fix: use sudo to chmod agent (#29)

bullfrogsec · Jun 27, 2024 · e6a8c1a · e6a8c1a
1 parent 59890e3
commit e6a8c1a
Show file tree

Hide file tree

Showing 4 changed files with 19 additions and 4 deletions.
diff --git a/.github/workflows/bullfrog.yml b/.github/workflows/bullfrog.yml
@@ -64,6 +64,21 @@ jobs:
         run: |
           git diff --exit-code --quiet action/dist || (echo "action/dist has changed, please commit the changes" && exit 1)
 
+  test-load-agent:
+    needs: build
+    runs-on: ubuntu-22.04
+    timeout-minutes: 2
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
+      - uses: actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e
+        with:
+          name: build-artifacts
+
+      - name: Enable egress filtering
+        uses: ./
+
   test-audit:
     needs: build
     runs-on: ubuntu-22.04

diff --git a/action/dist/main.js b/action/dist/main.js
@@ -19130,7 +19130,7 @@ async function startAgent({
   const agentOut = (await import_promises3.default.open(agentLogFilepath, "a")).fd;
   console.log(`Starting agent from ${agentPath}`);
   console.time("Agent startup time");
-  await exec(`chmod +x ${agentPath}`);
+  await exec(`sudo chmod +x ${agentPath}`);
   (0, import_node_child_process.spawn)(
     "sudo",
     [agentPath, "--dns-policy", dnsPolicy, "--egress-policy", egressPolicy],

diff --git a/action/dist/main.js.map b/action/dist/main.js.map
diff --git a/action/src/main.ts b/action/src/main.ts
@@ -148,7 +148,7 @@ async function startAgent({
   console.time("Agent startup time");
 
   // make agent executable
-  await exec(`chmod +x ${agentPath}`);
+  await exec(`sudo chmod +x ${agentPath}`);
 
   spawn(
     "sudo",