mirror of
https://github.com/safedep/pmg.git
synced 2026-08-03 07:24:09 +02:00
* feat: Sandbox implementation with seatbelt * refactor: Remove concept of PM_CACHE * fix: Misc fixes * refactor: Sandbox for separation of boundaries * fix: Apply API * fix: Add support for sandbox cleanup * test: Add variable interpolation test * fix: Misc cleanup fixes * chore: Cleanup sandbox registry * chore: Cleanup sandbox policy * chore: Cleanup sandbox * fix: Misc cleanup fixes * fix: Remove violation mode * fix: Update config template * chore: Go mod cleanup * fix: Handle the case when package manager policy is explicitly disabled * fix: Sandbox executor * Apply suggestions from code review Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> Signed-off-by: Abhisek Datta <abhisek.datta@gmail.com> * test: Remove unused var * test: Add test for seatbelt sandbox driver * fix: Sandbox profile loader from file should use path for caching * test: Add policy test * feat: Add support for config templates * fix: Seatbelt translator handle glob * fix: Merge conflicts * fix: Fix sandbox policy generator for MacOS min permissions * fix: Sandbox path handling bugs * fix: Deny read to dangerous directories * fix: Deny read to dangerous directories * add sandbox e2e (#112) * fix: Sandbox E2E test * fix: Code review fixes * fix: Code review fixes * doc: Add sandbox debugging guide * doc: Update sandbox doc * docs: Add sandbox usage doc * fix: Use better error for sandbox without policy * fix: Add sandbox for npx * fix: Enable PTY for npm --------- Signed-off-by: Abhisek Datta <abhisek.datta@gmail.com> Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> Co-authored-by: Sahil Bansal <bansalsahil315@gmail.com>
53 lines
1.0 KiB
Go
53 lines
1.0 KiB
Go
package util
|
|
|
|
import (
|
|
"os"
|
|
"path/filepath"
|
|
"strings"
|
|
)
|
|
|
|
// ExpandVariables expands known variables in a path or pattern.
|
|
// Supported variables:
|
|
// - ${HOME}: User home directory
|
|
// - ${CWD}: Current working directory
|
|
// - ${TMPDIR}: Temporary directory
|
|
func ExpandVariables(pattern string) (string, error) {
|
|
result := pattern
|
|
|
|
// Get home directory
|
|
home, err := os.UserHomeDir()
|
|
if err != nil {
|
|
return "", err
|
|
}
|
|
|
|
// Get current working directory
|
|
cwd, err := os.Getwd()
|
|
if err != nil {
|
|
return "", err
|
|
}
|
|
|
|
// Get temp directory
|
|
tmpDir := os.TempDir()
|
|
|
|
// Replace variables
|
|
replacer := strings.NewReplacer(
|
|
"${HOME}", home,
|
|
"${CWD}", cwd,
|
|
"${TMPDIR}", tmpDir,
|
|
)
|
|
|
|
result = replacer.Replace(result)
|
|
|
|
// Clean up path (resolve .., ., etc.)
|
|
result = filepath.Clean(result)
|
|
|
|
return result, nil
|
|
}
|
|
|
|
// ContainsGlob returns true if the pattern contains glob wildcards.
|
|
func ContainsGlob(pattern string) bool {
|
|
return strings.Contains(pattern, "*") ||
|
|
strings.Contains(pattern, "?") ||
|
|
strings.Contains(pattern, "[")
|
|
}
|