1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
|
package main
import (
"flag"
"fmt"
"net"
"net/http"
"os"
"os/exec"
"strings"
)
func indexHandler(w http.ResponseWriter, r *http.Request) {
w.WriteHeader(http.StatusOK)
w.Write([]byte("Hello, this is a Unix socket HTTP server in Go!"))
}
func main() {
socketPath, users := getArgs()
os.Remove(socketPath)
listener, err := net.Listen("unix", socketPath)
if err != nil {
panic(err)
}
os.Chmod(socketPath, 0700)
defer listener.Close()
for _, user := range strings.Split(users, ",") {
setACL(socketPath, user)
}
mux := http.NewServeMux()
mux.HandleFunc("/", indexHandler)
http.Serve(listener, mux)
}
func setACL(socketPath, user string) {
cmd := exec.Command("setfacl", "-m", "u:"+user+":rwx", socketPath)
if err := cmd.Run(); err != nil {
panic("failed to set ACL: " + err.Error())
}
}
func getArgs() (string, string) {
socketPath := flag.String("socket-path", "/tmp/go-server.sock", "Path to the Unix socket")
users := flag.String("users", "", "Comma-separated list of users for ACL")
flag.Parse()
if *users == "" {
fmt.Println("You must specify at least one user with --users")
os.Exit(1)
}
return *socketPath, *users
}
|
