Pass query mode to sandbox

src/hosted_db/sandbox.rs

@@ -28,6 +28,7 @@ SOFTWARE.
 
 use crate::error::AybError;
 use crate::hosted_db::paths::{pathbuf_to_file_name, pathbuf_to_parent};
+use crate::hosted_db::QueryMode;
 use serde::{Deserialize, Serialize};
 use std::env::current_exe;
 use std::fs::canonicalize;
@@ -51,6 +52,7 @@ pub async fn run_in_sandbox(
     nsjail: &Path,
     db_path: &PathBuf,
     query: &str,
+    query_mode: QueryMode,
 ) -> Result<RunResult, AybError> {
     let mut cmd = tokio::process::Command::new(nsjail);
 
@@ -97,6 +99,7 @@ pub async fn run_in_sandbox(
         .arg("--")
         .arg("/tmp/ayb_isolated_runner")
         .arg(tmp_db_path)
+        .arg((query_mode as i16).to_string())
         .arg(query)
         .stdout(Stdio::piped())
         .stderr(Stdio::piped())

src/hosted_db/sqlite.rs

@@ -87,7 +87,8 @@ pub async fn potentially_isolated_sqlite_query(
     query_mode: QueryMode,
 ) -> Result<QueryResult, AybError> {
     if let Some(isolation) = isolation {
-        let result = run_in_sandbox(Path::new(&isolation.nsjail_path), path, query).await?;
+        let result =
+            run_in_sandbox(Path::new(&isolation.nsjail_path), path, query, query_mode).await?;
 
         if !result.stderr.is_empty() {
             let error: AybError = serde_json::from_str(&result.stderr)?;