mara/hyperhive
mara/hyperhive
Watch
0
0
Fork
You've already forked hyperhive
 0
Code Activity

swarm-archive vm test: the fake store is readable by the prune whatever the writer's umask

Browse source
This commit is contained in:
atlas 2026-11-12 04:24:44 +01:00
commit 2a0b2dcc1f
1 changed files with 4 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

4
nix/vm-tests/swarm-archive.nix
View file

@ -31,7 +31,11 @@ let
agentRoot = "/var/lib/hyperhive/agents"; agentRoot = "/var/lib/hyperhive/agents";
# A directory is a leaf, a file in it a field: `kv get -field=<f> <path>`. # A directory is a leaf, a file in it a field: `kv get -field=<f> <path>`.
# The store stays readable by every caller whatever the umask of the writer:
# the users unit runs with `UMask=0027` and its `kv put` creates the parent
# directories, which the prune (another user) must still traverse.
fakeBao = pkgs.writeShellScriptBin "bao" '' fakeBao = pkgs.writeShellScriptBin "bao" ''
umask 022
store=${store} store=${store}
case "$1 $2" in case "$1 $2" in
"login -method=cert") echo faketoken; exit 0 ;; "login -method=cert") echo faketoken; exit 0 ;;