smail
f60d3b0880
Some checks are pending
Security Checks / security (push) Waiting to run
统一 frontend、backend、test、test-log 和 out 目录，更新构建、部署及测试入口；纳入配置管理兼容与首次安全引导修复；排除本机配置、密钥和测试产物。
80 lines
1.5 KiB
Go
80 lines
1.5 KiB
Go
package hooks
|
|
|
|
import (
|
|
"os"
|
|
"path/filepath"
|
|
"strings"
|
|
)
|
|
|
|
const maxPluginConfigBytes int64 = 64 << 10
|
|
|
|
type pluginLaunchSpec struct {
|
|
path string
|
|
args []string
|
|
procAttr *os.ProcAttr
|
|
socketPath string
|
|
runtimeDir string
|
|
parentFiles []*os.File
|
|
}
|
|
|
|
func compatibilityPluginLaunchSpec(pluginPath, root, name, socketName string, env []string) *pluginLaunchSpec {
|
|
return &pluginLaunchSpec{
|
|
path: pluginPath,
|
|
args: []string{name, socketName},
|
|
procAttr: &os.ProcAttr{
|
|
Dir: root,
|
|
Env: env,
|
|
Files: []*os.File{
|
|
os.Stdin,
|
|
os.Stdout,
|
|
os.Stderr,
|
|
},
|
|
},
|
|
socketPath: filepath.Join(root, socketName),
|
|
}
|
|
}
|
|
|
|
func isAbstractPluginSocket(socketPath string) bool {
|
|
return strings.HasPrefix(socketPath, "@")
|
|
}
|
|
|
|
func (s *pluginLaunchSpec) cleanup() {
|
|
if s == nil {
|
|
return
|
|
}
|
|
s.closeParentFiles()
|
|
if s.runtimeDir != "" {
|
|
_ = os.RemoveAll(s.runtimeDir)
|
|
}
|
|
}
|
|
|
|
func (s *pluginLaunchSpec) closeParentFiles() {
|
|
if s == nil {
|
|
return
|
|
}
|
|
for _, file := range s.parentFiles {
|
|
if file != nil {
|
|
_ = file.Close()
|
|
}
|
|
}
|
|
s.parentFiles = nil
|
|
}
|
|
|
|
func pluginConfigFileName(name string) string {
|
|
base := strings.TrimSuffix(name, filepath.Ext(name))
|
|
return base + "_config.json"
|
|
}
|
|
|
|
func isolatedPluginEnv(env []string) []string {
|
|
result := make([]string, 0, len(env)+2)
|
|
for _, item := range env {
|
|
if len(item) >= len("SMAIL_ROOT=") && item[:len("SMAIL_ROOT=")] == "SMAIL_ROOT=" {
|
|
result = append(result, "SMAIL_ROOT=/")
|
|
continue
|
|
}
|
|
result = append(result, item)
|
|
}
|
|
result = append(result, "SMAIL_PLUGIN_SANDBOX=1")
|
|
return result
|
|
}
|