mirror of
https://github.com/status-im/nimbus-eth2.git
synced 2025-01-09 13:56:23 +00:00
eee01a32d5
* Concentrate all sensitive writeFile/createPath calls in one place. Fix eth2_network_simulation for Windows. * Remove artifacts. * fix import Co-authored-by: Jacek Sieka <jacek@status.im>
34 lines
1.1 KiB
Nim
34 lines
1.1 KiB
Nim
import chronicles
|
|
import stew/io2
|
|
export io2
|
|
|
|
when defined(windows):
|
|
import stew/[windows/acl]
|
|
|
|
proc secureCreatePath*(path: string): IoResult[void] =
|
|
when defined(windows):
|
|
let sres = createFoldersUserOnlySecurityDescriptor()
|
|
if sres.isErr():
|
|
error "Could not allocate security descriptor", path = path,
|
|
errorMsg = ioErrorMsg(sres.error), errorCode = $sres.error
|
|
err(sres.error)
|
|
else:
|
|
var sd = sres.get()
|
|
createPath(path, 0o750, secDescriptor = sd.getDescriptor())
|
|
else:
|
|
createPath(path, 0o750)
|
|
|
|
proc secureWriteFile*[T: byte|char](path: string,
|
|
data: openArray[T]): IoResult[void] =
|
|
when defined(windows):
|
|
let sres = createFilesUserOnlySecurityDescriptor()
|
|
if sres.isErr():
|
|
error "Could not allocate security descriptor", path = path,
|
|
errorMsg = ioErrorMsg(sres.error), errorCode = $sres.error
|
|
err(sres.error)
|
|
else:
|
|
var sd = sres.get()
|
|
writeFile(path, data, 0o600, secDescriptor = sd.getDescriptor())
|
|
else:
|
|
writeFile(path, data, 0o600)
|