tests: add test for unsafe name file copy

QubesOS/qubes-issues#8332

(cherry picked from commit 854320a)

qubes/tests/integ/vm_qrexec_gui.py

@@ -784,6 +784,49 @@ def test_130_qrexec_filemove_disk_full(self):
         self.loop.run_until_complete(self.testvm1.run_for_stdio(
             'test -f /tmp/testfile'))
 
+    def test_140_qrexec_filecopy_unsafe_name(self):
+        self.loop.run_until_complete(asyncio.gather(
+            self.testvm1.start(),
+            self.testvm2.start()))
+
+        # emoji are "unsafe"
+        name = "test-\U0001f605"
+        self.loop.run_until_complete(self.testvm1.run_for_stdio(
+            f"cp /etc/passwd /tmp/{name}"))
+        with self.qrexec_policy('qubes.Filecopy+', self.testvm1, self.testvm2), \
+                self.qrexec_policy('qubes.Filecopy+allow-unsafe-characters', self.testvm1, self.testvm2, allow=False):
+            with self.assertRaises(subprocess.CalledProcessError):
+                self.loop.run_until_complete(
+                    self.testvm1.run_for_stdio(
+                        f"qvm-copy-to-vm {self.testvm2!s} /tmp/{name}"))
+
+        try:
+            self.loop.run_until_complete(self.testvm2.run_for_stdio(
+                f"! test -e /home/user/QubesIncoming/{self.testvm1!s}/{name}"))
+        except subprocess.CalledProcessError:
+            self.fail('file with "unsafe" name was copied')
+
+        # try again with changed policy
+        with self.qrexec_policy('qubes.Filecopy', self.testvm1, self.testvm2):
+            try:
+                self.loop.run_until_complete(
+                    self.testvm1.run_for_stdio(
+                        f"qvm-copy-to-vm {self.testvm2!s} /tmp/{name}"))
+            except subprocess.CalledProcessError as e:
+                self.fail(f"qvm-copy-to-vm failed: {e.stderr}")
+
+        try:
+            self.loop.run_until_complete(self.testvm2.run_for_stdio(
+                f"diff /etc/passwd /home/user/QubesIncoming/{self.testvm1!s}/{name}"))
+        except subprocess.CalledProcessError:
+            self.fail('file differs')
+
+        try:
+            self.loop.run_until_complete(self.testvm1.run_for_stdio(
+                f"test -f /tmp/{name}"))
+        except subprocess.CalledProcessError:
+            self.fail('source file got removed')
+
     def test_200_timezone(self):
         """Test whether timezone setting is properly propagated to the VM"""
         if "whonix" in self.template: