mob" = "mob" -a "$LOGNAME" != "mob" -a -d "$reporoot/$proj/mob" ] &&
122 can_user_push
"$projbare" mob
; then
123 exec git-shell
-c "git-receive-pack '$reporoot/$proj/mob'"
126 echo "The user '$LOGNAME' does not have push permissions for project '$proj'" >&2
127 echo "You may adjust push permissions at $webadmurl/editproj.cgi?name=$proj" >&2