blob: 5a842581069f988dd796e378f0535ea07a44a290 [file] [log] [blame]
Jason A. Donenfelddd1f0e52013-04-08 22:18:21 +02001#!/bin/sh
2
3test_description='Ensure that git does not access $HOME'
4. ./setup.sh
5
6test -n "$(which strace 2>/dev/null)" || {
7 skip_all='Skipping access validation tests: strace not found'
8 test_done
9 exit
10}
11
John Keeping64f30682013-04-14 17:07:41 +010012test_no_home_access () {
Jason A. Donenfelddd1f0e52013-04-08 22:18:21 +020013 non_existant_path="/path/to/some/place/that/does/not/possibly/exist"
14 while test -d "$non_existant_path"; do
15 non_existant_path="$non_existant_path/$(date +%N)"
John Keeping64f30682013-04-14 17:07:41 +010016 done &&
Jason A. Donenfelddd1f0e52013-04-08 22:18:21 +020017 strace \
18 -E HOME="$non_existant_path" \
19 -E CGIT_CONFIG="$PWD/cgitrc" \
John Keeping64f30682013-04-14 17:07:41 +010020 -E QUERY_STRING="url=$1" \
John Keeping880223d2013-04-10 13:11:57 +010021 -e access -f -o strace.out cgit &&
Jason A. Donenfelddd1f0e52013-04-08 22:18:21 +020022 test_must_fail grep "$non_existant_path" strace.out
John Keeping64f30682013-04-14 17:07:41 +010023}
24
John Keeping7966fd92013-05-09 19:40:58 +010025test_no_home_access_success() {
John Keeping64f30682013-04-14 17:07:41 +010026 test_expect_success "do not access \$HOME: $1" "
27 test_no_home_access '$1'
28 "
29}
30
31test_no_home_access_success
32test_no_home_access_success foo
33test_no_home_access_success foo/refs
34test_no_home_access_success foo/log
35test_no_home_access_success foo/tree
36test_no_home_access_success foo/tree/file-1
37test_no_home_access_success foo/commit
38test_no_home_access_success foo/diff
39test_no_home_access_success foo/patch
Jason A. Donenfeld8bf4a042013-04-30 12:27:41 +020040test_no_home_access_success foo/snapshot/master.tar.gz
Jason A. Donenfelddd1f0e52013-04-08 22:18:21 +020041
42test_done