[New Check]: Warn about colon-separated argument in sandbox functions - Githubissues

pkgcore / pkgcheck

pkgcore-based QA utility for ebuild repos

https://pkgcore.github.io/pkgcheck

BSD 3-Clause "New" or "Revised" License

34 stars 29 forks source link

[New Check]: Warn about colon-separated argument in sandbox functions #644

Closed ulm closed 5 months ago

ulm commented 6 months ago

Is there an existing such new check request for this?

[X] I have searched the existing issues

Explain

According to PMS and the Devmanual, only a single item is allowed as argument for addread, addwrite, adddeny and addpredict: https://projects.gentoo.org/pms/8/pms.html#x1-12300012.3.3 https://devmanual.gentoo.org/function-reference/sandbox-functions/

Especially, multiple path items should not be passed as a colon-separated list.

Corresponding Portage PR: gentoo/portage#1213

Examples

https://github.com/gentoo/gentoo/blob/fb8ecab9407d58520dd4c4658879f00e52e26d02/dev-db/sqlite/sqlite-3.44.2-r1.ebuild#L367 https://github.com/gentoo/gentoo/blob/fb8ecab9407d58520dd4c4658879f00e52e26d02/sys-boot/grub/grub-2.12.ebuild#L289

Output message

No response

Documentation

No response

Result level

None