@ai-ecoverse/slicc-kernel 1.103.1 → 1.103.2

package/dist/node.js

@@ -11190,7 +11190,7 @@ var PATH_OPS = new Set(SYNC_FS_OPS);
 var EARLY_WHOLE_FILE = 64 * 1024;
 
 // src/version.ts
-var KERNEL_VERSION = true ? "1.103.1" : "0.0.0-dev";
+var KERNEL_VERSION = true ? "1.103.2" : "0.0.0-dev";
 var OS_RELEASE = "6.0.0-slicc";
 function procVersion() {
   return `Linux version ${OS_RELEASE} (slicc-kernel ${KERNEL_VERSION}) #1 SMP PREEMPT_DYNAMIC
@@ -14274,6 +14274,7 @@ async function runChild(req, deps) {
         ...req.argv0 !== void 0 ? { argv0: req.argv0 } : {},
         env: req.env,
         cwd: req.cwd,
+        ...req.chdir ? { chdir: req.chdir } : {},
         ...req.pgid !== void 0 ? { pgid: req.pgid } : {},
         ...req.session ? { session: req.session } : {}
       },
@@ -15756,13 +15757,23 @@ var WasmProcess = class {
     return "deliver";
   }
   async spawn(req) {
-    const { file, argv, argv0, env, cwd, stdio, inherit: inherit2, exec, pgid, session, deathSignal } = req;
+    const { file, argv, argv0, env, cwd, chdir, stdio, inherit: inherit2, exec, pgid, session, deathSignal } = req;
     if (deathSignal !== void 0 && (exec || !isSignal(deathSignal))) {
       throw new KernelError("EINVAL");
     }
     const group = { ...pgid !== void 0 ? { pgid } : {}, ...session ? { session } : {} };
     const named = argv0 !== void 0 ? { argv0 } : {};
-    const spawned = { file, argv, ...named, env, cwd, ...group, ...exec ? { exec } : {} };
+    const moved2 = chdir ? { chdir } : {};
+    const spawned = {
+      file,
+      argv,
+      ...named,
+      env,
+      cwd,
+      ...moved2,
+      ...group,
+      ...exec ? { exec } : {}
+    };
     const pid = await this.children.spawn(spawned, stdio, inherit2);
     if (deathSignal !== void 0) this.onDeath(pgid === 0 || session ? -pid : pid, deathSignal);
     if (!exec) return pid;
@@ -21281,6 +21292,13 @@ var Launcher = class {
     await fds.closeAll();
     throw new SpawnError(await this.unrunnable(file, req.cwd, scope));
   }
+  async enterable(g, cwd) {
+    if (!g) return;
+    const denied2 = new Error(`cannot change to ${cwd}: Permission denied`);
+    await need(g, "chdir", cwd, X_OK, { directory: true }).catch((err) => {
+      throw err.code === "EACCES" ? Object.assign(denied2, { code: "EACCES" }) : err;
+    });
+  }
   execGuard(cred, pid, tag) {
     const { dac } = this;
     return dac && { fs: this.fs, cred, pid, dac, tag, links: this.links.get(pid) };
@@ -21897,6 +21915,13 @@ var Launcher = class {
         throw new SpawnError(group);
       }
       const cred = grant ? grant.cred : this.credOf(ppid);
+      if (req.chdir && !grant) {
+        const g = this.execGuard(cred, ppid);
+        await this.enterable(g, req.cwd).catch(async (err) => {
+          await fds.closeAll();
+          throw err.code === "EACCES" ? new SpawnError("EACCES") : err;
+        });
+      }
       const scope = grant ? "" : await this.scopeOf(cred.euid);
       const file = booked === void 0 ? req.file : await this.ticketFile(req, fds);
       const planned = await this.checkedPlan({ ...req, file }, { ppid, cred, scope }, fds);
@@ -22493,6 +22518,7 @@ var Launcher = class {
     const scope = account.uid === 0 ? "" : pnpmHomeOf(account, this.pnpmHome);
     const start2 = dir ?? "/";
     const cwd = await physicalPathAsync(this.base, start2.startsWith("/") ? start2 : `/${start2}`);
+    await this.enterable(this.execGuard(credOf(account), 0, tag), cwd);
     const file = await this.execFile(argv[0] ?? "", cwd, this.execGuard(credOf(account), 0, tag));
     if (!await this.base.exists(cwd)) await this.stackFor(tag).fs.mkdir(cwd, { recursive: true });
     const planned = await this.plan(file, argv, cwd, scope);