blob: 6fa55a0ca65be7bddda3de71598e3477654eafc3 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
|
#!/bin/sh
# check that paths don't accidentally match other files by prefix
[ "${at_xfail}" = "yes" ] && exit 77 # see script-0
(
# This clobbers all existing writable paths for this one write.
SANDBOX_PREDICT=/dev/null
SANDBOX_WRITE="${PWD}/foo"
echo FAIL >foobar
)
# the write to 'logfoobar' should be rejected since only 'log'
# is supposed to be writable
if [ $? -eq 0 ] ; then
exit 1
fi
# and we should have gotten a sandbox violation
test -s "${SANDBOX_LOG}"
exit $?
|
GitWeb
