diff options
| author | zeripath <art27@cantab.net> | 2019-11-14 22:39:48 +0000 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2019-11-14 22:39:48 +0000 |
| commit | dd1beee2ef907527d0b046f78bab70b2bd868c55 (patch) | |
| tree | 80b8bf73916143d0dd082ee9600935eb6301b9fd /cmd | |
| parent | 3621944c2d381d159cf2622328927cf282f0b3e0 (diff) | |
| download | gitea-dd1beee2ef907527d0b046f78bab70b2bd868c55.tar.gz gitea-dd1beee2ef907527d0b046f78bab70b2bd868c55.zip | |
Enforce Gitea environment for pushes (#8982)
* Enforce Gitea environment for pushes
* Update custom/conf/app.ini.sample
Co-Authored-By: Antoine GIRARD <sapk@users.noreply.github.com>
Diffstat (limited to 'cmd')
| -rw-r--r-- | cmd/hook.go | 25 |
1 files changed, 22 insertions, 3 deletions
diff --git a/cmd/hook.go b/cmd/hook.go index f07568dd8b..9f547362da 100644 --- a/cmd/hook.go +++ b/cmd/hook.go @@ -16,6 +16,7 @@ import ( "code.gitea.io/gitea/models" "code.gitea.io/gitea/modules/git" "code.gitea.io/gitea/modules/private" + "code.gitea.io/gitea/modules/setting" "github.com/urfave/cli" ) @@ -55,7 +56,13 @@ var ( func runHookPreReceive(c *cli.Context) error { if len(os.Getenv("SSH_ORIGINAL_COMMAND")) == 0 { - return nil + if setting.OnlyAllowPushIfGiteaEnvironmentSet { + fail(`Rejecting changes as Gitea environment not set. +If you are pushing over SSH you must push with a key managed by +Gitea or set your environment appropriately.`, "") + } else { + return nil + } } setup("hooks/pre-receive.log") @@ -115,7 +122,13 @@ func runHookPreReceive(c *cli.Context) error { func runHookUpdate(c *cli.Context) error { if len(os.Getenv("SSH_ORIGINAL_COMMAND")) == 0 { - return nil + if setting.OnlyAllowPushIfGiteaEnvironmentSet { + fail(`Rejecting changes as Gitea environment not set. +If you are pushing over SSH you must push with a key managed by +Gitea or set your environment appropriately.`, "") + } else { + return nil + } } setup("hooks/update.log") @@ -125,7 +138,13 @@ func runHookUpdate(c *cli.Context) error { func runHookPostReceive(c *cli.Context) error { if len(os.Getenv("SSH_ORIGINAL_COMMAND")) == 0 { - return nil + if setting.OnlyAllowPushIfGiteaEnvironmentSet { + fail(`Rejecting changes as Gitea environment not set. +If you are pushing over SSH you must push with a key managed by +Gitea or set your environment appropriately.`, "") + } else { + return nil + } } setup("hooks/post-receive.log") |