vrr/Pulse
2
0
Fork 0
mirror of https://github.com/rcourtman/Pulse.git synced 2026-10-19 02:28:59 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 13

Fix local subscription CLI service setup

Browse source
This commit is contained in:
rcourtman 2026-08-23 09:28:44 +01:00
parent 3a9dffa850
commit 66eb537522
12 changed files with 279 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

17
scripts/installtests/root_install_sh_test.go
View file

@ -89,6 +89,23 @@ func TestRootInstallScriptArchiveSupportContract(t *testing.T) {
}
}
func TestRootInstallSystemdServiceExposesOnlyPulseOwnedSubscriptionCLIHome(t *testing.T) {
body := extractRootInstallShellFunction(t, "install_systemd_service")
for _, required := range []string{
`Environment="HOME=$INSTALL_DIR"`,
`Environment="PATH=$INSTALL_DIR/.local/bin:$INSTALL_DIR/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"`,
`User=pulse`,
`ProtectHome=true`,
} {
if !strings.Contains(body, required) {
t.Fatalf("systemd service missing subscription CLI boundary %q", required)
}
}
if strings.Contains(body, "/root/") {
t.Fatal("systemd service must not expose a privileged home to local subscription CLIs")
}
}
func TestRootInstallScriptStagesUpdateBeforeStoppingService(t *testing.T) {
downloadPulse := extractRootInstallShellFunction(t, "download_pulse")
orderedSteps := []string{