bingshuo/guanghu-ice-heart
Watch
1
0
Fork
You've already forked guanghu-ice-heart
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

fix(jd): narrow repository sharing hook

Browse source
This commit is contained in:
冰朔 2026-07-30 00:01:42 +08:00
commit 406e9d8a7d
1 changed files with 5 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

7
server-tools/lake-lamp-authz/hooks/guanghu-ice-heart-post-receive
View file

@ -12,8 +12,11 @@ cd "$repo_dir"
owner_uid=$(id -u)
share_tree() {
find "$1" -user "$owner_uid" -type d -exec chmod g+rwx {} +
find "$1" -user "$owner_uid" -type f -exec chmod g+rw {} +
# RestrictSUIDSGID forbids chmod calls that preserve a setgid directory.
# Existing shared directories are already traversable, so touch only new
# private directories and use a numeric mode that drops the special bit.
find "$1" -user "$owner_uid" -type d ! -perm -g=x -exec chmod 0770 {} +
find "$1" -user "$owner_uid" -type f ! -perm -g=r -exec chmod g+r {} +
}
share_tree "$repo_dir/objects"