mirror of
https://github.com/wnlen/clash-for-linux.git
synced 2026-10-10 04:03:04 +08:00
Arvin
1cea003417
Skip sourcing project aliases from the global profile when the system install lives in an unreadable directory such as /root. Add regression coverage for readable and restricted project paths. Refs #292
63 lines
1.9 KiB
Bash
Executable File
63 lines
1.9 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
set -euo pipefail
|
|
|
|
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
|
|
PROJECT_DIR="$(cd "$SCRIPT_DIR/../.." && pwd)"
|
|
|
|
# shellcheck source=../core/common.sh
|
|
source "$PROJECT_DIR/scripts/core/common.sh"
|
|
|
|
tmp_dir="$(mktemp -d)"
|
|
trap 'chmod 700 "$tmp_dir/private-project" 2>/dev/null || true; rm -rf "$tmp_dir"' EXIT
|
|
|
|
test_project="$tmp_dir/private-project"
|
|
FIXTURE_PROFILE_FILE="$tmp_dir/clash-for-linux.sh"
|
|
FIXTURE_ALIAS_FILE="$test_project/scripts/core/alias.sh"
|
|
|
|
mkdir -p "$(dirname "$FIXTURE_ALIAS_FILE")"
|
|
cat > "$FIXTURE_ALIAS_FILE" <<'EOF'
|
|
export CLASH_ALIAS_FIXTURE_LOADED="true"
|
|
EOF
|
|
|
|
INSTALL_SCOPE="system"
|
|
cleanup_legacy_shell_entries() { :; }
|
|
profile_entry_file() { echo "$FIXTURE_PROFILE_FILE"; }
|
|
alias_source_file() { echo "$FIXTURE_ALIAS_FILE"; }
|
|
bash_completion_entry_file() { echo "$tmp_dir/completion.bash"; }
|
|
zsh_completion_entry_file() { echo "$tmp_dir/completion.zsh"; }
|
|
command_install_dir() { echo "$tmp_dir/bin"; }
|
|
user_home_dir() { echo "$tmp_dir/home"; }
|
|
install_rc_source_block() { :; }
|
|
install_alias_command_wrappers() { :; }
|
|
|
|
install_shell_alias_entry
|
|
|
|
readable_output="$(
|
|
env -i PATH="$PATH" bash --noprofile --norc -c \
|
|
'source "$1"; printf "%s" "${CLASH_ALIAS_FIXTURE_LOADED:-false}"' \
|
|
bash "$FIXTURE_PROFILE_FILE"
|
|
)"
|
|
|
|
if [ "$readable_output" != "true" ]; then
|
|
echo "not ok - readable system alias should still load" >&2
|
|
exit 1
|
|
fi
|
|
|
|
chmod 000 "$test_project"
|
|
|
|
if ! restricted_output="$(
|
|
env -i PATH="$PATH" bash --noprofile --norc -c 'source "$1"' bash "$FIXTURE_PROFILE_FILE" 2>&1
|
|
)"; then
|
|
echo "not ok - unreadable system alias should not fail shell startup" >&2
|
|
printf '%s\n' "$restricted_output" >&2
|
|
exit 1
|
|
fi
|
|
|
|
if [ -n "$restricted_output" ]; then
|
|
echo "not ok - unreadable system alias should not print a shell startup error" >&2
|
|
printf '%s\n' "$restricted_output" >&2
|
|
exit 1
|
|
fi
|
|
|
|
echo "ok - system profile skips an unreadable project alias"
|