OLD | NEW |
(Empty) | |
| 1 #!/usr/bin/python |
| 2 # Copyright (c) 2012 The Chromium Authors. All rights reserved. |
| 3 # Use of this source code is governed by a BSD-style license that can be |
| 4 # found in the LICENSE file. |
| 5 |
| 6 import os |
| 7 import sys |
| 8 |
| 9 def Main(argv): |
| 10 """This is like 'env -i', but it uses a whitelist of env variables to allow |
| 11 through to the command being run. It attempts to strip off Xcode-added |
| 12 values from PATH. |
| 13 """ |
| 14 # Note: An attempt was made to do something like: env -i bash -lc '[command]' |
| 15 # but that fails to set the things set by login (USER, etc.), so instead |
| 16 # the only approach that seems to work is to have a whitelist. |
| 17 env_key_whitelist = ( |
| 18 'HOME', |
| 19 'LOGNAME', |
| 20 # 'PATH' added below (but filtered). |
| 21 'PWD', |
| 22 'SHELL', |
| 23 'TEMP', |
| 24 'TMPDIR', |
| 25 'USER' |
| 26 ) |
| 27 |
| 28 # Need something to run. |
| 29 # TODO(lliabraa): Make this output a usage string and exit (here and below). |
| 30 assert(len(argv) > 0) |
| 31 |
| 32 add_to_path = []; |
| 33 first_entry = argv[0]; |
| 34 if first_entry.startswith('ADD_TO_PATH='): |
| 35 argv = argv[1:]; |
| 36 add_to_path = first_entry.replace('ADD_TO_PATH=', '', 1).split(':') |
| 37 |
| 38 # Still need something to run. |
| 39 assert(len(argv) > 0) |
| 40 |
| 41 clean_env = {} |
| 42 |
| 43 # Pull over the whitelisted keys. |
| 44 for key in env_key_whitelist: |
| 45 val = os.environ.get(key, None) |
| 46 if not val is None: |
| 47 clean_env[key] = val |
| 48 |
| 49 # Collect the developer dir as set via Xcode, defaulting it. |
| 50 dev_prefix = os.environ.get('DEVELOPER_DIR', '/Developer/') |
| 51 if dev_prefix[-1:] != '/': |
| 52 dev_prefix += '/' |
| 53 |
| 54 # Now pull in PATH, but remove anything Xcode might have added. |
| 55 initial_path = os.environ.get('PATH', '') |
| 56 filtered_chunks = \ |
| 57 [x for x in initial_path.split(':') if not x.startswith(dev_prefix)] |
| 58 if filtered_chunks: |
| 59 clean_env['PATH'] = ':'.join(add_to_path + filtered_chunks) |
| 60 |
| 61 # Add any KEY=VALUE args before the command to the cleaned environment. |
| 62 args = argv[:] |
| 63 while '=' in args[0]: |
| 64 (key, val) = args[0].split('=', 1) |
| 65 clean_env[key] = val |
| 66 args = args[1:] |
| 67 |
| 68 # Still need something to run. |
| 69 assert(len(args) > 0) |
| 70 |
| 71 # Off it goes... |
| 72 os.execvpe(args[0], args, clean_env) |
| 73 # Should never get here, so return a distinctive, non-zero status code. |
| 74 return 66 |
| 75 |
| 76 if __name__ == '__main__': |
| 77 sys.exit(Main(sys.argv[1:])) |
OLD | NEW |