Working config & permissions

This commit is contained in:
2025-03-27 23:28:12 +08:00
parent 5896d5fcd2
commit 5d7e37ab7c
7 changed files with 148 additions and 17 deletions

View File

@ -27,6 +27,20 @@ func MostSevere(a, b Action) Action {
return min(a, b)
}
func (a Action) String() (name string) {
switch a {
case ActionDeny:
name = "deny"
case ActionIgnore:
name = "ignore"
case ActionAccept:
name = "accept"
default:
name = "<" + strconv.Itoa(int(a)) + ">"
}
return
}
// Marshal/Unmarshal for Action
func (a *Action) UnmarshalText(text []byte) error {
switch strings.ToLower(string(text)) {
@ -42,25 +56,14 @@ func (a *Action) UnmarshalText(text []byte) error {
return nil
}
func (a Action) MarshalText() ([]byte, error) {
var name string
switch a {
case ActionDeny:
name = "deny"
case ActionIgnore:
name = "ignore"
case ActionAccept:
name = "accept"
default:
name = "<" + strconv.Itoa(int(a)) + ">"
}
return []byte(name), nil
return []byte(a.String()), nil
}
// Config is a list of address and actions, for each source address.
// It can just be Marshal/Unmarshaled into/from json.
type Config struct {
DefaultAction Action // What we should do when no action is matched.
DefaultPort []uint // Port numbers to add to address without port numbers already in them. Don't put too many entries in here.
DefaultPort []int // Port numbers to add to address without port numbers already in them. Don't put too many entries in here.
// Object which holds addresses and optionally ports, mapping to actions.
//

View File

@ -1,6 +1,7 @@
package perm
import (
"log"
"net"
"strconv"
"strings"
@ -50,9 +51,11 @@ func (p *Perm) Load(cs map[string]Config) {
load_per_source := func(c Config) (p_int int_perm) {
p_int.match = make(map[string]Action)
p_int.def = c.DefaultAction
log.Printf("default action %s", p_int.def)
// insert helper to use the most severe action existing
insert := func(addrport string, action Action) {
log.Printf("loading target %s, action %s", addrport, action)
existing_action, ok := p_int.match[addrport]
if ok {
p_int.match[addrport] = MostSevere(existing_action, action)
@ -69,7 +72,7 @@ func (p *Perm) Load(cs map[string]Config) {
} else {
// so this is why def_port shouldn't be that big
// TODO change this to sth faster
for def_port := range c.DefaultPort {
for _, def_port := range c.DefaultPort {
insert(net.JoinHostPort(addr, strconv.Itoa(def_port)), act)
}
}
@ -78,6 +81,7 @@ func (p *Perm) Load(cs map[string]Config) {
}
for src, c := range cs {
log.Printf("loading source %s", src)
if strings.EqualFold(src, "$global") {
p.global = load_per_source(c)
} else {