From 56f53d5e21e5044041c910f98f5eb2c5fd7fce2b Mon Sep 17 00:00:00 2001 From: Matthias Lucas Jaros Date: Wed, 22 Oct 2025 10:12:07 +0200 Subject: - Added also info logging for successful attempts - merge info and error logs - Fix log being overwritten with every entry --- src/run | 9 ++++++--- 1 file changed, 6 insertions(+), 3 deletions(-) (limited to 'src/run') diff --git a/src/run b/src/run index 5b18bc8..4e95098 100755 --- a/src/run +++ b/src/run @@ -8,7 +8,7 @@ set -l currentUser (whoami) set -l matcher (string match -r -g $_GIT_VALIDATION_REGEX -- "$argv") if test (count $matcher) -ne 2 # there should be two groups otherwise something is wrong - echo "$(date -Is): DENY bad_format user=$currentUser ip=$SSH_CONNECTION argv=$argv" &>$LOG + echo "$(date -Is): DENY bad_format user=$currentUser ip=$SSH_CONNECTION argv=$argv" &>$_LOG exit 1 end @@ -22,16 +22,19 @@ set -l repoDir /(string join -n '/' srv repos (string split '/' $repo)) # check repo jail in /srv/repos if not string match -r -q -- "/srv/repos/.*" "(realpath $repoDir)" # something is for sure wrong here - echo "$(date -Is): DENY jail_escape user=$currentUser ip=$SSH_CONNECTION argv=$argv" &>$LOG + echo "$(date -Is): DENY jail_escape user=$currentUser ip=$SSH_CONNECTION argv=$argv" &>>$_LOG exit 2 end # check for permissions if not cat $_REPO_PERMISSIONS_FILE | grep -q -E "^$repoDir:$currentUser\$" # something is for sure wrong here - echo "$(date -Is): DENY no_permissions user=$currentUser ip=$SSH_CONNECTION argv=$argv" &>$LOG + echo "$(date -Is): DENY no_permissions user=$currentUser ip=$SSH_CONNECTION argv=$argv" &>>$_LOG exit 1 end +# info logging +echo "$(date -Is): ALLOW user=$currentUser ip=$SSH_CONNECTION argv=$argv" &>>$_LOG + # execute parsed git command /usr/bin/sudo -u git /usr/bin/git-shell -c "$gitCommand '$repoDir'" -- cgit v1.3.1