peter/infix
1
0
Fork 0
mirror of https://github.com/kernelkit/infix.git synced 2026-07-30 04:33:00 +02:00
Code Issues Packages Projects Releases Wiki Activity

bin: copy: Always get startup from sysrepo

Browse Source 
This will make sure to apply NACM rules for all the data. It also
makes it possible for a luser access a subset of the data, even if
they to do not have read access to /cfg/startup-config.cfg.
This commit is contained in:
Tobias Waldekranz
2025-10-29 16:36:04 +01:00
parent d26e311c6d
commit 0977ab476b
1 changed files with 2 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/bin/copy.c
+2 -7
View File
@@ -432,7 +432,7 @@ static int get(const char *src, const struct infix_ds *ds, const char *path)
{ {
int err = 0; int err = 0;
if (ds && !ds->path) if (ds)
err = sysrepo_export(ds, path); err = sysrepo_export(ds, path);
else if (is_uri(src)) else if (is_uri(src))
err = curl_download(src, path); err = curl_download(src, path);
@@ -444,18 +444,13 @@ static int resolve_src(const char **src, const struct infix_ds **ds, char **path
{ {
*src = infix_ds(*src, ds); *src = infix_ds(*src, ds);
if ((*ds && !(*ds)->path) || is_uri(*src)) { if (*ds || is_uri(*src)) {
*path = tempnam(NULL, NULL); *path = tempnam(NULL, NULL);
if (!*path) if (!*path)
return 1; return 1;
*rm = true; *rm = true;
return 0; return 0;
} else if (*ds) {
/* TODO: This means that a luser can access the
* entirety of startup, without NACM filtering.
*/
*path = strdup((*ds)->path);
} else { } else {
*path = cfg_adjust(*src, NULL, sanitize); *path = cfg_adjust(*src, NULL, sanitize);
} }