sandbox postinstall

Closes Homebrew/homebrew#38479.

Signed-off-by: Xu Cheng <xucheng@me.com>

1 files changed, 21 insertions, 0 deletions

diff --git a/Library/Homebrew/postinstall.rb b/Library/Homebrew/postinstall.rb
new file mode 100644
index 000000000..14e578128
--- /dev/null
+++ b/Library/Homebrew/postinstall.rb
@@ -0,0 +1,21 @@
+old_trap = trap("INT") { exit! 130 }
+
+require "global"
+require "debrew"
+require "fcntl"
+require "socket"
+
+begin
+  error_pipe = UNIXSocket.open(ENV["HOMEBREW_ERROR_PIPE"], &:recv_io)
+  error_pipe.fcntl(Fcntl::F_SETFD, Fcntl::FD_CLOEXEC)
+
+  trap("INT", old_trap)
+
+  formula = ARGV.formulae.first
+  formula.extend(Debrew::Formula) if ARGV.debug?
+  formula.run_post_install
+rescue Exception => e
+  Marshal.dump(e, error_pipe)
+  error_pipe.close
+  exit! 1
+end