testing

18 files changed, 824 insertions, 0 deletions

diff --git a/test/root/apache2.exp b/test/root/apache2.exp
new file mode 100755
index 000000000..7f67f4706
--- /dev/null
+++ b/test/root/apache2.exp
@@ -0,0 +1,69 @@
+#!/usr/bin/expect -f
+
+set timeout 5
+spawn $env(SHELL)
+match_max 100000
+
+send -- "pkill apache\r"
+sleep 2
+
+
+send -- "firejail --name=apache /etc/init.d/apache2 start\r"
+expect {
+        timeout {puts "TESTING ERROR 0\n";exit}
+        "Child process initialized"
+}
+sleep 2
+
+
+spawn $env(SHELL)
+send -- "firejail --tree\r"
+expect {
+        timeout {puts "TESTING ERROR 1\n";exit}
+        "root:/usr/sbin/apache2"
+}
+expect {
+        timeout {puts "TESTING ERROR 2\n";exit}
+        "www-data:/usr/sbin/apache2"
+}
+sleep 2
+
+
+send -- "rm index.html\r"
+sleep 1
+send -- "wget 0\r"
+expect {
+        timeout {puts "TESTING ERROR 3\n";exit}
+        "saved"
+}
+send -- "cat index.html\r"
+expect {
+        timeout {puts "TESTING ERROR 4\n";exit}
+        "DOCTYPE html PUBLIC"
+}
+
+sleep 1
+send -- "rm index.html\r"
+
+send -- "firejail --join=apache\r"
+sleep 2
+
+send -- "ls /dev\r"
+expect {
+        timeout {puts "TESTING ERROR 5\n";exit}
+        "tty0" {puts "TESTING ERROR 6\n";exit}
+        "ttyS0" {puts "TESTING ERROR 6\n";exit}
+        "audio" {puts "TESTING ERROR 6\n";exit}
+        "ppp" {puts "TESTING ERROR 6\n";exit}
+        "log"
+}
+sleep 1
+send -- "ls -al /tmp;pwd\r"
+expect {
+        timeout {puts "TESTING ERROR 10\n";exit}
+        "X11-unix" {puts "TESTING ERROR 11\n";exit}
+        "/root"
+}
+sleep 2
+
+puts "\nall done\n"
diff --git a/test/root/configure b/test/root/configure
new file mode 100755
index 000000000..35d938340
--- /dev/null
+++ b/test/root/configure
@@ -0,0 +1,27 @@
+#!/bin/bash
+# This file is part of Firejail project
+# Copyright (C) 2014-2016 Firejail Authors
+# License GPL v2
+
+brctl addbr br0
+ifconfig br0 10.10.20.1/29 up
+# NAT masquerade
+iptables -t nat -A POSTROUTING -o eth0 -s 10.10.20.0/29 -j MASQUERADE
+# port forwarding
+# iptables -t nat -A PREROUTING -p tcp --dport 80 -j DNAT --to 10.10.20.2:80
+        
+brctl addbr br1
+ifconfig br1 10.10.30.1/24 up
+brctl addbr br2
+ifconfig br2 10.10.40.1/24 up
+brctl addbr br3
+ifconfig br3 10.10.50.1/24 up
+brctl addbr br4
+ifconfig br4 10.10.60.1/24 up
+ip link add link eth0 name eth0.5 type vlan id 5
+/sbin/ifconfig eth0.5 10.10.205.10/24 up
+ip link add link eth0 name eth0.6 type vlan id 6
+/sbin/ifconfig eth0.6 10.10.206.10/24 up
+ip link add link eth0 name eth0.7 type vlan id 7
+/sbin/ifconfig eth0.7 10.10.207.10/24 up
+
diff --git a/test/root/firemon-interface.exp b/test/root/firemon-interface.exp
new file mode 100755
index 000000000..6a82ae41e
--- /dev/null
+++ b/test/root/firemon-interface.exp
@@ -0,0 +1,34 @@
+#!/usr/bin/expect -f
+
+set timeout 10
+spawn $env(SHELL)
+match_max 100000
+
+send --  "firejail\r"
+expect {
+        timeout {puts "TESTING ERROR 0\n";exit}
+        "Child process initialized"
+}
+sleep 1
+
+spawn $env(SHELL)
+send -- "firemon --interface\r"
+expect {
+        timeout {puts "TESTING ERROR 1\n";exit}
+        "lo UP"
+}
+expect {
+        timeout {puts "TESTING ERROR 2\n";exit}
+        "10.10.20.1/29"
+}
+expect {
+        timeout {puts "TESTING ERROR 3\n";exit}
+        "10.10.50.1/24"
+}
+expect {
+        timeout {puts "TESTING ERROR 3\n";exit}
+        "br3"
+}
+sleep 1
+
+puts "\n"
diff --git a/test/root/isc-dhcp.exp b/test/root/isc-dhcp.exp
new file mode 100755
index 000000000..86500707a
--- /dev/null
+++ b/test/root/isc-dhcp.exp
@@ -0,0 +1,58 @@
+#!/usr/bin/expect -f
+
+set timeout 5
+spawn $env(SHELL)
+match_max 100000
+
+send -- "sudo ls; sudo whoami; sudo pwd\r"
+expect {
+        timeout {puts "TESTING ERROR: you need to root run this test as root\n";exit}
+        "root"
+}
+
+send -- "pkill dhcpd\r"
+sleep 2
+
+send -- "firejail --name=dhcpd /etc/init.d/isc-dhcp-server start\r"
+expect {
+        timeout {puts "TESTING ERROR 0\n";exit}
+        "Child process initialized"
+}
+sleep 2
+
+spawn $env(SHELL)
+send -- "firejail --tree\r"
+expect {
+        timeout {puts "TESTING ERROR 2\n";exit}
+        "root:/usr/sbin/dhcpd"
+}
+sleep 2
+
+send -- "tail -n 200 /var/log/syslog\r"
+expect {
+        timeout {puts "TESTING ERROR 3\n";exit}
+        "Internet Systems Consortium DHCP Server"
+}
+expect {
+        timeout {puts "TESTING ERROR 4\n";exit}
+        "Wrote 0 leases to leases file"
+}
+sleep 2
+
+send -- "firejail --join=dhcpd\r"
+sleep 2
+
+send -- "ls /dev\r"
+expect {
+        timeout {puts "TESTING ERROR 5\n";exit}
+        "tty0" {puts "TESTING ERROR 6\n";exit}
+        "ttyS0" {puts "TESTING ERROR 6\n";exit}
+        "ppp" {puts "TESTING ERROR 6\n";exit}
+        "audio" {puts "TESTING ERROR 6\n";exit}
+        "log"
+}
+sleep 2
+
+
+puts "\nall done\n"
+
diff --git a/test/root/net_interface.exp b/test/root/net_interface.exp
new file mode 100755
index 000000000..2f87024d8
--- /dev/null
+++ b/test/root/net_interface.exp
@@ -0,0 +1,93 @@
+#!/usr/bin/expect -f
+# This file is part of Firejail project
+# Copyright (C) 2014-2016 Firejail Authors
+# License GPL v2
+
+set timeout 10
+spawn $env(SHELL)
+match_max 100000
+
+send -- "ip link add link eth0 name eth0.100 type vlan id 100\r"
+sleep 1
+send -- "ip link add link eth0 name eth0.101 type vlan id 101\r"
+sleep 1
+send -- "ip link add link eth0 name eth0.102 type vlan id 102\r"
+sleep 1
+send -- "ip link add link eth0 name eth0.103 type vlan id 103\r"
+sleep 1
+send -- "ip link add link eth0 name eth0.104 type vlan id 104\r"
+sleep 1
+puts "\n"
+
+send -- "/sbin/ifconfig eth0.100 10.200.0.1/24\r"
+sleep 1
+send -- "/sbin/ifconfig eth0.101 10.200.1.1/24\r"
+sleep 1
+send -- "/sbin/ifconfig eth0.102 10.200.2.1/24\r"
+sleep 1
+send -- "/sbin/ifconfig eth0.103 10.200.3.1/24\r"
+sleep 1
+send -- "/sbin/ifconfig eth0.104 10.200.4.1/24\r"
+sleep 1
+puts "\n"
+
+
+
+send -- "firejail --noprofile --interface=eth0.100 --interface=eth0.101 --interface=eth0.102 --interface=eth0.103 --interface=eth0.104\r"
+expect {
+        timeout {puts "TESTING ERROR 0\n";exit}
+        "maximum 4 interfaces are allowed"
+}
+sleep 1
+
+send -- "firejail --noprofile --interface=eth0.100 --interface=eth0.101 --interface=eth0.102 --interface=eth0.103\r"
+expect {
+        timeout {puts "TESTING ERROR 1\n";exit}
+        "eth0.100"
+}
+expect {
+        timeout {puts "TESTING ERROR 1.1\n";exit}
+        "UP"
+}
+expect {
+        timeout {puts "TESTING ERROR 2\n";exit}
+        "eth0.101"
+}
+expect {
+        timeout {puts "TESTING ERROR 2.2\n";exit}
+        "UP"
+}
+expect {
+        timeout {puts "TESTING ERROR 3\n";exit}
+        "eth0.102"
+}
+expect {
+        timeout {puts "TESTING ERROR 3.1\n";exit}
+        "UP"
+}
+expect {
+        timeout {puts "TESTING ERROR 4\n";exit}
+        "eth0.103"
+}
+expect {
+        timeout {puts "TESTING ERROR 4.1\n";exit}
+        "UP"
+}
+sleep 1
+send -- "exit\r"
+sleep 1
+
+send -- "firejail --noprofile --interface=eth0.104\r"
+expect {
+        timeout {puts "TESTING ERROR 5\n";exit}
+        "eth0.104"
+}
+expect {
+        timeout {puts "TESTING ERROR 5.1\n";exit}
+        "UP"
+}
+send -- "exit\r"
+after 100
+
+puts "all done\n"
+
diff --git a/test/root/nginx.exp b/test/root/nginx.exp
new file mode 100755
index 000000000..0b62fada9
--- /dev/null
+++ b/test/root/nginx.exp
@@ -0,0 +1,69 @@
+#!/usr/bin/expect -f
+
+set timeout 5
+spawn $env(SHELL)
+match_max 100000
+
+send -- "pkill nginx\r"
+sleep 2
+
+
+send -- "firejail --name=nginx /etc/init.d/nginx start\r"
+expect {
+        timeout {puts "TESTING ERROR 0\n";exit}
+        "Child process initialized"
+}
+sleep 2
+
+
+spawn $env(SHELL)
+send -- "firejail --tree\r"
+expect {
+        timeout {puts "TESTING ERROR 1\n";exit}
+        "root:nginx"
+}
+expect {
+        timeout {puts "TESTING ERROR 2\n";exit}
+        "www-data:nginx"
+}
+sleep 2
+
+
+send -- "rm index.html\r"
+sleep 1
+send -- "wget 0\r"
+expect {
+        timeout {puts "TESTING ERROR 3\n";exit}
+        "saved"
+}
+send -- "cat index.html\r"
+expect {
+        timeout {puts "TESTING ERROR 4\n";exit}
+        "DOCTYPE html PUBLIC"
+}
+
+sleep 1
+send -- "rm index.html\r"
+
+send -- "firejail --join=nginx\r"
+sleep 2
+
+send -- "ls /dev\r"
+expect {
+        timeout {puts "TESTING ERROR 5\n";exit}
+        "tty0" {puts "TESTING ERROR 6\n";exit}
+        "ttyS0" {puts "TESTING ERROR 6\n";exit}
+        "audio" {puts "TESTING ERROR 6\n";exit}
+        "ppp" {puts "TESTING ERROR 6\n";exit}
+        "log"
+}
+sleep 1
+send -- "ls -al /tmp;pwd\r"
+expect {
+        timeout {puts "TESTING ERROR 10\n";exit}
+        "X11-unix" {puts "TESTING ERROR 11\n";exit}
+        "/root"
+}
+sleep 2
+
+puts "\nall done\n"
diff --git a/test/root/option_bind_directory.exp b/test/root/option_bind_directory.exp
new file mode 100755
index 000000000..3233c68de
--- /dev/null
+++ b/test/root/option_bind_directory.exp
@@ -0,0 +1,22 @@
+#!/usr/bin/expect -f
+
+set timeout 10
+spawn $env(SHELL)
+match_max 100000
+
+send -- "firejail --bind=/tmp/chroot,mntpoint\r"
+expect {
+        timeout {puts "TESTING ERROR 0\n";exit}
+        "Child process initialized"
+}
+sleep 1
+
+send -- "ls mntpoint;pwd\r"
+expect {
+        timeout {puts "TESTING ERROR 1\n";exit}
+        "root"
+}
+sleep 1
+
+puts "\n"
+
diff --git a/test/root/option_bind_file.exp b/test/root/option_bind_file.exp
new file mode 100755
index 000000000..8926e0391
--- /dev/null
+++ b/test/root/option_bind_file.exp
@@ -0,0 +1,22 @@
+#!/usr/bin/expect -f
+
+set timeout 10
+spawn $env(SHELL)
+match_max 100000
+
+send -- "firejail --bind=tmpfile,/etc/passwd\r"
+expect {
+        timeout {puts "TESTING ERROR 0\n";exit}
+        "Child process initialized"
+}
+sleep 1
+
+send -- "cat /etc/passwd;pwd\r"
+expect {
+        timeout {puts "TESTING ERROR 1\n";exit}
+        "hello"
+}
+sleep 1
+
+puts "\n"
+
diff --git a/test/root/option_tmpfs.exp b/test/root/option_tmpfs.exp
new file mode 100755
index 000000000..20e42a858
--- /dev/null
+++ b/test/root/option_tmpfs.exp
@@ -0,0 +1,44 @@
+#!/usr/bin/expect -f
+
+set timeout 10
+spawn $env(SHELL)
+match_max 100000
+
+send -- "firejail --tmpfs=/var\r"
+expect {
+        timeout {puts "TESTING ERROR 0\n";exit}
+        "Child process initialized"
+}
+sleep 1
+
+send -- "ls -l /var;pwd\r"
+expect {
+        timeout {puts "TESTING ERROR 1\n";exit}
+        "total 0"
+}
+expect {
+        timeout {puts "TESTING ERROR 2\n";exit}
+        "/root"
+}
+sleep 1
+send -- "exit\r"
+sleep 2
+
+send -- "firejail --debug-check-filename --tmpfs=\"bla&&bla\"\r"
+expect {
+        timeout {puts "TESTING ERROR 13.1\n";exit}
+        "Checking filename bla&&bla"
+}
+expect {
+        timeout {puts "TESTING ERROR 13.2\n";exit}
+        "Error:"
+}
+expect {
+        timeout {puts "TESTING ERROR 13.3\n";exit}
+        "is an invalid filename"
+}
+after 100
+
+
+puts "\nall done\n"
+
diff --git a/test/root/profile_tmpfs.exp b/test/root/profile_tmpfs.exp
new file mode 100755
index 000000000..da7c084a2
--- /dev/null
+++ b/test/root/profile_tmpfs.exp
@@ -0,0 +1,37 @@
+#!/usr/bin/expect -f
+
+set timeout 10
+spawn $env(SHELL)
+match_max 100000
+
+send -- "mkdir /tmp/firejailtestdir\r"
+sleep 1
+send -- "ls > /tmp/firejailtestdir/tmpfile\r"
+sleep 1
+
+send -- "firejail --profile=tmpfs.profile\r"
+expect {
+        timeout {puts "TESTING ERROR 0\n";exit}
+        "Child process initialized"
+}
+
+# testing private only
+send -- "bash\r"
+sleep 1
+
+send -- "ls -l /tmp/firejailtestdir;pwd\r"
+expect {
+        timeout {puts "TESTING ERROR 1.1\n";exit}
+        "tmpfile" {puts "TESTING ERROR 1\n";exit}
+        "home"
+}
+sleep 1
+send -- "exit\r"
+sleep 1
+send -- "exit\r"
+sleep 1
+send -- "rm -fr  /tmp/firejailtestdir\r"
+
+sleep 1
+
+puts "\nall done\n"
diff --git a/test/root/root.sh b/test/root/root.sh
new file mode 100755
index 000000000..960071d45
--- /dev/null
+++ b/test/root/root.sh
@@ -0,0 +1,105 @@
+#!/bin/bash
+
+./configure 2 > /dev/null
+
+#********************************
+# servers
+#********************************
+if [ -f /etc/init.d/snmpd ]
+then
+        echo "TESTING: snmpd (test/root/snmpd.exp)"
+        ./snmpd.exp
+else
+        echo "TESTING SKIP: snmpd  not found"
+fi
+
+
+if [ -f /etc/init.d/apache2 ]
+then
+        echo "TESTING: apache2 (test/root/apache2.exp)"
+        ./apache2.exp
+else
+        echo "TESTING SKIP: apache2  not found"
+fi
+
+if [ -f /etc/init.d/isc-dhcp-server ]
+then
+        echo "TESTING: isc dhcp server (test/root/isc-dhscp.exp)"
+        ./isc-dhcp.exp
+else
+        echo "TESTING SKIP: isc dhcp server not found"
+fi
+
+if [ -f /etc/init.d/unbound ]
+then
+        echo "TESTING: unbound (test/root/unbound.exp)"
+        ./unbound.exp
+else
+        echo "TESTING SKIP: unbound  not found"
+fi
+
+if [ -f /etc/init.d/nginx ]
+then
+        echo "TESTING: nginx (test/root/nginx.exp)"
+        ./nginx.exp
+else
+        echo "TESTING SKIP: nginx  not found"
+fi
+
+#********************************
+# seccomp
+#********************************
+echo "TESTING: seccomp umount (test/root/seccomp-umount.exp)"
+./seccomp-umount.exp
+
+echo "TESTING: seccomp chmod (test/root/seccomp-chmod.exp)"
+./seccomp-chmod.exp
+
+echo "TESTING: seccomp chown (test/root/seccomp-chown.exp)"
+./seccomp-chown.exp
+
+#********************************
+# command line options
+#********************************
+echo "TESTING: tmpfs (test/root/option_tmpfs.exp)"
+./option_tmpfs.exp
+
+echo "TESTING: profile tmpfs (test/root/profile_tmpfs)"
+./profile_tmpfs.exp
+
+echo "TESTING: bind directory (test/root/option_bind_directory.exp)"
+./option_bind_directory.exp
+
+echo "TESTING: bind file (test/root/option_bind_file.exp)"
+echo hello > tmpfile
+./option_bind_file.exp
+rm -f tmpfile
+
+#********************************
+# networking
+#********************************
+echo "TESTING: network interfaces (test/root/net_interface.exp)"
+./net_interface.exp
+
+echo "TESTING: firemon --interface (test/root/firemon-interface.exp)"
+./firemon-interface.exp
+
+#if [ -f /sys/fs/cgroup/g1/tasks ]
+#then
+#       echo "TESTING: firemon --cgroup (firemon-cgroup.exp)"
+#       ./firemon-cgroup.exp
+#fi
+#
+#echo "TESTING: chroot resolv.conf (chroot-resolvconf.exp)"
+#rm -f tmpfile
+#touch tmpfile
+#rm -f /tmp/chroot/etc/resolv.conf
+#ln -s tmp /tmp/chroot/etc/resolv.conf
+#./chroot-resolvconf.exp
+#rm -f tmpfile
+#rm /tmp/chroot/etc/resolv.conf
+
+#echo "TESTING: chroot (fs_chroot_asroot.exp)"
+#./fs_chroot_asroot.exp
+
+
diff --git a/test/root/seccomp-chmod.exp b/test/root/seccomp-chmod.exp
new file mode 100755
index 000000000..b17990e3a
--- /dev/null
+++ b/test/root/seccomp-chmod.exp
@@ -0,0 +1,51 @@
+#!/usr/bin/expect -f
+# This file is part of Firejail project
+# Copyright (C) 2014-2016 Firejail Authors
+# License GPL v2
+
+set timeout 10
+spawn $env(SHELL)
+match_max 100000
+
+send --  "firejail --seccomp=chmod,fchmod,fchmodat --private\r"
+expect {
+        timeout {puts "TESTING ERROR 0\n";exit}
+        "Child process initialized"
+}
+sleep 2
+
+send -- "cd ~; echo done\r"
+expect {
+        timeout {puts "TESTING ERROR 1\n";exit}
+        "done"
+}
+
+send -- "touch testfile; echo done\r"
+expect {
+        timeout {puts "TESTING ERROR 2\n";exit}
+        "done"
+}
+
+send -- "ls -l testfile; echo done\r"
+expect {
+        timeout {puts "TESTING ERROR 3\n";exit}
+        "testfile"
+}
+expect {
+        timeout {puts "TESTING ERROR 4\n";exit}
+        "done"
+}
+
+send -- "chmod +x testfile; echo done\r"
+expect {
+        timeout {puts "TESTING ERROR 5\n";exit}
+        "Bad system call"
+}
+expect {
+        timeout {puts "TESTING ERROR 6\n";exit}
+        "done"
+}
+
+send -- "exit\r"
+after 100
+puts "\nall done\n"
diff --git a/test/root/seccomp-chown.exp b/test/root/seccomp-chown.exp
new file mode 100755
index 000000000..a54d279f1
--- /dev/null
+++ b/test/root/seccomp-chown.exp
@@ -0,0 +1,49 @@
+#!/usr/bin/expect -f
+# This file is part of Firejail project
+# Copyright (C) 2014-2016 Firejail Authors
+# License GPL v2
+
+set timeout 10
+spawn $env(SHELL)
+match_max 100000
+
+send --  "firejail --seccomp=chown,fchown,fchownat,lchown --private\r"
+expect {
+        timeout {puts "TESTING ERROR 0\n";exit}
+        "Child process initialized"
+}
+sleep 2
+
+send -- "touch testfile;pwd\r"
+expect {
+        timeout {puts "TESTING ERROR 1\n";exit}
+        "/root" {puts "running as root"}
+        "/home"
+}
+
+send -- "ls -l testfile;pwd\r"
+expect {
+        timeout {puts "TESTING ERROR 2\n";exit}
+        "testfile"
+}
+expect {
+        timeout {puts "TESTING ERROR 3\n";exit}
+        "/root" {puts "running as root"}
+        "/home"
+}
+
+send -- "chown netblue:netblue testfile;pwd\r"
+expect {
+        timeout {puts "TESTING ERROR 2\n";exit}
+        "Bad system call"
+}
+expect {
+        timeout {puts "TESTING ERROR 3\n";exit}
+        "/root" {puts "running as root"}
+        "/home"
+}
+
+
+send -- "exit\r"
+after 100
+puts "\nall done\n"
diff --git a/test/root/seccomp-umount.exp b/test/root/seccomp-umount.exp
new file mode 100755
index 000000000..04a9b7a3d
--- /dev/null
+++ b/test/root/seccomp-umount.exp
@@ -0,0 +1,25 @@
+#!/usr/bin/expect -f
+# This file is part of Firejail project
+# Copyright (C) 2014-2016 Firejail Authors
+# License GPL v2
+
+set timeout 10
+spawn $env(SHELL)
+match_max 100000
+
+send --  "firejail --net=br0 --ip=10.10.20.5 --seccomp --noprofile\r"
+expect {
+        timeout {puts "TESTING ERROR 0\n";exit}
+        "Child process initialized"
+}
+sleep 2
+
+send -- "umount /proc\r"
+expect {
+        timeout {puts "TESTING ERROR 1\n";exit}
+        "Bad system call"
+}
+
+send -- "exit\r"
+after 100
+puts "\n"
diff --git a/test/root/snmpd.exp b/test/root/snmpd.exp
new file mode 100755
index 000000000..90e34470f
--- /dev/null
+++ b/test/root/snmpd.exp
@@ -0,0 +1,57 @@
+#!/usr/bin/expect -f
+
+set timeout 5
+spawn $env(SHELL)
+match_max 100000
+
+send -- "sudo ls; sudo whoami; sudo pwd\r"
+expect {
+        timeout {puts "TESTING ERROR: you need to root run this test as root\n";exit}
+        "root"
+}
+
+send -- "pkill snmpd\r"
+sleep 2
+
+
+send -- "firejail --name=snmpd /etc/init.d/snmpd start\r"
+expect {
+        timeout {puts "TESTING ERROR 0\n";exit}
+        "Child process initialized"
+}
+sleep 2
+
+spawn $env(SHELL)
+send -- "firejail --tree\r"
+expect {
+        timeout {puts "TESTING ERROR 2\n";exit}
+        "snmp:/usr/sbin/snmpd"
+}
+sleep 2
+
+send -- "tail /var/log/syslog\r"
+expect {
+        timeout {puts "TESTING ERROR 3\n";exit}
+        "snmpd"
+}
+expect {
+        timeout {puts "TESTING ERROR 4\n";exit}
+        "NET-SNMP version"
+}
+
+send -- "firejail --join=snmpd\r"
+sleep 2
+
+send -- "ls /dev\r"
+expect {
+        timeout {puts "TESTING ERROR 5\n";exit}
+        "tty0" {puts "TESTING ERROR 6\n";exit}
+        "ttyS0" {puts "TESTING ERROR 6\n";exit}
+        "audio" {puts "TESTING ERROR 6\n";exit}
+        "ppp" {puts "TESTING ERROR 6\n";exit}
+        "log"
+}
+sleep 2
+
+sleep 2
+puts "\nall done\n"
diff --git a/test/root/start.sh b/test/root/start.sh
new file mode 100755
index 000000000..8e7a869cd
--- /dev/null
+++ b/test/root/start.sh
@@ -0,0 +1,4 @@
+#/bin/bash
+
+./configure
+./root.sh | grep TESTING
\ No newline at end of file
diff --git a/test/root/tmpfs.profile b/test/root/tmpfs.profile
new file mode 100644
index 000000000..0680f4d69
--- /dev/null
+++ b/test/root/tmpfs.profile
@@ -0,0 +1 @@
+tmpfs /tmp/firejailtestdir
\ No newline at end of file
diff --git a/test/root/unbound.exp b/test/root/unbound.exp
new file mode 100755
index 000000000..193e662ff
--- /dev/null
+++ b/test/root/unbound.exp
@@ -0,0 +1,57 @@
+#!/usr/bin/expect -f
+
+set timeout 5
+spawn $env(SHELL)
+match_max 100000
+
+send -- "sudo ls; sudo whoami; sudo pwd\r"
+expect {
+        timeout {puts "TESTING ERROR: you need to root run this test as root\n";exit}
+        "root"
+}
+
+send -- "pkill unbound\r"
+sleep 2
+
+send -- "firejail --name=unbound unbound\r"
+expect {
+        timeout {puts "TESTING ERROR 0\n";exit}
+        "Child process initialized"
+}
+sleep 2
+
+spawn $env(SHELL)
+send -- "firejail --tree\r"
+expect {
+        timeout {puts "TESTING ERROR 2\n";exit}
+        "unbound:unbound"
+}
+sleep 2
+
+send -- "tail /var/log/syslog\r"
+expect {
+        timeout {puts "TESTING ERROR 3\n";exit}
+        "unbound"
+}
+expect {
+        timeout {puts "TESTING ERROR 4\n";exit}
+        "info: start of service"
+}
+sleep 2
+
+send -- "firejail --join=unbound\r"
+sleep 2
+
+send -- "ls /dev\r"
+expect {
+        timeout {puts "TESTING ERROR 5\n";exit}
+        "tty0" {puts "TESTING ERROR 6\n";exit}
+        "ttyS0" {puts "TESTING ERROR 6\n";exit}
+        "audio" {puts "TESTING ERROR 6\n";exit}
+        "ppp" {puts "TESTING ERROR 6\n";exit}
+        "log"
+}
+sleep 2
+
+
+puts "\nall done\n"