1*49cdfc7eSAndroid Build Coastguard Worker // SPDX-License-Identifier: GPL-2.0-or-later
2*49cdfc7eSAndroid Build Coastguard Worker /*
3*49cdfc7eSAndroid Build Coastguard Worker * Copyright (c) Crackerjack Project., 2007
4*49cdfc7eSAndroid Build Coastguard Worker * Ported from Crackerjack to LTP by Manas Kumar Nayak [email protected]>
5*49cdfc7eSAndroid Build Coastguard Worker */
6*49cdfc7eSAndroid Build Coastguard Worker
7*49cdfc7eSAndroid Build Coastguard Worker /*\
8*49cdfc7eSAndroid Build Coastguard Worker * [Description]
9*49cdfc7eSAndroid Build Coastguard Worker *
10*49cdfc7eSAndroid Build Coastguard Worker * Basic tests for the unshare(2) errors.
11*49cdfc7eSAndroid Build Coastguard Worker *
12*49cdfc7eSAndroid Build Coastguard Worker * - EINVAL on invalid flags
13*49cdfc7eSAndroid Build Coastguard Worker * - EPERM when process is missing required privileges
14*49cdfc7eSAndroid Build Coastguard Worker */
15*49cdfc7eSAndroid Build Coastguard Worker
16*49cdfc7eSAndroid Build Coastguard Worker #define _GNU_SOURCE
17*49cdfc7eSAndroid Build Coastguard Worker
18*49cdfc7eSAndroid Build Coastguard Worker #include <stdio.h>
19*49cdfc7eSAndroid Build Coastguard Worker #include <sys/wait.h>
20*49cdfc7eSAndroid Build Coastguard Worker #include <sys/types.h>
21*49cdfc7eSAndroid Build Coastguard Worker #include <sys/param.h>
22*49cdfc7eSAndroid Build Coastguard Worker #include <sys/syscall.h>
23*49cdfc7eSAndroid Build Coastguard Worker #include <sched.h>
24*49cdfc7eSAndroid Build Coastguard Worker #include <limits.h>
25*49cdfc7eSAndroid Build Coastguard Worker #include <unistd.h>
26*49cdfc7eSAndroid Build Coastguard Worker #include <pwd.h>
27*49cdfc7eSAndroid Build Coastguard Worker
28*49cdfc7eSAndroid Build Coastguard Worker #include "tst_test.h"
29*49cdfc7eSAndroid Build Coastguard Worker #include "config.h"
30*49cdfc7eSAndroid Build Coastguard Worker
31*49cdfc7eSAndroid Build Coastguard Worker #ifdef HAVE_UNSHARE
32*49cdfc7eSAndroid Build Coastguard Worker
33*49cdfc7eSAndroid Build Coastguard Worker static uid_t nobody_uid;
34*49cdfc7eSAndroid Build Coastguard Worker
35*49cdfc7eSAndroid Build Coastguard Worker static struct test_case_t {
36*49cdfc7eSAndroid Build Coastguard Worker int mode;
37*49cdfc7eSAndroid Build Coastguard Worker int expected_error;
38*49cdfc7eSAndroid Build Coastguard Worker const char *desc;
39*49cdfc7eSAndroid Build Coastguard Worker } tc[] = {
40*49cdfc7eSAndroid Build Coastguard Worker {-1, EINVAL, "-1"},
41*49cdfc7eSAndroid Build Coastguard Worker {CLONE_NEWNS, EPERM, "CLONE_NEWNS"}
42*49cdfc7eSAndroid Build Coastguard Worker };
43*49cdfc7eSAndroid Build Coastguard Worker
run(unsigned int i)44*49cdfc7eSAndroid Build Coastguard Worker static void run(unsigned int i)
45*49cdfc7eSAndroid Build Coastguard Worker {
46*49cdfc7eSAndroid Build Coastguard Worker pid_t pid = SAFE_FORK();
47*49cdfc7eSAndroid Build Coastguard Worker if (pid == 0) {
48*49cdfc7eSAndroid Build Coastguard Worker if (tc[i].expected_error == EPERM)
49*49cdfc7eSAndroid Build Coastguard Worker SAFE_SETUID(nobody_uid);
50*49cdfc7eSAndroid Build Coastguard Worker
51*49cdfc7eSAndroid Build Coastguard Worker TST_EXP_FAIL(unshare(tc[i].mode), tc[i].expected_error,
52*49cdfc7eSAndroid Build Coastguard Worker "unshare(%s)", tc[i].desc);
53*49cdfc7eSAndroid Build Coastguard Worker }
54*49cdfc7eSAndroid Build Coastguard Worker }
55*49cdfc7eSAndroid Build Coastguard Worker
setup(void)56*49cdfc7eSAndroid Build Coastguard Worker static void setup(void)
57*49cdfc7eSAndroid Build Coastguard Worker {
58*49cdfc7eSAndroid Build Coastguard Worker struct passwd *ltpuser = SAFE_GETPWNAM("nobody");
59*49cdfc7eSAndroid Build Coastguard Worker nobody_uid = ltpuser->pw_uid;
60*49cdfc7eSAndroid Build Coastguard Worker }
61*49cdfc7eSAndroid Build Coastguard Worker
62*49cdfc7eSAndroid Build Coastguard Worker static struct tst_test test = {
63*49cdfc7eSAndroid Build Coastguard Worker .tcnt = ARRAY_SIZE(tc),
64*49cdfc7eSAndroid Build Coastguard Worker .forks_child = 1,
65*49cdfc7eSAndroid Build Coastguard Worker .needs_tmpdir = 1,
66*49cdfc7eSAndroid Build Coastguard Worker .needs_root = 1,
67*49cdfc7eSAndroid Build Coastguard Worker .setup = setup,
68*49cdfc7eSAndroid Build Coastguard Worker .test = run,
69*49cdfc7eSAndroid Build Coastguard Worker };
70*49cdfc7eSAndroid Build Coastguard Worker
71*49cdfc7eSAndroid Build Coastguard Worker #else
72*49cdfc7eSAndroid Build Coastguard Worker TST_TEST_TCONF("unshare is undefined.");
73*49cdfc7eSAndroid Build Coastguard Worker #endif
74