liuyu/openclaw
1
0
Fork 0
mirror of https://github.com/openclaw/openclaw.git synced 2026-06-06 05:51:15 +08:00
Code Issues Packages Projects Releases Wiki Activity

test: scope sandbox audit home env

Browse Source
This commit is contained in:
Shakker
2026-06-05 00:17:50 +01:00
parent ec048ae693
commit a18c60e141
1 changed files with 3 additions and 17 deletions
Download Patch File Download Diff File Expand all files Collapse all files

20
src/security/audit-sandbox-docker-config.test.ts
View File

@@ -3,6 +3,7 @@ import os from "node:os";
import path from "node:path";
import { afterEach, describe, expect, it, vi } from "vitest";
import type { OpenClawConfig } from "../config/config.js";
import { withEnvAsync } from "../test-utils/env.js";
import {
collectSandboxDangerousConfigFindings,
collectSandboxDockerNoopFindings,
@@ -44,12 +45,8 @@ describe("security audit sandbox docker config", () => {
it("evaluates sandbox docker config findings", async () => {
const isolatedHome = path.join(os.tmpdir(), "openclaw-security-audit-home");
const previousHome = process.env.HOME;
const previousUserProfile = process.env.USERPROFILE;
process.env.HOME = isolatedHome;
process.env.USERPROFILE = isolatedHome;
vi.spyOn(os, "homedir").mockReturnValue(isolatedHome);
try {
await withEnvAsync({ HOME: isolatedHome, USERPROFILE: isolatedHome }, async () => {
const cases = [
{
name: "mode off with docker config only",
@@ -191,17 +188,6 @@ describe("security audit sandbox docker config", () => {
});
}),
);
} finally {
if (previousHome === undefined) {
delete process.env.HOME;
} else {
process.env.HOME = previousHome;
}
if (previousUserProfile === undefined) {
delete process.env.USERPROFILE;
} else {
process.env.USERPROFILE = previousUserProfile;
}
}
});
});
});