@ai-ecoverse/slicc-kernel 1.103.1 → 1.103.3

package/README.md

@@ -54,7 +54,7 @@ Runs `argv[0]` with `argv` as its arguments and resolves when it exits. `stdout`
 
 | option | |
 | --- | --- |
-| `cwd` | working directory, default `/`; created in OPFS if missing |
+| `cwd` | working directory, default `/`; created in OPFS if missing. Under `users: 'enforce'`, a `cwd` the user can't search rejects with `code: 'EACCES'` (`cannot change to <cwd>: Permission denied`) and starts nothing, as a `chdir` there fails on Linux; `openTerminal` does the same. A program's spawn with its own `cwd` (`ctx.spawn`, `ctx.sync.run`, a WASIX `posix_spawn` chdir action) is checked the same way and fails with `EACCES`, while a child that inherits its parent's cwd keeps it unchecked, as on Linux |
 | `user` | the user to run as, by name or uid (see [Users](#users)); default `root`. An unknown user rejects with `code: 'ENOENT'` |
 | `tag` | a string the kernel keeps with the process and every process it starts (fork, spawn and exec), and hands to `approve` with a [`sudo`](#sudo) request, so the embedder knows which agent asks; nothing a program does changes it. Anything but a string rejects with a `TypeError` |
 | `env` | extra environment, over the user's defaults: `HOME`, `USER`, `LOGNAME`, `PNPM_HOME` and `PATH=$PNPM_HOME/bin:/usr/local/bin:/usr/bin:/bin` (see [Users](#users)), and `PWD=<cwd>` |

package/dist/kernel-worker.js

@@ -12197,7 +12197,7 @@ var PATH_OPS = new Set(SYNC_FS_OPS);
 var EARLY_WHOLE_FILE = 64 * 1024;
 
 // src/version.ts
-var KERNEL_VERSION = true ? "1.103.1" : "0.0.0-dev";
+var KERNEL_VERSION = true ? "1.103.3" : "0.0.0-dev";
 var OS_RELEASE = "6.0.0-slicc";
 function procVersion() {
   return `Linux version ${OS_RELEASE} (slicc-kernel ${KERNEL_VERSION}) #1 SMP PREEMPT_DYNAMIC
@@ -14617,6 +14617,7 @@ async function runChild(req, deps) {
         ...req.argv0 !== void 0 ? { argv0: req.argv0 } : {},
         env: req.env,
         cwd: req.cwd,
+        ...req.chdir ? { chdir: req.chdir } : {},
         ...req.pgid !== void 0 ? { pgid: req.pgid } : {},
         ...req.session ? { session: req.session } : {}
       },
@@ -16099,13 +16100,23 @@ var WasmProcess = class {
     return "deliver";
   }
   async spawn(req) {
-    const { file, argv, argv0, env, cwd, stdio, inherit: inherit2, exec, pgid, session, deathSignal } = req;
+    const { file, argv, argv0, env, cwd, chdir, stdio, inherit: inherit2, exec, pgid, session, deathSignal } = req;
     if (deathSignal !== void 0 && (exec || !isSignal(deathSignal))) {
       throw new KernelError("EINVAL");
     }
     const group = { ...pgid !== void 0 ? { pgid } : {}, ...session ? { session } : {} };
     const named = argv0 !== void 0 ? { argv0 } : {};
-    const spawned = { file, argv, ...named, env, cwd, ...group, ...exec ? { exec } : {} };
+    const moved2 = chdir ? { chdir } : {};
+    const spawned = {
+      file,
+      argv,
+      ...named,
+      env,
+      cwd,
+      ...moved2,
+      ...group,
+      ...exec ? { exec } : {}
+    };
     const pid = await this.children.spawn(spawned, stdio, inherit2);
     if (deathSignal !== void 0) this.onDeath(pgid === 0 || session ? -pid : pid, deathSignal);
     if (!exec) return pid;
@@ -21521,6 +21532,13 @@ var Launcher = class {
     await fds.closeAll();
     throw new SpawnError(await this.unrunnable(file, req.cwd, scope));
   }
+  async enterable(g, cwd) {
+    if (!g) return;
+    const denied2 = new Error(`cannot change to ${cwd}: Permission denied`);
+    await need(g, "chdir", cwd, X_OK, { directory: true }).catch((err) => {
+      throw err.code === "EACCES" ? Object.assign(denied2, { code: "EACCES" }) : err;
+    });
+  }
   execGuard(cred, pid, tag) {
     const { dac } = this;
     return dac && { fs: this.fs, cred, pid, dac, tag, links: this.links.get(pid) };
@@ -22137,6 +22155,13 @@ var Launcher = class {
         throw new SpawnError(group);
       }
       const cred = grant ? grant.cred : this.credOf(ppid);
+      if (req.chdir && !grant) {
+        const g = this.execGuard(cred, ppid);
+        await this.enterable(g, req.cwd).catch(async (err) => {
+          await fds.closeAll();
+          throw err.code === "EACCES" ? new SpawnError("EACCES") : err;
+        });
+      }
       const scope = grant ? "" : await this.scopeOf(cred.euid);
       const file = booked === void 0 ? req.file : await this.ticketFile(req, fds);
       const planned = await this.checkedPlan({ ...req, file }, { ppid, cred, scope }, fds);
@@ -22733,6 +22758,7 @@ var Launcher = class {
     const scope = account.uid === 0 ? "" : pnpmHomeOf(account, this.pnpmHome);
     const start2 = dir ?? "/";
     const cwd = await physicalPathAsync(this.base, start2.startsWith("/") ? start2 : `/${start2}`);
+    await this.enterable(this.execGuard(credOf(account), 0, tag), cwd);
     const file = await this.execFile(argv[0] ?? "", cwd, this.execGuard(credOf(account), 0, tag));
     if (!await this.base.exists(cwd)) await this.stackFor(tag).fs.mkdir(cwd, { recursive: true });
     const planned = await this.plan(file, argv, cwd, scope);