YunoHost/package_check
1
0
Fork 0
mirror of https://github.com/YunoHost/package_check.git synced 2024-09-03 20:06:20 +02:00
Code Issues Projects Releases Packages Wiki Activity

Block level 7+ if unsafe permissions (or path traversal or missing witness) is detected

Browse source
This commit is contained in:
Alexandre Aubin 2021-10-01 04:28:40 +02:00
parent dea8dc5618
commit 6f19f74328
1 changed files with 6 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
lib/analyze_test_results.py
View file

@ -152,10 +152,16 @@ def level_7(tests):
linter_tests = [t for t in tests if t["test_type"] == "PACKAGE_LINTER"]
too_many_warnings = any(t["results"].get("too_many_warnings") for t in tests)
unsafe_install_dir_perms = any(t["results"].get("install_dir_permissions") for t in tests)
alias_traversal = any(t["results"].get("alias_traversal") for t in tests)
witness = any(t["results"].get("witness") for t in tests)
return all(t["results"]["main_result"] == "success" for t in tests) \
and linter_tests != [] \
and not witness \
and not alias_traversal \
and not too_many_warnings \
and not unsafe_install_dir_perms \
and "App.qualify_for_level_7" in linter_tests[0]["results"]["success"]