This file is indexed.

/usr/share/lua/5.1/saci/sandbox.lua is in sputnik 12.06.27-2.

This file is owned by root:root, with mode 0o644.

The actual contents of the file can be viewed below.

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
module(...,package.seeall)

local Sandbox = {}
local Sandbox_mt = {__metatable = {}, __index = Sandbox}

function new(initial_values)
   local sandbox = setmetatable({}, Sandbox_mt)

   -- Create a table that allows us to define private functions
   -- while still pulling values from the initial_values table
   local private = setmetatable({}, {__index = initial_values})
   -- Now link the tables together to create the values table
   sandbox.values = setmetatable({}, {__index = private})

   -- Define a function that allow us to reset the protected environment
   -- from within a sandbox
   do
      local tbl = sandbox.values
      local pairs = pairs
      function private.reset()
         for k,v in pairs(tbl) do
            tbl[k] = nil
         end
      end
   end

   sandbox.returned_value = nil
   return sandbox
end

function Sandbox:add_values(symbol_table)
   for symbol, value in pairs(symbol_table) do
      self.values[symbol] = value
   end
end
  
function Sandbox:do_lua(lua_code, parseOnly)
   local f, err = loadstring(lua_code)      -- load the code into a function
   if f and not parseOnly then 
      setfenv(f, self.values or {})         -- set a restricted environment
      local ok, result = pcall(f)           -- run it
      if ok then 
         self.returned_value = result 
      else
         err = result
      end
   end
     
   if err then                              -- check if something went wrong
      local error_report = {}
      local reg_exp = "^.+%]%:(%d+)%:"
      error_report.line_num = string.match(err, reg_exp)
      error_report.errors = string.gsub(err, reg_exp, "On line %1:")
      error_report.source = lua_code
      error_report.err = err
           
      if self.logger then
         self.logger:error("sputnik.luaenv: couldn't execute lua")
         self.logger:error("Source code: \n"..error_report.source)
         self.logger:error("environment: \n")
         for k,v in pairs(self.values) do
            self.logger:error(string.format("%s=%q", tostring(k), tostring(v)))
         end
         self.logger:error(err)
      end
      return nil, error_report
   else
      self.values = getfenv(f)         -- save the values
      return self.values               -- return them
   end
end