1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
|
#!/usr/bin/env python
# Copyright (c) 2012 The Chromium Authors. All rights reserved.
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.
import os
import sys
def Main(argv):
"""This is like 'env -i', but it uses a whitelist of env variables to allow
through to the command being run. It attempts to strip off Xcode-added
values from PATH.
"""
# Note: An attempt was made to do something like: env -i bash -lc '[command]'
# but that fails to set the things set by login (USER, etc.), so instead
# the only approach that seems to work is to have a whitelist.
env_key_whitelist = (
'HOME',
'LOGNAME',
# 'PATH' added below (but filtered).
'PWD',
'SHELL',
'TEMP',
'TMPDIR',
'USER'
)
# Need something to run.
# TODO(lliabraa): Make this output a usage string and exit (here and below).
assert(len(argv) > 0)
add_to_path = [];
first_entry = argv[0];
if first_entry.startswith('ADD_TO_PATH='):
argv = argv[1:];
add_to_path = first_entry.replace('ADD_TO_PATH=', '', 1).split(':')
# Still need something to run.
assert(len(argv) > 0)
clean_env = {}
# Pull over the whitelisted keys.
for key in env_key_whitelist:
val = os.environ.get(key, None)
if not val is None:
clean_env[key] = val
# Collect the developer dir as set via Xcode, defaulting it.
dev_prefix = os.environ.get('DEVELOPER_DIR', '/Developer/')
if dev_prefix[-1:] != '/':
dev_prefix += '/'
# Now pull in PATH, but remove anything Xcode might have added.
initial_path = os.environ.get('PATH', '')
filtered_chunks = \
[x for x in initial_path.split(':') if not x.startswith(dev_prefix)]
if filtered_chunks:
clean_env['PATH'] = ':'.join(add_to_path + filtered_chunks)
# Add any KEY=VALUE args before the command to the cleaned environment.
args = argv[:]
while '=' in args[0]:
(key, val) = args[0].split('=', 1)
clean_env[key] = val
args = args[1:]
# Still need something to run.
assert(len(args) > 0)
# Off it goes...
os.execvpe(args[0], args, clean_env)
# Should never get here, so return a distinctive, non-zero status code.
return 66
if __name__ == '__main__':
sys.exit(Main(sys.argv[1:]))
|
