871d442b8e
Show a warning when Auto Sandbox mode becomes enabled, if we detect Everyone-writable directories, since they cannot be protected by the current implementation of the Sandbox. This PR also includes changes to how we detect Everyone-writable to be *much* faster
63 lines
1.8 KiB
Rust
63 lines
1.8 KiB
Rust
use std::fs::OpenOptions;
|
|
use std::io::Write;
|
|
use std::path::Path;
|
|
use std::path::PathBuf;
|
|
|
|
const LOG_COMMAND_PREVIEW_LIMIT: usize = 200;
|
|
pub const LOG_FILE_NAME: &str = "sandbox_commands.rust.log";
|
|
|
|
fn preview(command: &[String]) -> String {
|
|
let joined = command.join(" ");
|
|
if joined.len() <= LOG_COMMAND_PREVIEW_LIMIT {
|
|
joined
|
|
} else {
|
|
joined[..LOG_COMMAND_PREVIEW_LIMIT].to_string()
|
|
}
|
|
}
|
|
|
|
fn log_file_path(base_dir: &Path) -> Option<PathBuf> {
|
|
if base_dir.is_dir() {
|
|
Some(base_dir.join(LOG_FILE_NAME))
|
|
} else {
|
|
None
|
|
}
|
|
}
|
|
|
|
fn append_line(line: &str, base_dir: Option<&Path>) {
|
|
if let Some(dir) = base_dir {
|
|
if let Some(path) = log_file_path(dir) {
|
|
if let Ok(mut f) = OpenOptions::new().create(true).append(true).open(path) {
|
|
let _ = writeln!(f, "{}", line);
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
pub fn log_start(command: &[String], base_dir: Option<&Path>) {
|
|
let p = preview(command);
|
|
append_line(&format!("START: {p}"), base_dir);
|
|
}
|
|
|
|
pub fn log_success(command: &[String], base_dir: Option<&Path>) {
|
|
let p = preview(command);
|
|
append_line(&format!("SUCCESS: {p}"), base_dir);
|
|
}
|
|
|
|
pub fn log_failure(command: &[String], detail: &str, base_dir: Option<&Path>) {
|
|
let p = preview(command);
|
|
append_line(&format!("FAILURE: {p} ({detail})"), base_dir);
|
|
}
|
|
|
|
// Debug logging helper. Emits only when SBX_DEBUG=1 to avoid noisy logs.
|
|
pub fn debug_log(msg: &str, base_dir: Option<&Path>) {
|
|
if std::env::var("SBX_DEBUG").ok().as_deref() == Some("1") {
|
|
append_line(&format!("DEBUG: {msg}"), base_dir);
|
|
eprintln!("{msg}");
|
|
}
|
|
}
|
|
|
|
// Unconditional note logging to sandbox_commands.rust.log
|
|
pub fn log_note(msg: &str, base_dir: Option<&Path>) {
|
|
append_line(msg, base_dir);
|
|
}
|