testing login as nobody

3 files changed, 47 insertions, 9 deletions

diff --git a/test/root/login_nobody.exp b/test/root/login_nobody.exp
new file mode 100755
index 000000000..8e9ec4367
--- /dev/null
+++ b/test/root/login_nobody.exp
@@ -0,0 +1,35 @@
+#!/usr/bin/expect -f
+# This file is part of Firejail project
+# Copyright (C) 2014-2018 Firejail Authors
+# License GPL v2
+
+set timeout 10
+cd /home
+spawn $env(SHELL)
+match_max 100000
+
+send --  "su - nobody -s /usr/bin/firejail\r"
+expect {
+        timeout {puts "TESTING ERROR 0\n";exit}
+        "Child process initialized"
+}
+after 100
+
+send -- "cat /proc/self/status | grep Seccomp\r"
+expect {
+        timeout {puts "TESTING ERROR 3\n";exit}
+        "2"
+}
+after 100
+
+send -- "cat /proc/self/status | grep CapBnd\r"
+expect {
+        timeout {puts "TESTING ERROR 4\n";exit}
+        "0000000000000000"
+}
+after 100
+
+send -- "exit\r"
+sleep 1
+
+puts "\nall done\n"
diff --git a/test/root/root.sh b/test/root/root.sh
index 3a20e4ba4..4132bc739 100755
--- a/test/root/root.sh
+++ b/test/root/root.sh
@@ -80,6 +80,9 @@ echo "TESTING: join (test/root/join.exp)"
 echo "TESTING: git-install (test/root/git.exp)"
 ./git.exp
 
+echo "TESTING: login-nobody (test/root/login_nobody.exp)"
+./login_nobody.exp
+
 #********************************
 # seccomp
 #********************************
diff --git a/test/ssh/sftp.exp b/test/ssh/sftp.exp
index 72c858f05..3b0124ec7 100755
--- a/test/ssh/sftp.exp
+++ b/test/ssh/sftp.exp
@@ -21,17 +21,17 @@ send -- "echo 12345 > testfile\r"
 after 100
 send -- "sftp firejail-test@0\r"
 expect {
-        timeout {puts "TESTING ERROR 0\n";exit}
+        timeout {puts "TESTING ERROR 1\n";exit}
         "Connected to 0"
 }
 expect {
-        timeout {puts "TESTING ERROR 0\n";exit}
+        timeout {puts "TESTING ERROR 2\n";exit}
         "sftp>"
 }
 after 100
 send -- "put testfile\r"
 expect {
-        timeout {puts "TESTING ERROR 0\n";exit}
+        timeout {puts "TESTING ERROR 3\n";exit}
         "100%"
 }
 after 100
@@ -41,14 +41,14 @@ sleep 1
 
 send -- "ssh firejail-test@0\r"
 expect {
-        timeout {puts "TESTING ERROR 0\n";exit}
+        timeout {puts "TESTING ERROR 4\n";exit}
         "Child process initialized" {puts "OK\n"}
         "an existing sandbox was detected" {puts "OK\n"}
 }
 sleep 1
 send -- "cat testfile\r"
 expect {
-        timeout {puts "TESTING ERROR 0\n";exit}
+        timeout {puts "TESTING ERROR 5\n";exit}
         "12345"
 }
 after 100
@@ -59,17 +59,17 @@ send -- "rm testfile\r"
 after 100
 send -- "sftp firejail-test@0\r"
 expect {
-        timeout {puts "TESTING ERROR 0\n";exit}
+        timeout {puts "TESTING ERROR 6\n";exit}
         "Connected to 0"
 }
 expect {
-        timeout {puts "TESTING ERROR 0\n";exit}
+        timeout {puts "TESTING ERROR 7\n";exit}
         "sftp>"
 }
 after 100
 send -- "get testfile\r"
 expect {
-        timeout {puts "TESTING ERROR 0\n";exit}
+        timeout {puts "TESTING ERROR 8\n";exit}
         "100%"
 }
 after 100
@@ -77,7 +77,7 @@ send -- "exit\r"
 sleep 1
 send -- "cat testfile\r"
 expect {
-        timeout {puts "TESTING ERROR 0\n";exit}
+        timeout {puts "TESTING ERROR 9\n";exit}
         "12345"
 }
 after 100