Skip to content

Create allow-executable argument

David Johnston requested to merge djohnston72/buildbox-run-hosttools:allow-list into master

Before raising this MR, consider whether the following are required, and complete if so:

  • Unit tests
  • Metrics
  • Documentation update(s)

I don't see other metric publishing in the runners, but happy to add it if we want that.

Description

This change adds an --allow-executable option to the buildbox-run-hosttools runner. This will allow the worker to restrict the list of possible executables run un-sandboxed.

For backwards compatibility, if no --allow-executable is specified then anything is allowed.

Validation

I tested this through make test with the newly added tests, as well as running buildbox-run-hosttools without any arguments to visually validate the usage text.

I also built this through dpkg-distro-dev build to make sure it works on all platforms.

Edited by David Johnston

Merge request reports