0.9.38 testing

4 files changed, 274 insertions, 2 deletions

diff --git a/test/features/3.10.exp b/test/features/3.10.exp
new file mode 100755
index 000000000..47da7f1c2
--- /dev/null
+++ b/test/features/3.10.exp
@@ -0,0 +1,183 @@
+#!/usr/bin/expect -f
+#
+# whitelist tmp
+#
+
+set timeout 10
+spawn $env(SHELL)
+match_max 100000
+set overlay [lindex $argv 0]
+set chroot [lindex $argv 1]
+
+#
+# N
+#
+send -- "mkdir /tmp/test1dir\r"
+sleep 1
+send -- "touch /tmp/test1dir/test1\r"
+sleep 1
+send -- "firejail --noprofile --whitelist=/tmp/test1dir\r"
+expect {
+        timeout {puts "TESTING ERROR 0\n";exit}
+        "Child process initialized"
+}
+sleep 1
+
+send -- "ls -l /tmp | wc -l\r"
+expect {
+        timeout {puts "TESTING ERROR 1.1\n";exit}
+        "2"
+}
+send -- "ls -l /tmp\r"
+expect {
+        timeout {puts "TESTING ERROR 1.2\n";exit}
+        "netblue"
+}
+expect {
+        timeout {puts "TESTING ERROR 1.3\n";exit}
+        "netblue"
+}
+expect {
+        timeout {puts "TESTING ERROR 1.4\n";exit}
+        "test1dir"
+}
+
+send -- "ls -l /tmp/test1dir | wc -l\r"
+expect {
+        timeout {puts "TESTING ERROR 1.5\n";exit}
+        "2"
+}
+send -- "ls -l /tmp/test1dir\r"
+expect {
+        timeout {puts "TESTING ERROR 1.6\n";exit}
+        "netblue"
+}
+expect {
+        timeout {puts "TESTING ERROR 1.7\n";exit}
+        "netblue"
+}
+expect {
+        timeout {puts "TESTING ERROR 1.8\n";exit}
+        "test1"
+}
+
+
+after 100
+send -- "exit\r"
+sleep 1
+
+
+#
+# O
+#
+if { $overlay == "overlay" } {
+        send -- "firejail --noprofile --overlay  --whitelist=/tmp/test1dir\r"
+        expect {
+                timeout {puts "TESTING ERROR 2\n";exit}
+                "Child process initialized"
+        }
+        sleep 1
+        
+        send -- "ls -l /tmp | wc -l\r"
+        expect {
+                timeout {puts "TESTING ERROR 3.1\n";exit}
+                "2"
+        }
+        send -- "ls -l /tmp\r"
+        expect {
+                timeout {puts "TESTING ERROR 3.2\n";exit}
+                "netblue"
+        }
+        expect {
+                timeout {puts "TESTING ERROR 3.3\n";exit}
+                "netblue"
+        }
+        expect {
+                timeout {puts "TESTING ERROR 3.4\n";exit}
+                "test1dir"
+        }
+        
+        send -- "ls -l /tmp/test1dir | wc -l\r"
+        expect {
+                timeout {puts "TESTING ERROR 3.5\n";exit}
+                "2"
+        }
+        send -- "ls -l /tmp/test1dir\r"
+        expect {
+                timeout {puts "TESTING ERROR 3.6\n";exit}
+                "netblue"
+        }
+        expect {
+                timeout {puts "TESTING ERROR 3.7\n";exit}
+                "netblue"
+        }
+        expect {
+                timeout {puts "TESTING ERROR 3.8\n";exit}
+                "test1"
+        }
+
+        after 100
+        send -- "exit\r"
+        sleep 1
+}
+
+#
+# C
+#
+if { $chroot == "chroot" } {
+        send -- "mkdir /tmp/chroot/tmp/test1dir\r"
+        sleep 1
+        send -- "touch /tmp/chroot/tmp/test1dir/test1\r"
+        sleep 1
+        send -- "firejail --noprofile --chroot=/tmp/chroot  --whitelist=/tmp/test1dir\r"
+        expect {
+                timeout {puts "TESTING ERROR 4\n";exit}
+                "Child process initialized"
+        }
+        sleep 1
+        
+        send -- "ls -l /tmp | wc -l\r"
+        expect {
+                timeout {puts "TESTING ERROR 5.1\n";exit}
+                "2"
+        }
+        send -- "ls -l /tmp\r"
+        expect {
+                timeout {puts "TESTING ERROR 5.2\n";exit}
+                "netblue"
+        }
+        expect {
+                timeout {puts "TESTING ERROR 5.3\n";exit}
+                "netblue"
+        }
+        expect {
+                timeout {puts "TESTING ERROR 5.4\n";exit}
+                "test1dir"
+        }
+        
+        send -- "ls -l /tmp/test1dir | wc -l\r"
+        expect {
+                timeout {puts "TESTING ERROR 5.5\n";exit}
+                "2"
+        }
+        send -- "ls -l /tmp/test1dir\r"
+        expect {
+                timeout {puts "TESTING ERROR 5.6\n";exit}
+                "netblue"
+        }
+        expect {
+                timeout {puts "TESTING ERROR 5.7\n";exit}
+                "netblue"
+        }
+        expect {
+                timeout {puts "TESTING ERROR 5.8\n";exit}
+                "test1"
+        }
+        
+        after 100
+        send -- "exit\r"
+        sleep 1
+}
+
+
+puts "\nall done\n"
diff --git a/test/features/3.9.exp b/test/features/3.9.exp
new file mode 100755
index 000000000..1dc556d78
--- /dev/null
+++ b/test/features/3.9.exp
@@ -0,0 +1,80 @@
+#!/usr/bin/expect -f
+#
+# whitelist dev
+#
+
+set timeout 10
+spawn $env(SHELL)
+match_max 100000
+set overlay [lindex $argv 0]
+set chroot [lindex $argv 1]
+
+#
+# N
+#
+send -- "firejail --noprofile --whitelist=/dev/tty --whitelist=/dev/shm --whitelist=/dev/null\r"
+expect {
+        timeout {puts "TESTING ERROR 0\n";exit}
+        "Child process initialized"
+}
+sleep 1
+
+send -- "ls -l /dev | wc -l\r"
+expect {
+        timeout {puts "TESTING ERROR 1.1\n";exit}
+        "4"
+}
+
+
+after 100
+send -- "exit\r"
+sleep 1
+
+
+#
+# O
+#
+if { $overlay == "overlay" } {
+        send -- "firejail --noprofile --overlay --whitelist=/dev/tty --whitelist=/dev/shm --whitelist=/dev/null\r"
+        expect {
+                timeout {puts "TESTING ERROR 2\n";exit}
+                "Child process initialized"
+        }
+        sleep 1
+        
+        send -- "ls -l /dev | wc -l\r"
+        expect {
+                timeout {puts "TESTING ERROR 3.1\n";exit}
+                "4"
+        }
+        
+
+        after 100
+        send -- "exit\r"
+        sleep 1
+}
+
+#
+# C
+#
+if { $chroot == "chroot" } {
+        send -- "firejail --noprofile --chroot=/tmp/chroot --whitelist=/dev/tty --whitelist=/dev/shm --whitelist=/dev/null\r"
+        expect {
+                timeout {puts "TESTING ERROR 4\n";exit}
+                "Child process initialized"
+        }
+        sleep 1
+        
+        send -- "ls -l /dev | wc -l\r"
+        expect {
+                timeout {puts "TESTING ERROR 5.1\n";exit}
+                "4"
+        }
+        
+        after 100
+        send -- "exit\r"
+        sleep 1
+}
+
+
+puts "\nall done\n"
diff --git a/test/features/features.txt b/test/features/features.txt
index ac5390bc9..7f5e27ee4 100644
--- a/test/features/features.txt
+++ b/test/features/features.txt
@@ -50,6 +50,8 @@ C - chroot filesystem
 3.7 private-tmp
 3.8 private-bin
         - O, C not working - todo
+3.9 whitelist dev
+3.10 whitelist tmp
 
 
 
diff --git a/test/features/test.sh b/test/features/test.sh
index 4e84f1f9c..495996551 100755
--- a/test/features/test.sh
+++ b/test/features/test.sh
@@ -92,7 +92,7 @@ echo "TESTING: 3.2 read-only"
 echo "TESTING: 3.3 blacklist"
 ./3.3.exp $OVERLAY $CHROOT
 
-echo "TESTING: 3.4 whitelist"
+echo "TESTING: 3.4 whitelist home"
 ./3.4.exp $OVERLAY $CHROOT
 
 echo "TESTING: 3.5 private-dev"
@@ -105,4 +105,11 @@ echo "TESTING: 3.7 private-tmp"
 ./3.7.exp $OVERLAY $CHROOT
 
 echo "TESTING: 3.8 private-bin"
-./3.6.exp notworking notworking
+./3.8.exp notworking notworking
+
+echo "TESTING: 3.9 whitelist dev"
+./3.9.exp $OVERLAY $CHROOT
+
+echo "TESTING: 3.10 whitelist tmp"
+./3.10.exp $OVERLAY $CHROOT
+