rightkit-fs 0.4.7

Safe state directories, atomic writes, cross-process locks, owner-only files, and stable file identity for Right Suite apps.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61

//! M8-O10: `write_private_executable`.

use rightkit_fs::{write_private_executable, FsError};

#[cfg(unix)]
fn mode(path: &std::path::Path) -> u32 {
    use std::os::unix::fs::PermissionsExt;
    std::fs::metadata(path).unwrap().permissions().mode() & 0o7777
}

#[cfg(unix)]
#[test]
fn writes_a_0700_file_and_replaces_a_broader_one() {
    let dir = tempfile::tempdir().unwrap();
    let path = dir.path().join("askpass.sh");
    write_private_executable(&path, b"#!/bin/sh\necho secret\n").unwrap();
    assert_eq!(mode(&path), 0o700);
    assert_eq!(std::fs::read(&path).unwrap(), b"#!/bin/sh\necho secret\n");
    assert!(rightkit_fs::private::is_owner_only(&path).unwrap());

    use std::os::unix::fs::PermissionsExt;
    std::fs::set_permissions(&path, std::fs::Permissions::from_mode(0o755)).unwrap();
    write_private_executable(&path, b"#!/bin/sh\n").unwrap();
    assert_eq!(mode(&path), 0o700, "a replaced file ends owner-only");
    assert_eq!(std::fs::read(&path).unwrap(), b"#!/bin/sh\n");
}

#[cfg(unix)]
#[test]
fn the_written_script_can_be_executed_by_its_owner() {
    let dir = tempfile::tempdir().unwrap();
    let path = dir.path().join("run.sh");
    write_private_executable(&path, b"#!/bin/sh\nexit 7\n").unwrap();
    let status = std::process::Command::new(&path).status().unwrap();
    assert_eq!(status.code(), Some(7));
}

#[test]
fn leaves_no_temp_file_and_refuses_a_generated_temp_name() {
    let dir = tempfile::tempdir().unwrap();
    let path = dir.path().join("helper");
    write_private_executable(&path, b"x").unwrap();
    let names: Vec<_> = std::fs::read_dir(dir.path())
        .unwrap()
        .map(|e| e.unwrap().file_name().to_string_lossy().into_owned())
        .collect();
    assert_eq!(names, vec!["helper".to_string()]);

    let reserved = dir.path().join(".helper.rktmp-123-1-0");
    let error = write_private_executable(&reserved, b"x").unwrap_err();
    assert!(matches!(error, FsError::BadName(_)), "{error:?}");
    assert!(!reserved.exists());
}

#[test]
fn a_missing_parent_fails_without_creating_anything() {
    let dir = tempfile::tempdir().unwrap();
    let path = dir.path().join("absent").join("helper");
    assert!(write_private_executable(&path, b"x").is_err());
    assert!(!dir.path().join("absent").exists());
}