Jason A. Donenfeld | dd1f0e5 | 2013-04-08 22:18:21 +0200 | [diff] [blame] | 1 | #!/bin/sh |
| 2 | |
| 3 | test_description='Ensure that git does not access $HOME' |
| 4 | . ./setup.sh |
| 5 | |
| 6 | test -n "$(which strace 2>/dev/null)" || { |
| 7 | skip_all='Skipping access validation tests: strace not found' |
| 8 | test_done |
| 9 | exit |
| 10 | } |
| 11 | |
John Keeping | 64f3068 | 2013-04-14 17:07:41 +0100 | [diff] [blame] | 12 | test_no_home_access () { |
Jason A. Donenfeld | dd1f0e5 | 2013-04-08 22:18:21 +0200 | [diff] [blame] | 13 | non_existant_path="/path/to/some/place/that/does/not/possibly/exist" |
| 14 | while test -d "$non_existant_path"; do |
| 15 | non_existant_path="$non_existant_path/$(date +%N)" |
John Keeping | 64f3068 | 2013-04-14 17:07:41 +0100 | [diff] [blame] | 16 | done && |
Jason A. Donenfeld | dd1f0e5 | 2013-04-08 22:18:21 +0200 | [diff] [blame] | 17 | strace \ |
| 18 | -E HOME="$non_existant_path" \ |
| 19 | -E CGIT_CONFIG="$PWD/cgitrc" \ |
John Keeping | 64f3068 | 2013-04-14 17:07:41 +0100 | [diff] [blame] | 20 | -E QUERY_STRING="url=$1" \ |
John Keeping | 880223d | 2013-04-10 13:11:57 +0100 | [diff] [blame] | 21 | -e access -f -o strace.out cgit && |
Jason A. Donenfeld | dd1f0e5 | 2013-04-08 22:18:21 +0200 | [diff] [blame] | 22 | test_must_fail grep "$non_existant_path" strace.out |
John Keeping | 64f3068 | 2013-04-14 17:07:41 +0100 | [diff] [blame] | 23 | } |
| 24 | |
John Keeping | 7966fd9 | 2013-05-09 19:40:58 +0100 | [diff] [blame] | 25 | test_no_home_access_success() { |
John Keeping | 64f3068 | 2013-04-14 17:07:41 +0100 | [diff] [blame] | 26 | test_expect_success "do not access \$HOME: $1" " |
| 27 | test_no_home_access '$1' |
| 28 | " |
| 29 | } |
| 30 | |
| 31 | test_no_home_access_success |
| 32 | test_no_home_access_success foo |
| 33 | test_no_home_access_success foo/refs |
| 34 | test_no_home_access_success foo/log |
| 35 | test_no_home_access_success foo/tree |
| 36 | test_no_home_access_success foo/tree/file-1 |
| 37 | test_no_home_access_success foo/commit |
| 38 | test_no_home_access_success foo/diff |
| 39 | test_no_home_access_success foo/patch |
Jason A. Donenfeld | 8bf4a04 | 2013-04-30 12:27:41 +0200 | [diff] [blame] | 40 | test_no_home_access_success foo/snapshot/master.tar.gz |
Jason A. Donenfeld | dd1f0e5 | 2013-04-08 22:18:21 +0200 | [diff] [blame] | 41 | |
| 42 | test_done |