diff options
| author | Nayeem Rahman <nayeemrmn99@gmail.com> | 2023-08-30 18:52:01 +0100 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2023-08-30 18:52:01 +0100 |
| commit | 1cce3060227f7bc53a8d5ad938f092362cf78855 (patch) | |
| tree | 9abfe9f27372291b9f04e11a4e4127bb2daf39af /Cargo.lock | |
| parent | d28384c3deec1497d28f0f6bd16cf51de832e572 (diff) | |
fix(runtime/permissions): Resolve executable specifiers in allowlists and queries (#14130)
Closes #14122.
Adds two extensions to `--allow-run` behaviour:
- When `--allow-run=foo` is specified and `foo` is found in the `PATH`
at startup, `RunDescriptor::Path(which("foo"))` is added to the
allowlist alongside `RunDescriptor::Name("foo")`. Currently only the
latter is.
- When run permission for `foo` is queried and `foo` is found in the
`PATH` at runtime, either `RunDescriptor::Path(which("foo"))` or
`RunDescriptor::Name("foo")` would qualify in the allowlist. Currently
only the latter does.
Diffstat (limited to 'Cargo.lock')
| -rw-r--r-- | Cargo.lock | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/Cargo.lock b/Cargo.lock index d565cbb23..dd12b8851 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -1515,6 +1515,7 @@ dependencies = [ "tokio", "tokio-metrics", "uuid", + "which", "winapi", "winres", ] |