shell: Add debug logging to find binaries that aren't being restricted

[lhc/web/wiklou.git] / includes / shell / FirejailCommand.php

diff --git a/includes/shell/FirejailCommand.php b/includes/shell/FirejailCommand.php
index 0338b53..ec9eb09 100644 (file)
--- a/includes/shell/FirejailCommand.php
+++ b/includes/shell/FirejailCommand.php
@@ -62,6 +62,11 @@ class FirejailCommand extends Command {
        protected function buildFinalCommand( $command ) {
                // If there are no restrictions, don't use firejail
                if ( $this->restrictions === 0 ) {
+                       $splitCommand = explode( ' ', $command, 2 );
+                       $this->logger->debug(
+                               "firejail: Command {$splitCommand[0]} {params} has no restrictions",
+                               [ 'params' => isset( $splitCommand[1] ) ? $splitCommand[1] : '' ]
+                       );
                        return parent::buildFinalCommand( $command );
                }