Buriburizaemon/nezha_domains
1
0
Fork 0
mirror of https://github.com/Buriburizaem0n/nezha_domains.git synced 2026-09-22 03:00:12 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(agentcompat): validate evidence modes by platform

Browse Source 
Co-authored-by: naiba/CloudCode <hi+cloudcode@nai.ba>
This commit is contained in:
naiba
2026-07-20 14:10:40 +00:00
co-authored by naiba/CloudCode
parent 381eee0cec
commit ffbb8bed09
4 changed files with 63 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
integration/agentcompat/internal/evidence/directory_scan.go
+4 -4
View File
@@ -26,8 +26,8 @@ func scanDirectory(resultsDir string) (map[string]os.FileInfo, error) {
if info.Mode()&os.ModeSymlink != 0 || !info.IsDir() {
return nil, errors.New("evidence path must be a directory")
}
if info.Mode().Perm() != 0o700 {
return nil, errors.New("evidence directory must use mode 0700")
if err := validateEvidenceDirectoryMode(info); err != nil {
return nil, err
}
seen := make(map[string]os.FileInfo)
var totalBytes int64
@@ -65,8 +65,8 @@ func scanDirectory(resultsDir string) (map[string]os.FileInfo, error) {
if !allowedEvidencePath(relative) {
return fmt.Errorf("evidence path is not allowed: %s", relative)
}
if fileInfo.Mode().Perm() != 0o600 {
return fmt.Errorf("evidence file must use mode 0600: %s", relative)
if err := validateEvidenceFileMode(fileInfo, relative); err != nil {
return err
}
seen[relative] = fileInfo
if len(seen) > maxEvidenceFiles {