mirror of
https://github.com/razzant/ouroboros.git
synced 2026-08-04 08:09:48 +00:00
2103957251
Allow full local git inside a task workspace while deterministically blocking any git that targets the Ouroboros self-repo/data via cwd, -C, --git-dir/ --work-tree, GIT_DIR/GIT_WORK_TREE env, positional path, or glued/newline/ backtick-separated segments. Adds segment-aware shell parsing helpers.
74 lines
3.3 KiB
Python
74 lines
3.3 KiB
Python
"""Regression suite for the external-workspace git policy classifier.
|
|
|
|
These pin the bypasses found in the v6.27.0 audit (NW-4): environment-based
|
|
repo retargeting (``GIT_DIR`` / ``GIT_WORK_TREE``) and glued / newline shell
|
|
separators that previously let ``cd ws;git -C <runtime> reset`` masquerade as a
|
|
single ``cd`` segment with the ``-C`` selector never inspected. The round-1
|
|
``cd``-bypass fix shipped with zero behavioural coverage; this file is that
|
|
coverage plus the env and nested-shell vectors.
|
|
"""
|
|
import importlib
|
|
import pathlib
|
|
|
|
import pytest
|
|
|
|
policy = importlib.import_module("ouroboros.git_shell_policy")
|
|
|
|
WS = pathlib.Path("/tmp/ws")
|
|
REPO = pathlib.Path("/Users/anton/Ouroboros/repo")
|
|
DATA = pathlib.Path("/Users/anton/Ouroboros/data")
|
|
ROOTS = [REPO, DATA]
|
|
|
|
|
|
def _violation(cmd, *, cwd="/tmp/ws", allow_network=True):
|
|
return policy.external_workspace_git_violation(
|
|
cmd, active_root=WS, cwd=cwd, protected_roots=ROOTS, allow_network=allow_network
|
|
)
|
|
|
|
|
|
# --- bypasses that MUST be blocked -----------------------------------------
|
|
|
|
BLOCKED_CASES = [
|
|
pytest.param("GIT_DIR=/Users/anton/Ouroboros/repo/.git git reset --hard", id="env_git_dir_bare"),
|
|
pytest.param("env GIT_DIR=/Users/anton/Ouroboros/repo/.git git reset --hard", id="env_git_dir_wrapper"),
|
|
pytest.param("GIT_WORK_TREE=/Users/anton/Ouroboros/repo git checkout .", id="env_work_tree"),
|
|
pytest.param("cd /tmp/ws;git -C /Users/anton/Ouroboros/repo reset --hard", id="glued_semicolon_cd_minusC"),
|
|
pytest.param("cd /tmp/ws\ngit -C /Users/anton/Ouroboros/repo reset --hard", id="newline_cd_minusC"),
|
|
pytest.param("git -C /Users/anton/Ouroboros/repo status", id="direct_minusC_repo"),
|
|
pytest.param("git --git-dir=/Users/anton/Ouroboros/repo/.git log", id="git_dir_flag_repo"),
|
|
pytest.param("git --work-tree=/Users/anton/Ouroboros/data status", id="work_tree_flag_data"),
|
|
pytest.param("sh -c 'git -C /Users/anton/Ouroboros/repo reset --hard'", id="nested_sh_c"),
|
|
pytest.param("true && git -C /Users/anton/Ouroboros/repo clean -fd", id="glued_and_minusC"),
|
|
pytest.param("cd /Users/anton/Ouroboros/repo && git status", id="cd_into_repo_then_git"),
|
|
]
|
|
|
|
|
|
@pytest.mark.parametrize("cmd", BLOCKED_CASES)
|
|
def test_runtime_targeting_git_is_blocked(cmd):
|
|
assert _violation(cmd), f"expected BLOCK for: {cmd!r}"
|
|
|
|
|
|
def test_network_subcommand_blocked_when_network_disabled():
|
|
assert _violation("git clone https://example.com/x.git", allow_network=False)
|
|
|
|
|
|
# --- legitimate external-workspace git that MUST stay allowed ---------------
|
|
|
|
ALLOWED_CASES = [
|
|
pytest.param("git status", id="status"),
|
|
pytest.param("git commit -m 'work'", id="commit"),
|
|
pytest.param("git clone https://example.com/x.git", id="clone_network_on"),
|
|
pytest.param("cd /tmp/ws/sub && git commit -m x", id="cd_subdir_commit"),
|
|
pytest.param("git -C /tmp/ws/sub status", id="minusC_inside_workspace"),
|
|
pytest.param("echo 'git -C /Users/anton/Ouroboros/repo' > note.txt", id="echo_mentions_git_not_a_git_cmd"),
|
|
pytest.param("grep -r 'git reset' .", id="grep_mentions_git"),
|
|
]
|
|
|
|
|
|
@pytest.mark.parametrize("cmd", ALLOWED_CASES)
|
|
def test_legitimate_workspace_git_is_allowed(cmd):
|
|
assert not _violation(cmd), f"expected ALLOW for: {cmd!r}"
|
|
|
|
|
|
def test_clone_allowed_when_network_enabled():
|
|
assert not _violation("git clone https://example.com/x.git", allow_network=True)
|