1*49cdfc7eSAndroid Build Coastguard Worker // SPDX-License-Identifier: GPL-2.0-only
2*49cdfc7eSAndroid Build Coastguard Worker /*
3*49cdfc7eSAndroid Build Coastguard Worker * Copyright (c) 2014 Red Hat, Inc.
4*49cdfc7eSAndroid Build Coastguard Worker * Copyright (C) 2021 SUSE LLC Andrea Cervesato <[email protected]>
5*49cdfc7eSAndroid Build Coastguard Worker */
6*49cdfc7eSAndroid Build Coastguard Worker
7*49cdfc7eSAndroid Build Coastguard Worker /*\
8*49cdfc7eSAndroid Build Coastguard Worker * [Description]
9*49cdfc7eSAndroid Build Coastguard Worker *
10*49cdfc7eSAndroid Build Coastguard Worker * Tests a private mount: private mount does not forward or receive
11*49cdfc7eSAndroid Build Coastguard Worker * propagation.
12*49cdfc7eSAndroid Build Coastguard Worker *
13*49cdfc7eSAndroid Build Coastguard Worker * [Algorithm]
14*49cdfc7eSAndroid Build Coastguard Worker *
15*49cdfc7eSAndroid Build Coastguard Worker * - Creates directories DIR_A, DIR_B and files DIR_A/"A", DIR_B/"B"
16*49cdfc7eSAndroid Build Coastguard Worker * - Unshares mount namespace and makes it private (so mounts/umounts have no
17*49cdfc7eSAndroid Build Coastguard Worker * effect on a real system)
18*49cdfc7eSAndroid Build Coastguard Worker * - Bind mounts directory DIR_A to DIR_A
19*49cdfc7eSAndroid Build Coastguard Worker * - Makes directory DIR_A private
20*49cdfc7eSAndroid Build Coastguard Worker * - Clones a new child process with CLONE_NEWNS flag
21*49cdfc7eSAndroid Build Coastguard Worker * - There are two test cases (where X is parent namespace and Y child
22*49cdfc7eSAndroid Build Coastguard Worker * namespace):
23*49cdfc7eSAndroid Build Coastguard Worker * 1. First test case
24*49cdfc7eSAndroid Build Coastguard Worker * .. X: bind mounts DIR_B to DIR_A
25*49cdfc7eSAndroid Build Coastguard Worker * .. Y: must see DIR_A/"A" and must not see DIR_A/"B"
26*49cdfc7eSAndroid Build Coastguard Worker * .. X: umounts DIR_A
27*49cdfc7eSAndroid Build Coastguard Worker * 2. Second test case
28*49cdfc7eSAndroid Build Coastguard Worker * .. Y: bind mounts DIR_B to DIR_A
29*49cdfc7eSAndroid Build Coastguard Worker * .. X: must see DIR_A/"A" and must not see DIR_A/"B"
30*49cdfc7eSAndroid Build Coastguard Worker * .. Y: umounts DIRA
31*49cdfc7eSAndroid Build Coastguard Worker */
32*49cdfc7eSAndroid Build Coastguard Worker
33*49cdfc7eSAndroid Build Coastguard Worker #include <sys/wait.h>
34*49cdfc7eSAndroid Build Coastguard Worker #include <sys/mount.h>
35*49cdfc7eSAndroid Build Coastguard Worker #include "mountns.h"
36*49cdfc7eSAndroid Build Coastguard Worker #include "tst_test.h"
37*49cdfc7eSAndroid Build Coastguard Worker #include "lapi/sched.h"
38*49cdfc7eSAndroid Build Coastguard Worker
child_func(void)39*49cdfc7eSAndroid Build Coastguard Worker static void child_func(void)
40*49cdfc7eSAndroid Build Coastguard Worker {
41*49cdfc7eSAndroid Build Coastguard Worker TST_CHECKPOINT_WAIT(0);
42*49cdfc7eSAndroid Build Coastguard Worker
43*49cdfc7eSAndroid Build Coastguard Worker if ((access(DIRA "/A", F_OK) != 0) || (access(DIRA "/B", F_OK) == 0))
44*49cdfc7eSAndroid Build Coastguard Worker tst_res(TFAIL, "private mount in parent failed");
45*49cdfc7eSAndroid Build Coastguard Worker else
46*49cdfc7eSAndroid Build Coastguard Worker tst_res(TPASS, "private mount in parent passed");
47*49cdfc7eSAndroid Build Coastguard Worker
48*49cdfc7eSAndroid Build Coastguard Worker TST_CHECKPOINT_WAKE_AND_WAIT(0);
49*49cdfc7eSAndroid Build Coastguard Worker
50*49cdfc7eSAndroid Build Coastguard Worker SAFE_MOUNT(DIRB, DIRA, "none", MS_BIND, NULL);
51*49cdfc7eSAndroid Build Coastguard Worker
52*49cdfc7eSAndroid Build Coastguard Worker TST_CHECKPOINT_WAKE_AND_WAIT(0);
53*49cdfc7eSAndroid Build Coastguard Worker
54*49cdfc7eSAndroid Build Coastguard Worker SAFE_UMOUNT(DIRA);
55*49cdfc7eSAndroid Build Coastguard Worker }
56*49cdfc7eSAndroid Build Coastguard Worker
run(void)57*49cdfc7eSAndroid Build Coastguard Worker static void run(void)
58*49cdfc7eSAndroid Build Coastguard Worker {
59*49cdfc7eSAndroid Build Coastguard Worker const struct tst_clone_args args = {
60*49cdfc7eSAndroid Build Coastguard Worker .flags = CLONE_NEWNS,
61*49cdfc7eSAndroid Build Coastguard Worker .exit_signal = SIGCHLD,
62*49cdfc7eSAndroid Build Coastguard Worker };
63*49cdfc7eSAndroid Build Coastguard Worker
64*49cdfc7eSAndroid Build Coastguard Worker SAFE_UNSHARE(CLONE_NEWNS);
65*49cdfc7eSAndroid Build Coastguard Worker
66*49cdfc7eSAndroid Build Coastguard Worker /* makes sure parent mounts/umounts have no effect on a real system */
67*49cdfc7eSAndroid Build Coastguard Worker SAFE_MOUNT("none", "/", "none", MS_REC | MS_PRIVATE, NULL);
68*49cdfc7eSAndroid Build Coastguard Worker
69*49cdfc7eSAndroid Build Coastguard Worker SAFE_MOUNT(DIRA, DIRA, "none", MS_BIND, NULL);
70*49cdfc7eSAndroid Build Coastguard Worker
71*49cdfc7eSAndroid Build Coastguard Worker SAFE_MOUNT("none", DIRA, "none", MS_PRIVATE, NULL);
72*49cdfc7eSAndroid Build Coastguard Worker
73*49cdfc7eSAndroid Build Coastguard Worker if (!SAFE_CLONE(&args)) {
74*49cdfc7eSAndroid Build Coastguard Worker child_func();
75*49cdfc7eSAndroid Build Coastguard Worker return;
76*49cdfc7eSAndroid Build Coastguard Worker }
77*49cdfc7eSAndroid Build Coastguard Worker
78*49cdfc7eSAndroid Build Coastguard Worker SAFE_MOUNT(DIRB, DIRA, "none", MS_BIND, NULL);
79*49cdfc7eSAndroid Build Coastguard Worker
80*49cdfc7eSAndroid Build Coastguard Worker TST_CHECKPOINT_WAKE_AND_WAIT(0);
81*49cdfc7eSAndroid Build Coastguard Worker
82*49cdfc7eSAndroid Build Coastguard Worker SAFE_UMOUNT(DIRA);
83*49cdfc7eSAndroid Build Coastguard Worker
84*49cdfc7eSAndroid Build Coastguard Worker TST_CHECKPOINT_WAKE_AND_WAIT(0);
85*49cdfc7eSAndroid Build Coastguard Worker
86*49cdfc7eSAndroid Build Coastguard Worker if ((access(DIRA "/A", F_OK) != 0) || (access(DIRA "/B", F_OK) == 0))
87*49cdfc7eSAndroid Build Coastguard Worker tst_res(TFAIL, "private mount in child failed");
88*49cdfc7eSAndroid Build Coastguard Worker else
89*49cdfc7eSAndroid Build Coastguard Worker tst_res(TPASS, "private mount in child passed");
90*49cdfc7eSAndroid Build Coastguard Worker
91*49cdfc7eSAndroid Build Coastguard Worker TST_CHECKPOINT_WAKE(0);
92*49cdfc7eSAndroid Build Coastguard Worker
93*49cdfc7eSAndroid Build Coastguard Worker SAFE_WAIT(NULL);
94*49cdfc7eSAndroid Build Coastguard Worker
95*49cdfc7eSAndroid Build Coastguard Worker SAFE_UMOUNT(DIRA);
96*49cdfc7eSAndroid Build Coastguard Worker }
97*49cdfc7eSAndroid Build Coastguard Worker
setup(void)98*49cdfc7eSAndroid Build Coastguard Worker static void setup(void)
99*49cdfc7eSAndroid Build Coastguard Worker {
100*49cdfc7eSAndroid Build Coastguard Worker create_folders();
101*49cdfc7eSAndroid Build Coastguard Worker }
102*49cdfc7eSAndroid Build Coastguard Worker
cleanup(void)103*49cdfc7eSAndroid Build Coastguard Worker static void cleanup(void)
104*49cdfc7eSAndroid Build Coastguard Worker {
105*49cdfc7eSAndroid Build Coastguard Worker umount_folders();
106*49cdfc7eSAndroid Build Coastguard Worker }
107*49cdfc7eSAndroid Build Coastguard Worker
108*49cdfc7eSAndroid Build Coastguard Worker static struct tst_test test = {
109*49cdfc7eSAndroid Build Coastguard Worker .setup = setup,
110*49cdfc7eSAndroid Build Coastguard Worker .cleanup = cleanup,
111*49cdfc7eSAndroid Build Coastguard Worker .test_all = run,
112*49cdfc7eSAndroid Build Coastguard Worker .needs_root = 1,
113*49cdfc7eSAndroid Build Coastguard Worker .forks_child = 1,
114*49cdfc7eSAndroid Build Coastguard Worker .needs_checkpoints = 1,
115*49cdfc7eSAndroid Build Coastguard Worker .needs_kconfigs = (const char *[]) {
116*49cdfc7eSAndroid Build Coastguard Worker "CONFIG_USER_NS",
117*49cdfc7eSAndroid Build Coastguard Worker NULL,
118*49cdfc7eSAndroid Build Coastguard Worker },
119*49cdfc7eSAndroid Build Coastguard Worker };
120