confguard 4.0.0

Guard your sensitive configuration files
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110

// src/util/path/move_and_link.rs
use crate::errors::{ConfGuardContext, ConfGuardError, ConfGuardResult};
use crate::util::link::create_link;
use derive_builder::Builder;
use derive_more::Display;
use std::fs;
use std::path::{Path, PathBuf};

#[derive(Debug, Builder, Display, Default, Clone)]
#[display("MoveAndLink {{ source: {}, destination: {} }}", source_path.display(), destination_path.display())]
pub struct MoveAndLink {
    source_path: PathBuf,
    destination_path: PathBuf,
}

impl MoveAndLink {
    /// Creates a new MoveAndLink instance with canonicalized absolute paths
    ///
    /// # Requirements
    /// - Source path must exist
    /// - Source path must not be a symlink
    pub fn new(
        source_path: impl AsRef<Path>,
        destination_path: impl AsRef<Path>,
    ) -> ConfGuardResult<Self> {
        let current_dir = std::env::current_dir()?;
        let source_ref = source_path.as_ref();

        // Get absolute source path
        let source_abs = if source_ref.is_absolute() {
            source_ref.to_path_buf()
        } else {
            current_dir.join(source_ref)
        };

        // First check existence
        if !source_abs.exists() {
            return Err(ConfGuardError::SourcePathNotFound(source_abs));
        }

        // Check if it's a symlink before canonicalization
        if source_abs.symlink_metadata()?.file_type().is_symlink() {
            return Err(ConfGuardError::SourceIsSymlink(source_abs));
        }

        // Then canonicalize
        let source_canonical = source_abs
            .canonicalize()
            .with_context(|| format!("canonicalize source path: {:?}", source_abs))?;

        let dest_ref = destination_path.as_ref();
        let dest_abs = if dest_ref.is_absolute() {
            dest_ref.to_path_buf()
        } else {
            current_dir.join(dest_ref)
        };

        Ok(Self {
            source_path: source_canonical,
            destination_path: dest_abs,
        })
    }

    /// Moves the source file to the destination and creates a symbolic link at the source location
    pub fn move_and_link(&self, relative: bool) -> ConfGuardResult<()> {
        // Create parent directories if they don't exist
        if let Some(parent) = self.destination_path.parent() {
            fs::create_dir_all(parent)?;
        }

        // Move the file
        fs::rename(&self.source_path, &self.destination_path).with_context(|| {
            format!("move {:?} to {:?}", self.source_path, self.destination_path)
        })?;

        // Create symbolic link
        create_link(&self.destination_path, &self.source_path, relative)?;

        Ok(())
    }

    /// Reverses the move_and_link operation by replacing the symlink with the original file
    pub fn revert(&self) -> ConfGuardResult<()> {
        // Ensure source exists and is a symlink
        if !self.source_path.exists() {
            return Err(ConfGuardError::SourceLinkNotFound(self.source_path.clone()));
        }
        if !self
            .source_path
            .symlink_metadata()?
            .file_type()
            .is_symlink()
        {
            return Err(ConfGuardError::SourceNotSymlink(self.source_path.clone()));
        }

        // Remove the symlink
        fs::remove_file(&self.source_path)?;

        // Move the file back
        fs::rename(&self.destination_path, &self.source_path).with_context(|| {
            format!(
                "move {:?} back to {:?}",
                self.destination_path, self.source_path
            )
        })?;

        Ok(())
    }
}