brew/Library/Homebrew/test/sandbox_spec.rb

require "sandbox"

describe Sandbox do
  define_negated_matcher :not_matching, :matching

  let(:dir) { mktmpdir }
  let(:file) { dir/"foo" }

  before(:each) do
    skip "Sandbox not implemented." unless described_class.available?
  end

  specify "#formula?" do
    f = formula { url "foo-1.0" }
    expect(described_class).to be_formula(f), "Formulae should be sandboxed."
  end

  specify "#test?" do
    ENV.delete("HOMEBREW_NO_SANDBOX")
    expect(described_class).to be_test, "Tests should be sandboxed unless --no-sandbox was passed."
  end

  specify "#allow_write" do
    subject.allow_write file
    subject.exec "touch", file

    expect(file).to exist
  end

  describe "#exec" do
    it "fails when writing to file not specified with ##allow_write" do
      expect {
        subject.exec "touch", file
      }.to raise_error(ErrorDuringExecution)

      expect(file).not_to exist
    end

    it "complains on failure" do
      ENV["HOMEBREW_VERBOSE"] = "1"

      expect(Utils).to receive(:popen_read).and_return("foo")

      expect { subject.exec "false" }
        .to raise_error(ErrorDuringExecution)
        .and output(/foo/).to_stdout
    end

    it "ignores bogus Python error" do
      ENV["HOMEBREW_VERBOSE"] = "1"

      with_bogus_error = <<-EOS.undent
        foo
        Mar 17 02:55:06 sandboxd[342]: Python(49765) deny file-write-unlink /System/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/distutils/errors.pyc
        bar
      EOS
      expect(Utils).to receive(:popen_read).and_return(with_bogus_error)

      expect { subject.exec "false" }
        .to raise_error(ErrorDuringExecution)
        .and output(a_string_matching(/foo/).and(matching(/bar/).and(not_matching(/Python/)))).to_stdout
    end
  end
end