scriptoriumadmin/fabro
1
0
Fork 0
mirror of https://github.com/fabro-sh/fabro.git synced 2026-10-09 03:20:56 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 6

docs(sandbox): clarify Bash probe rationale

Browse source
This commit is contained in:
Bryan Helmkamp 2026-07-24 23:02:33 -04:00
parent 50a6cd3637
commit 462858725d
No known key found for this signature in database
1 changed files with 4 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
lib/components/fabro-sandbox/src/sandbox.rs
View file

@ -37,8 +37,8 @@ pub(crate) const BASH_ENV_VAR: &str = "BASH_ENV";
/// Marker a successful [`BASH_PROBE_SCRIPT`] run prints on stdout.
///
/// Providers validate the marker rather than trusting a zero exit: an image
/// whose `/bin/bash` is a `sh` symlink still exits zero for many scripts.
/// Providers validate the marker rather than trusting a zero exit: a non-Bash
/// shell can exit zero for simple scripts without satisfying the contract.
pub(crate) const BASH_PROBE_MARKER: &str = "fabro-bash-ready";
/// Deterministic probe proving a sandbox's interpreter is non-login Bash.
@ -46,8 +46,8 @@ pub(crate) const BASH_PROBE_MARKER: &str = "fabro-bash-ready";
/// Run as the argument to `bash -c` during fresh initialization and on
/// resume/start, before the sandbox is reported usable. It fails when the
/// interpreter has an ambient `BASH_ENV` startup source, is not Bash, was
/// started as a login shell, or is in POSIX mode — an image whose `bash` is
/// really `sh` passes the `BASH_VERSION` check but changes behavior, so the
/// started as a login shell, or is in POSIX mode. Bash invoked under the name
/// `sh` still sets `BASH_VERSION` while enabling POSIX behavior, so the full
/// interpreter contract is checked rather than assumed.
pub(crate) const BASH_PROBE_SCRIPT: &str = r#"if [ -n "${BASH_ENV:-}" ]; then
echo 'sandbox interpreter has BASH_ENV startup source configured' >&2