GameCult/Idunn
Watch
9
0
Fork
You've already forked Idunn
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Tests: the sealed-mode helper no longer redefines the module's existing mode_of

Browse source 
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
This commit is contained in:
Meta Vens 2026-10-23 19:54:35 +02:00
commit 76cec0b540
1 changed files with 9 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

18
src/drivers.rs
View file

@ -13979,7 +13979,7 @@ processes 9
}
#[cfg(unix)]
fn mode_of(path: &Path) -> u32 {
fn sealed_mode(path: &Path) -> u32 {
use std::os::unix::fs::PermissionsExt;
fs::symlink_metadata(path).unwrap().permissions().mode() & 0o777
@ -14057,12 +14057,12 @@ processes 9
);
harden_installed_release(&staging, &[receipt])?;
let tree = staging.join("upstream");
assert_eq!(mode_of(&tree.join("bin/daemon")), 0o555);
assert_eq!(mode_of(&tree.join("lib/tool")), 0o555);
assert_eq!(mode_of(&tree.join("bin/helper")), 0o444);
assert_eq!(mode_of(&tree.join("lib/data.txt")), 0o444);
assert_eq!(sealed_mode(&tree.join("bin/daemon")), 0o555);
assert_eq!(sealed_mode(&tree.join("lib/tool")), 0o555);
assert_eq!(sealed_mode(&tree.join("bin/helper")), 0o444);
assert_eq!(sealed_mode(&tree.join("lib/data.txt")), 0o444);
for directory in [&staging, &tree, &tree.join("bin"), &tree.join("lib")] {
assert_eq!(mode_of(directory), 0o555);
assert_eq!(sealed_mode(directory), 0o555);
}
Ok(())
}
@ -14240,7 +14240,7 @@ processes 9
let link = staging.join("upstream/bin/python3");
assert!(fs::symlink_metadata(&link)?.file_type().is_symlink());
assert_eq!(fs::read_link(&link)?, PathBuf::from("python3.12"));
assert_eq!(mode_of(&staging.join("upstream/bin/python3.12")), 0o555);
assert_eq!(sealed_mode(&staging.join("upstream/bin/python3.12")), 0o555);
assert_eq!(digest_artifact(&staging.join("upstream"))?.0, before);
// A link out of the release, by `..` or by absolute target, still refuses.
@ -14377,14 +14377,14 @@ processes 9
)?;
println!("harden {:?} {}", started.elapsed(), peak_rss());
for member in members {
assert_eq!(mode_of(&destination.join(member)), 0o555);
assert_eq!(sealed_mode(&destination.join(member)), 0o555);
}
let sample = fs::read_dir(&destination)?
.map(|entry| entry.map(|entry| entry.path()))
.collect::<std::io::Result<Vec<_>>>()?;
for path in sample {
if fs::symlink_metadata(&path)?.is_file() {
assert_eq!(mode_of(&path), 0o444);
assert_eq!(sealed_mode(&path), 0o444);
}
}
assert_eq!(symlinks(&destination)?, links);