bashkit 0.16.0

Awesomely fast virtual sandbox with bash and file system
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70

//! Backend-neutral filesystem security certification helpers.

use bashkit::{Error, FileSystem};
use std::io::ErrorKind;
use std::path::{Path, PathBuf};

fn io_kind(error: Error) -> ErrorKind {
    match error {
        Error::Io(error) => error.kind(),
        other => panic!("expected I/O error, got {other}"),
    }
}

pub async fn certify_path_and_data_contract(name: &str, fs: &dyn FileSystem) {
    fs.mkdir(Path::new("/cert"), false).await.unwrap();
    let content = b"prefix\0middle\0suffix";
    fs.write_file(Path::new("/cert/data"), content)
        .await
        .unwrap();
    assert_eq!(
        fs.read_file(Path::new("/../../cert/./data")).await.unwrap(),
        content,
        "{name}"
    );
    fs.symlink(Path::new("data"), Path::new("/cert/link"))
        .await
        .unwrap();
    assert!(
        fs.stat(Path::new("/cert/link"))
            .await
            .unwrap()
            .file_type
            .is_symlink(),
        "{name}"
    );
    assert_eq!(
        io_kind(fs.read_file(Path::new("/cert/link")).await.unwrap_err()),
        ErrorKind::NotFound,
        "{name}"
    );
    assert_eq!(
        fs.read_link(Path::new("/cert/link")).await.unwrap(),
        PathBuf::from("data"),
        "{name}"
    );

    let unsafe_path = Path::new("/cert/bad\0name");
    let errors = [
        fs.read_file(unsafe_path).await.unwrap_err(),
        fs.write_file(unsafe_path, b"x").await.unwrap_err(),
        fs.mkdir(unsafe_path, false).await.unwrap_err(),
        fs.remove(unsafe_path, false).await.unwrap_err(),
        fs.stat(unsafe_path).await.unwrap_err(),
        fs.read_dir(unsafe_path).await.unwrap_err(),
        fs.copy(Path::new("/cert/data"), unsafe_path)
            .await
            .unwrap_err(),
        fs.rename(Path::new("/cert/data"), unsafe_path)
            .await
            .unwrap_err(),
        fs.symlink(Path::new("target"), unsafe_path)
            .await
            .unwrap_err(),
        fs.read_link(unsafe_path).await.unwrap_err(),
        fs.chmod(unsafe_path, 0o600).await.unwrap_err(),
    ];
    for error in errors {
        assert_eq!(io_kind(error), ErrorKind::InvalidInput, "{name}");
    }
}