fix: harden runtime config lease boundary
This commit is contained in:
@@ -638,10 +638,11 @@ def _strict_runtime_manifest(raw: object) -> dict[str, object]:
|
||||
|
||||
def _canonical_runtime_path(path: Path) -> Path:
|
||||
value = str(path)
|
||||
if value == "/tmp" or value.startswith("/tmp/"):
|
||||
return Path("/private" + value)
|
||||
if value == "/var" or value.startswith("/var/"):
|
||||
return Path("/private" + value)
|
||||
if sys.platform == "darwin":
|
||||
if value == "/tmp" or value.startswith("/tmp/"):
|
||||
return Path("/private" + value)
|
||||
if value == "/var" or value.startswith("/var/"):
|
||||
return Path("/private" + value)
|
||||
return path
|
||||
|
||||
|
||||
|
||||
Reference in New Issue
Block a user