Nicola Murino
b2948a5255
sshd: removed Git support
...
Git integration has been removed as it is out of scope for a file transfer
solution like SFTPGo.
Maintaining Git support introduces unnecessary complexity and potential
security risks due to reliance on system commands.
In particular, allowing Git operations could enable authorized users to
upload repositories containing hooks, which might then be executed and abused.
To reduce the attack surface and simplify the codebase, Git support has been
fully dropped.
Signed-off-by: Nicola Murino <nicola.murino@gmail.com >
2025-08-02 18:58:03 +02:00
Nicola Murino
3f7533b86a
update deps ...
...
... and adapt the code to the new constants I added to
golang.org/x/crypto/ssh
Signed-off-by: Nicola Murino <nicola.murino@gmail.com >
2025-05-19 19:42:36 +02:00
Nicola Murino
519d201e74
fix rsync test case
...
Signed-off-by: Nicola Murino <nicola.murino@gmail.com >
2025-02-06 11:01:12 +01:00
Nicola Murino
e2b21ad946
ssh commands: fix for rsync with no arguments
...
Signed-off-by: Nicola Murino <nicola.murino@gmail.com >
2025-01-15 19:23:23 +01:00
Nicola Murino
de3c987802
rsync: enforce a supported format and limit the allowed options
...
Many rsync options are unsafe to use in restricted environments
and may pose security risks.
Signed-off-by: Nicola Murino <nicola.murino@gmail.com >
2025-01-13 19:41:58 +01:00
Nicola Murino
ae1487d733
fix connection limits
...
an SFTP client can start multiple transfers on a single connection
Signed-off-by: Nicola Murino <nicola.murino@gmail.com >
2024-10-26 21:18:19 +02:00
Nicola Murino
81433e00d1
event action: add update modtime to fs rename
...
Signed-off-by: Nicola Murino <nicola.murino@gmail.com >
2024-08-09 20:18:33 +02:00
Nicola Murino
d94f80c8da
replace utils.Contains with slices.Contains
...
Signed-off-by: Nicola Murino <nicola.murino@gmail.com >
2024-07-24 18:27:13 +02:00
Nicola Murino
665a980d62
improve error wrapping
...
Signed-off-by: Nicola Murino <nicola.murino@gmail.com >
2024-05-14 19:10:36 +02:00
Nicola Murino
e7627bfcd3
fix test cases after the change in the previous commit
...
Signed-off-by: Nicola Murino <nicola.murino@gmail.com >
2024-05-10 15:58:07 +02:00
Nicola Murino
aa426016f2
sftpd: remove folder_prefix
...
Signed-off-by: Nicola Murino <nicola.murino@gmail.com >
2024-04-26 11:43:25 +02:00
Nicola Murino
be2ed1089c
ssh: add username to sftp auth errors
...
Signed-off-by: Nicola Murino <nicola.murino@gmail.com >
2024-02-25 15:45:50 +01:00
Nicola Murino
f7d9e56cac
ssh: remove moduli, log negotiated algorithms
...
Fixes #1324
Signed-off-by: Nicola Murino <nicola.murino@gmail.com >
2024-02-24 20:35:09 +01:00
Nicola Murino
1ff55bbfa7
add DirLister interface
...
Signed-off-by: Nicola Murino <nicola.murino@gmail.com >
2024-02-15 20:53:56 +01:00
Nicola Murino
69da5c10c6
WIP new WebAdmin: configs page
...
Signed-off-by: Nicola Murino <nicola.murino@gmail.com >
2024-01-27 12:48:15 +01:00
Nicola Murino
8648351fc7
WIP new WebAdmin: connections page
...
Signed-off-by: Nicola Murino <nicola.murino@gmail.com >
2024-01-20 15:35:05 +01:00
Nicola Murino
784b7585c1
remove end year from Copyright notice in files
...
so we don't have to update all the files every year
Signed-off-by: Nicola Murino <nicola.murino@gmail.com >
2024-01-01 11:31:45 +01:00
Nicola Murino
c5c5860012
ssh: allow to configure public key auth algorithms
...
Signed-off-by: Nicola Murino <nicola.murino@gmail.com >
2023-11-09 20:03:04 +01:00
Nicola Murino
e3c4ee0833
add support for conditional resuming of uploads
...
Signed-off-by: Nicola Murino <nicola.murino@gmail.com >
2023-10-23 09:56:40 +02:00
Nicola Murino
f05fe78737
ssh: refactor host key algorithm restriction
...
Signed-off-by: Nicola Murino <nicola.murino@gmail.com >
2023-10-07 16:07:19 +02:00
Nicola Murino
f03fdd1155
add object metadata to notification events
...
Signed-off-by: Nicola Murino <nicola.murino@gmail.com >
2023-08-12 18:51:47 +02:00
Nicola Murino
adad8e658b
osfs: add optional buffering
...
Signed-off-by: Nicola Murino <nicola.murino@gmail.com >
2023-05-16 18:08:14 +02:00
Nicola Murino
e29f6857db
EventManager: add IDP login trigger and check account action
...
Signed-off-by: Nicola Murino <nicola.murino@gmail.com >
2023-03-22 19:02:54 +01:00
Nicola Murino
a3fff56da5
WebAdmin: add configs section
...
Setting configurations is an experimental feature and is not currently
supported in the REST API
Signed-off-by: Nicola Murino <nicola.murino@gmail.com >
2023-02-19 19:03:45 +01:00
Nicola Murino
27c4ffd663
sftpd: fix duplicate defender error introduced in the previous commit
...
improve the defender test cases by verifying the expected score
Signed-off-by: Nicola Murino <nicola.murino@gmail.com >
2023-01-25 21:57:27 +01:00
Nicola Murino
c0fe08b597
defender: allow to set a different score for "no auth tried" events
...
Signed-off-by: Nicola Murino <nicola.murino@gmail.com >
2023-01-25 18:49:03 +01:00
Nicola Murino
8cad436421
conditional support for recursive renaming for cloud providers
...
Signed-off-by: Nicola Murino <nicola.murino@gmail.com >
2023-01-06 12:33:50 +01:00
Nicola Murino
0190d0b849
update Copyright year
...
Signed-off-by: Nicola Murino <nicola.murino@gmail.com >
2023-01-03 10:18:30 +01:00
Nicola Murino
ea4c4dd57f
eventmanager: add copy action
...
refactor sftpgo-copy and sftpgo-remove commands
Signed-off-by: Nicola Murino <nicola.murino@gmail.com >
2022-12-27 18:51:53 +01:00
Nicola Murino
a22282f275
add support for DHGEX
...
Signed-off-by: Nicola Murino <nicola.murino@gmail.com >
2022-11-17 18:15:53 +01:00
Nicola Murino
5a222807b7
add roles
...
Fixes #837
Signed-off-by: Nicola Murino <nicola.murino@gmail.com >
2022-11-16 19:04:50 +01:00
Nicola Murino
db0e58ae7e
Add support for graceful shutdown
...
Fixes #1014
Signed-off-by: Nicola Murino <nicola.murino@gmail.com >
2022-10-22 11:56:41 +02:00
Nicola Murino
95e9106902
use the new atomic types introduced in Go 1.19
...
we depend on Go 1.19 anyway
Signed-off-by: Nicola Murino <nicola.murino@gmail.com >
2022-08-30 15:47:41 +02:00
Nicola Murino
9d2b5dc07d
refactor: move eventmanager to common package
...
Signed-off-by: Nicola Murino <nicola.murino@gmail.com >
2022-08-01 18:48:54 +02:00
Nicola Murino
c8158e14e0
move SFTPGo package to the internal folder
...
SFTPGo is a daemon and command line tool, not a library.
The public API are provided by the SDK
Signed-off-by: Nicola Murino <nicola.murino@gmail.com >
2022-07-24 16:18:54 +02:00