1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
|
// Copyright (c) 2018-2019, Sylabs Inc. All rights reserved.
// This software is licensed under a 3-clause BSD license. Please consult the
// LICENSE.md file distributed with the sources of this project regarding your
// rights to use or distribute this software.
package singularity
import (
"fmt"
"os"
"strings"
"syscall"
"github.com/sylabs/singularity/v4/pkg/util/capabilities"
)
// CapListConfig instructs CapabilityList on what to list
type CapListConfig struct {
User string
Group string
All bool
}
// CapabilityList lists the capabilities based on the CapListConfig
func CapabilityList(capFile string, c CapListConfig) error {
if c.User == "" && c.Group == "" && !c.All {
return fmt.Errorf("while listing capabilities: must specify a user or a group")
}
oldmask := syscall.Umask(0)
defer syscall.Umask(oldmask)
file, err := os.OpenFile(capFile, os.O_RDONLY, 0o644)
if err != nil {
return fmt.Errorf("while opening capability config file: %s", err)
}
defer file.Close()
capConfig, err := capabilities.ReadFrom(file)
if err != nil {
return fmt.Errorf("while parsing capability config data: %s", err)
}
outputCaps := 0
// if --all specified, take priority over listing specific user/group
if c.All {
users, groups := capConfig.ListAllCaps()
for user, cap := range users {
if len(cap) > 0 {
fmt.Printf("%s [user]: %s\n", user, strings.Join(cap, ","))
outputCaps++
}
}
for group, cap := range groups {
if len(cap) > 0 {
fmt.Printf("%s [group]: %s\n", group, strings.Join(cap, ","))
outputCaps++
}
}
if outputCaps == 0 {
return fmt.Errorf("no capability set for users or groups")
}
return nil
}
if c.User != "" {
caps := capConfig.ListUserCaps(c.User)
if len(caps) > 0 {
fmt.Printf("%s [user]: %s\n", c.User, strings.Join(caps, ","))
outputCaps++
}
}
if c.Group != "" {
caps := capConfig.ListGroupCaps(c.Group)
if len(caps) > 0 {
fmt.Printf("%s [group]: %s\n", c.Group, strings.Join(caps, ","))
outputCaps++
}
}
if outputCaps == 0 {
return fmt.Errorf("no capability set for user/group %s", c.User)
}
return nil
}
|
