Fix nsjail environment variables that need mapping to destination paths (#6084)gh-10443

Maps env vars just like we map everything else, to catch all cases where
"app dir" is an input to jailed processes, the jailed process only sees
the "right" path (`/app/something`).

Tested locally and fixes the dot net "read only `/nosym`" thing while
keeping the `/nosym` behaviour etc

1 files changed, 20 insertions, 0 deletions

diff --git a/test/exec-tests.ts b/test/exec-tests.ts
index 21821736b..e5053043f 100644
--- a/test/exec-tests.ts
+++ b/test/exec-tests.ts
@@ -329,6 +329,26 @@ describe('Execution tests', () => {
                 './output.s',
             ]);
         });
+        it('Should remap env vars', () => {
+            const {args, options} = exec.getSandboxNsjailOptions('/tmp/hellow/output.s', [], {
+                customCwd: '/tmp/hellow',
+                env: {SOME_DOTNET_THING: '/tmp/hellow/dotnet'},
+            });
+
+            options.should.deep.equals({});
+            args.should.deep.equals([
+                '--config',
+                'etc/nsjail/sandbox.cfg',
+                '--cwd',
+                '/app',
+                '--bindmount',
+                '/tmp/hellow:/app',
+                '--env=SOME_DOTNET_THING=/app/dotnet',
+                '--env=HOME=/app',
+                '--',
+                './output.s',
+            ]);
+        });
 
         it('Subdirectory', () => {
             const {args, options} = exec.getSandboxNsjailOptions('/tmp/hellow/subdir/output.s', [], {