From d79482cba6b7be41c20a4661f51ff25f00c5722c Mon Sep 17 00:00:00 2001
From: "jrayhawk+piny.be@omgwallhack.org" <jrayhawk+piny.be@omgwallhack.org>
Date: Sun, 12 Jun 2011 23:43:20 -0700
Subject: Adding distinction between immutable and normal git file permissions
---
libpiny/lib/Piny/Repo.pm | 14 ++++++++++----
1 file changed, 10 insertions(+), 4 deletions(-)
(limited to 'libpiny')
diff --git a/libpiny/lib/Piny/Repo.pm b/libpiny/lib/Piny/Repo.pm
index fea6846..f0299c8 100644
--- a/libpiny/lib/Piny/Repo.pm
+++ b/libpiny/lib/Piny/Repo.pm
@@ -240,6 +240,7 @@ sub rebuild_git {
my ( $s ) = @_;
my $dirperm;
+ my $immutablefileperm;
my $fileperm;
unless( getgrnam("git-" . $s->shortname ) ) {
@@ -261,15 +262,19 @@ sub rebuild_git {
if ( $s->config->core_sharedrepository eq "0666" ) {
$dirperm = "2777";
- $fileperm = "0644";
+ $immutablefileperm = "0644";
+ $fileperm = "0666";
} elsif ( $s->config->core_sharedrepository =~ /^(0664|all|everybody|world)$/ ) {
$dirperm = "2775";
- $fileperm = "0644";
+ $immutablefileperm = "0644";
+ $fileperm = "0664";
} elsif ( $s->config->core_sharedrepository =~ /^(0660|true|1|group)$/ ) {
$dirperm = "2770";
- $fileperm = "0640";
+ $immutablefileperm = "0640";
+ $fileperm = "0660";
} elsif ( $s->config->core_sharedrepository =~ /^(0640|false|0)$/ ) {
$dirperm = "2750";
+ $immutablefileperm = "0640";
$fileperm = "0640";
} else {
die $s->config->core_sharedrepository . "is an unhandled value!"
@@ -277,7 +282,8 @@ sub rebuild_git {
# FIXME: we should verify we are not breaking someone else's object hardlinks with these chmod or chown operations
system( "/usr/bin/find " . $s->path . "/refs " . $s->path . "/info " . $s->path . "/branches " . $s->path . "/objects " . $s->path . "/logs " . $s->path . "/HEAD " . $s->path . "/packed-refs -type d -print0 | /usr/bin/xargs -0 /bin/chmod $dirperm" ) and die "Could not chmod shared git resources!";
- system( "/usr/bin/find " . $s->path . "/refs " . $s->path . "/info " . $s->path . "/branches " . $s->path . "/objects " . $s->path . "/logs " . $s->path . "/HEAD " . $s->path . "/packed-refs -type f -print0 | /usr/bin/xargs -0 /bin/chmod $fileperm" ) and die "Could not chmod shared git resources!"; # most files are either immutable or replaced at link level
+ system( "/usr/bin/find " . $s->path . "/objects " . "-type f -print0 | /usr/bin/xargs -0 /bin/chmod $immutablefileperm" ) and die "Could not chmod shared git resources!"; # most files are either immutable or replaced at link level
+ system( "/usr/bin/find " . $s->path . "/refs " . $s->path . "/info " . $s->path . "/branches " . $s->path . "/logs " . $s->path . "/HEAD " . $s->path . "/packed-refs -type f -print0 | /usr/bin/xargs -0 /bin/chmod $fileperm" ) and die "Could not chmod shared git resources!"; # most files are either immutable or replaced at link level
system( "/usr/bin/find " . $s->path . "/refs " . $s->path . "/info " . $s->path . "/branches " . $s->path . "/objects " . $s->path . "/logs " . $s->path . "/HEAD " . $s->path . "/packed-refs -print0 | /usr/bin/xargs -0 /bin/chgrp " . $s->group->name ) and die "Could not chgrp shared git resources!";
$ENV{"GIT_DIR"} = $s->path;
--
cgit v1.2.3