8bf4a0465e
It's a bit tedious to have to do this here too. If we encounter other issues with $HOME down the line, I'll look into adding some nice utility functions to handle this, or perhaps giving up on the hope that we could keep $HOME defined for scripts. This commit additionally adds a test case, should the issue surface again. Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
43 γραμμές
1.1 KiB
Bash
Εκτελέσιμο Αρχείο
43 γραμμές
1.1 KiB
Bash
Εκτελέσιμο Αρχείο
#!/bin/sh
|
|
|
|
test_description='Ensure that git does not access $HOME'
|
|
. ./setup.sh
|
|
|
|
test -n "$(which strace 2>/dev/null)" || {
|
|
skip_all='Skipping access validation tests: strace not found'
|
|
test_done
|
|
exit
|
|
}
|
|
|
|
test_no_home_access () {
|
|
non_existant_path="/path/to/some/place/that/does/not/possibly/exist"
|
|
while test -d "$non_existant_path"; do
|
|
non_existant_path="$non_existant_path/$(date +%N)"
|
|
done &&
|
|
strace \
|
|
-E HOME="$non_existant_path" \
|
|
-E CGIT_CONFIG="$PWD/cgitrc" \
|
|
-E QUERY_STRING="url=$1" \
|
|
-e access -f -o strace.out cgit &&
|
|
test_must_fail grep "$non_existant_path" strace.out
|
|
}
|
|
|
|
function test_no_home_access_success() {
|
|
test_expect_success "do not access \$HOME: $1" "
|
|
test_no_home_access '$1'
|
|
"
|
|
}
|
|
|
|
test_no_home_access_success
|
|
test_no_home_access_success foo
|
|
test_no_home_access_success foo/refs
|
|
test_no_home_access_success foo/log
|
|
test_no_home_access_success foo/tree
|
|
test_no_home_access_success foo/tree/file-1
|
|
test_no_home_access_success foo/commit
|
|
test_no_home_access_success foo/diff
|
|
test_no_home_access_success foo/patch
|
|
test_no_home_access_success foo/snapshot/master.tar.gz
|
|
|
|
test_done
|