StrixOS/build_soong
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge "Allowlist gcert and prodcertstatus binaries"

Browse Source
This commit is contained in:
Treehugger Robot
2023-06-05 21:21:37 +00:00
committed by Gerrit Code Review
parent e71945b791 5c5c57d039
commit 300243ca3e
1 changed files with 23 additions and 21 deletions
Download Patch File Download Diff File Expand all files Collapse all files

44
ui/build/paths/config.go
View File

@@ -86,27 +86,29 @@ func GetConfig(name string) PathConfig {
// This list specifies whether a particular binary from $PATH is allowed to be // This list specifies whether a particular binary from $PATH is allowed to be
// run during the build. For more documentation, see path_interposer.go . // run during the build. For more documentation, see path_interposer.go .
var Configuration = map[string]PathConfig{ var Configuration = map[string]PathConfig{
"bash": Allowed, "bash": Allowed,
"dd": Allowed, "dd": Allowed,
"diff": Allowed, "diff": Allowed,
"dlv": Allowed, "dlv": Allowed,
"expr": Allowed, "expr": Allowed,
"fuser": Allowed, "fuser": Allowed,
"getopt": Allowed, "gcert": Allowed,
"git": Allowed, "getopt": Allowed,
"hexdump": Allowed, "git": Allowed,
"jar": Allowed, "hexdump": Allowed,
"java": Allowed, "jar": Allowed,
"javap": Allowed, "java": Allowed,
"lsof": Allowed, "javap": Allowed,
"openssl": Allowed, "lsof": Allowed,
"pstree": Allowed, "openssl": Allowed,
"rsync": Allowed, "prodcertstatus": Allowed,
"sh": Allowed, "pstree": Allowed,
"stubby": Allowed, "rsync": Allowed,
"tr": Allowed, "sh": Allowed,
"unzip": Allowed, "stubby": Allowed,
"zip": Allowed, "tr": Allowed,
"unzip": Allowed,
"zip": Allowed,
// Host toolchain is removed. In-tree toolchain should be used instead. // Host toolchain is removed. In-tree toolchain should be used instead.
// GCC also can't find cc1 with this implementation. // GCC also can't find cc1 with this implementation.