Fix cargo lockfile generation sandbox exceptions (#1289)

Closes #1288.
phylum-dev · Nov 15, 2023 · 2a260a0 · 2a260a0
1 parent 5fbf7f6
commit 2a260a0
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/cli/src/commands/parse.rs b/cli/src/commands/parse.rs
@@ -193,8 +193,8 @@ fn lockfile_generation_sandbox(canonical_manifest_path: &Path) -> Result<Birdcag
     // Add paths required by specific ecosystems.
     let home = dirs::home_dir()?;
     // Cargo.
-    permissions::add_exception(&mut birdcage, Exception::Read(home.join(".rustup")))?;
-    permissions::add_exception(&mut birdcage, Exception::Read(home.join(".cargo")))?;
+    permissions::add_exception(&mut birdcage, Exception::ExecuteAndRead(home.join(".rustup")))?;
+    permissions::add_exception(&mut birdcage, Exception::ExecuteAndRead(home.join(".cargo")))?;
     permissions::add_exception(&mut birdcage, Exception::Read("/etc/passwd".into()))?;
     // Bundle.
     permissions::add_exception(&mut birdcage, Exception::Read("/dev/urandom".into()))?;