mirror of
https://github.com/RsyncProject/rsync.git
synced 2026-09-12 21:28:25 -04:00
Andrew TridgellandOmar Elsayed
a55ab05c19
The exclude/filter is a name filter, not a symlink boundary (3.2.7-equivalent): symlink-exclude family, daemon-exclude-namebased, the operator-path exclude / traversal / dir-daemon cases, filter-merge and implied-trailing-backslash. Co-authored-by: Omar Elsayed <omarelsayed161@gmail.com>
40 lines
1.7 KiB
Python
40 lines
1.7 KiB
Python
#!/usr/bin/env python3
|
|
# Regression guard for the module-confinement / exclude-aware operator-path
|
|
# resolver: a LEGITIMATE absolute --partial-dir that lives inside the served
|
|
# module (a real directory, no symlink, not excluded) must still work. The
|
|
# out-of-module / exclude refusals must not over-block an absolute in-module
|
|
# path by tripping on the module root's own ancestors (/home, /srv, ...) while
|
|
# the ownership walk descends to it.
|
|
|
|
import subprocess
|
|
|
|
from rsyncfns import (
|
|
SCRATCHDIR, rmtree, rsync_argv, start_test_daemon, test_fail, write_daemon_conf,
|
|
)
|
|
|
|
base = SCRATCHDIR / 'inmodule'
|
|
rmtree(base)
|
|
base.mkdir()
|
|
mod = base / 'mod'
|
|
mod.mkdir()
|
|
(mod / 'pdir').mkdir() # a real in-module partial dir
|
|
(mod / 'f0').write_text("OLD\n") # existing dest, smaller than src
|
|
src = base / 'src'
|
|
src.mkdir()
|
|
(src / 'f0').write_text("NEW-LONGER-CONTENT-SO-IT-TRANSFERS\n")
|
|
|
|
conf = write_daemon_conf([('mod', {'path': str(mod), 'read only': 'no'})])
|
|
url = start_test_daemon(conf, 12908)
|
|
|
|
# Absolute in-module --partial-dir: must be accepted and the file delivered.
|
|
proc = subprocess.run(
|
|
rsync_argv('-a', f'--partial-dir={mod}/pdir', f'{src}/', f'{url}mod/'),
|
|
stdout=subprocess.PIPE, stderr=subprocess.PIPE, text=True)
|
|
got = (mod / 'f0').read_text() if (mod / 'f0').exists() else None
|
|
if got != "NEW-LONGER-CONTENT-SO-IT-TRANSFERS\n":
|
|
test_fail(
|
|
"a legitimate absolute in-module --partial-dir was over-blocked: "
|
|
f"dest f0 is {got!r} (rc={proc.returncode}, err={proc.stderr.strip()[:200]}). "
|
|
"The module-confine/exclude refusal must allow the module root's ancestors.")
|
|
print("legitimate absolute in-module --partial-dir is accepted")
|