require "sandbox" describe Sandbox do define_negated_matcher :not_matching, :matching let(:dir) { mktmpdir } let(:file) { dir/"foo" } before do skip "Sandbox not implemented." unless described_class.available? end specify "#formula?" do f = formula { url "foo-1.0" } expect(described_class).to be_formula(f), "Formulae should be sandboxed." end specify "#test?" do ENV.delete("HOMEBREW_NO_SANDBOX") expect(described_class).to be_test, "Tests should be sandboxed unless --no-sandbox was passed." end specify "#allow_write" do subject.allow_write file subject.exec "touch", file expect(file).to exist end describe "#exec" do it "fails when writing to file not specified with ##allow_write" do expect { subject.exec "touch", file }.to raise_error(ErrorDuringExecution) expect(file).not_to exist end it "complains on failure" do ENV["HOMEBREW_VERBOSE"] = "1" expect(Utils).to receive(:popen_read).and_return("foo") expect { subject.exec "false" } .to raise_error(ErrorDuringExecution) .and output(/foo/).to_stdout end it "ignores bogus Python error" do ENV["HOMEBREW_VERBOSE"] = "1" with_bogus_error = <<~EOS foo Mar 17 02:55:06 sandboxd[342]: Python(49765) deny file-write-unlink /System/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/distutils/errors.pyc bar EOS expect(Utils).to receive(:popen_read).and_return(with_bogus_error) expect { subject.exec "false" } .to raise_error(ErrorDuringExecution) .and output(a_string_matching(/foo/).and(matching(/bar/).and(not_matching(/Python/)))).to_stdout end end end