27
Content-Disposition: inline; filename="
12
t0109-gitconfig.sh
HTTP/1.1 200 OK
Connection: close
Content-Length: 1112
Content-Security-Policy: default-src 'none'
Content-Type: text/plain; charset=UTF-8
Date: Sat, 23 Aug 2025 15:37:07 GMT
ETag: "5a842581069f988dd796e378f0535ea07a44a290"
Expires: Tue, 21 Aug 2035 15:37:07 GMT
Last-Modified: Sat, 23 Aug 2025 15:37:07 GMT
Server: OpenBSD httpd
X-Content-Type-Options: nosniff

#!/bin/sh

test_description='Ensure that git does not access $HOME'
. ./setup.sh

test -n "$(which strace 2>/dev/null)" || {
	skip_all='Skipping access validation tests: strace not found'
	test_done
	exit
}

test_no_home_access () {
	non_existant_path="/path/to/some/place/that/does/not/possibly/exist"
	while test -d "$non_existant_path"; do
		non_existant_path="$non_existant_path/$(date +%N)"
	done &&
	strace \
		-E HOME="$non_existant_path" \
		-E CGIT_CONFIG="$PWD/cgitrc" \
		-E QUERY_STRING="url=$1" \
		-e access -f -o strace.out cgit &&
	test_must_fail grep "$non_existant_path" strace.out
}

test_no_home_access_success() {
	test_expect_success "do not access \$HOME: $1" "
		test_no_home_access '$1'
	"
}

test_no_home_access_success
test_no_home_access_success foo
test_no_home_access_success foo/refs
test_no_home_access_success foo/log
test_no_home_access_success foo/tree
test_no_home_access_success foo/tree/file-1
test_no_home_access_success foo/commit
test_no_home_access_success foo/diff
test_no_home_access_success foo/patch
test_no_home_access_success foo/snapshot/master.tar.gz

test_done
