up

bench/reachability-benchmark/cases/c/guarded-system/src/main.c

@@ -0,0 +1,36 @@
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+
+static int run_guarded(const char *user_cmd)
+{
+    const char *allow = getenv("ALLOW_CMD");
+    if (allow == NULL || strcmp(allow, "1") != 0)
+    {
+        puts("command blocked (ALLOW_CMD not set)");
+        return 0;
+    }
+
+    char cmd[256];
+    snprintf(cmd, sizeof(cmd), "echo START && %s && echo END", user_cmd);
+    return system(cmd);
+}
+
+int main(int argc, char **argv)
+{
+    if (argc < 2)
+    {
+        fprintf(stderr, "usage: %s <command>\n", argv[0]);
+        return 1;
+    }
+
+    int rc = run_guarded(argv[1]);
+    if (rc != 0)
+    {
+        fprintf(stderr, "command failed\n");
+        return 2;
+    }
+
+    puts("done");
+    return 0;
+}