secenv 0.3.0-beta.2

Secure environments.
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24

use std::process::Command;

pub(crate) fn remove_environment_variables(command: &mut Command, variables: &[String]) {
    for variable in variables {
        command.env_remove(variable);
    }
}

#[cfg(all(test, unix))]
mod tests {
    use super::*;

    #[test]
    fn removes_environment_variables_from_child_processes() {
        let variables = vec!["SECENV_TEST_SEALED_SECRET".to_string()];
        let mut command = Command::new("sh");
        command
            .args(["-c", "[ -z \"${SECENV_TEST_SEALED_SECRET+x}\" ]"])
            .env("SECENV_TEST_SEALED_SECRET", "must-not-leak");

        remove_environment_variables(&mut command, &variables);
        assert!(command.status().expect("failed to run test command").success());
    }
}