diff options
-rw-r--r-- | src/firejail/env.c | 2 | ||||
-rwxr-xr-x | test/env.exp | 8 | ||||
-rwxr-xr-x | test/features/3.11.exp | 7 | ||||
-rwxr-xr-x | test/features/3.4.exp | 6 | ||||
-rwxr-xr-x | test/features/3.5.exp | 12 | ||||
-rwxr-xr-x | test/features/3.9.exp | 12 | ||||
-rwxr-xr-x | test/test.sh | 170 |
7 files changed, 110 insertions, 107 deletions
diff --git a/src/firejail/env.c b/src/firejail/env.c index 7fbf7aac5..54a6b0036 100644 --- a/src/firejail/env.c +++ b/src/firejail/env.c | |||
@@ -86,7 +86,9 @@ void env_ibus_load(void) { | |||
86 | *ptr = '\0'; | 86 | *ptr = '\0'; |
87 | if (arg_debug) | 87 | if (arg_debug) |
88 | printf("%s\n", buf); | 88 | printf("%s\n", buf); |
89 | EUID_USER(); | ||
89 | env_store(buf); | 90 | env_store(buf); |
91 | EUID_ROOT(); | ||
90 | } | 92 | } |
91 | 93 | ||
92 | fclose(fp); | 94 | fclose(fp); |
diff --git a/test/env.exp b/test/env.exp index d2edb0477..d7aee3c64 100755 --- a/test/env.exp +++ b/test/env.exp | |||
@@ -12,17 +12,17 @@ expect { | |||
12 | } | 12 | } |
13 | sleep 1 | 13 | sleep 1 |
14 | 14 | ||
15 | send -- "env | grep ENV\r" | 15 | send -- "env | grep ENV1\r" |
16 | expect { | 16 | expect { |
17 | timeout {puts "TESTING ERROR 1\n";exit} | 17 | timeout {puts "TESTING ERROR 1\n";exit} |
18 | "ENV1" | 18 | "ENV1" |
19 | } | 19 | } |
20 | send -- "env | grep ENV\r" | 20 | send -- "env | grep ENV2\r" |
21 | expect { | 21 | expect { |
22 | timeout {puts "TESTING ERROR 2\n";exit} | 22 | timeout {puts "TESTING ERROR 2\n";exit} |
23 | "ENV2" | 23 | "ENV2" |
24 | } | 24 | } |
25 | send -- "env | grep ENV\r" | 25 | send -- "env | grep ENV3\r" |
26 | expect { | 26 | expect { |
27 | timeout {puts "TESTING ERROR 3\n";exit} | 27 | timeout {puts "TESTING ERROR 3\n";exit} |
28 | "ENV3" | 28 | "ENV3" |
@@ -52,4 +52,4 @@ expect { | |||
52 | "Werror" | 52 | "Werror" |
53 | } | 53 | } |
54 | 54 | ||
55 | puts "\n" | 55 | puts "\nall done\n" |
diff --git a/test/features/3.11.exp b/test/features/3.11.exp index aeaf28bf8..b3d3af18d 100755 --- a/test/features/3.11.exp +++ b/test/features/3.11.exp | |||
@@ -22,7 +22,7 @@ expect { | |||
22 | } | 22 | } |
23 | sleep 1 | 23 | sleep 1 |
24 | 24 | ||
25 | send -- "ls -l ~ | grep xy76_u9\r" | 25 | send -- "ls -l ~ | grep firejail-xy76_u9\r" |
26 | expect { | 26 | expect { |
27 | timeout {puts "TESTING ERROR 1\n";exit} | 27 | timeout {puts "TESTING ERROR 1\n";exit} |
28 | "drwx------" | 28 | "drwx------" |
@@ -71,7 +71,7 @@ if { $overlay == "overlay" } { | |||
71 | } | 71 | } |
72 | sleep 1 | 72 | sleep 1 |
73 | 73 | ||
74 | send -- "ls -l ~ | grep xy76_u9\r" | 74 | send -- "ls -l ~ | grep firejail-xy76_u9\r" |
75 | expect { | 75 | expect { |
76 | timeout {puts "TESTING ERROR 11\n";exit} | 76 | timeout {puts "TESTING ERROR 11\n";exit} |
77 | "drwx------" | 77 | "drwx------" |
@@ -123,7 +123,7 @@ if { $chroot == "chroot" } { | |||
123 | } | 123 | } |
124 | sleep 1 | 124 | sleep 1 |
125 | 125 | ||
126 | send -- "ls -l ~ | grep xy76_u9\r" | 126 | send -- "ls -l ~ | grep firejail-xy76_u9\r" |
127 | expect { | 127 | expect { |
128 | timeout {puts "TESTING ERROR 21\n";exit} | 128 | timeout {puts "TESTING ERROR 21\n";exit} |
129 | "drwx------" | 129 | "drwx------" |
@@ -162,3 +162,4 @@ if { $chroot == "chroot" } { | |||
162 | 162 | ||
163 | 163 | ||
164 | puts "\nall done\n" | 164 | puts "\nall done\n" |
165 | |||
diff --git a/test/features/3.4.exp b/test/features/3.4.exp index 996312334..3f316af5b 100755 --- a/test/features/3.4.exp +++ b/test/features/3.4.exp | |||
@@ -53,7 +53,7 @@ expect { | |||
53 | ".Xauthority" | 53 | ".Xauthority" |
54 | } | 54 | } |
55 | 55 | ||
56 | send -- "ls -al | grep config\r" | 56 | send -- "ls -al | grep .config\r" |
57 | expect { | 57 | expect { |
58 | timeout {puts "TESTING ERROR 1.8\n";exit} | 58 | timeout {puts "TESTING ERROR 1.8\n";exit} |
59 | "netblue" | 59 | "netblue" |
@@ -117,7 +117,7 @@ if { $overlay == "overlay" } { | |||
117 | ".Xauthority" | 117 | ".Xauthority" |
118 | } | 118 | } |
119 | 119 | ||
120 | send -- "ls -al | grep config\r" | 120 | send -- "ls -al | grep .config\r" |
121 | expect { | 121 | expect { |
122 | timeout {puts "TESTING ERROR 3.8\n";exit} | 122 | timeout {puts "TESTING ERROR 3.8\n";exit} |
123 | "netblue" | 123 | "netblue" |
@@ -181,7 +181,7 @@ if { $chroot == "chroot" } { | |||
181 | ".Xauthority" | 181 | ".Xauthority" |
182 | } | 182 | } |
183 | 183 | ||
184 | send -- "ls -al | grep config\r" | 184 | send -- "ls -al | grep .config\r" |
185 | expect { | 185 | expect { |
186 | timeout {puts "TESTING ERROR 5.8\n";exit} | 186 | timeout {puts "TESTING ERROR 5.8\n";exit} |
187 | "netblue" | 187 | "netblue" |
diff --git a/test/features/3.5.exp b/test/features/3.5.exp index d190ef36f..35de90429 100755 --- a/test/features/3.5.exp +++ b/test/features/3.5.exp | |||
@@ -19,10 +19,10 @@ expect { | |||
19 | } | 19 | } |
20 | sleep 1 | 20 | sleep 1 |
21 | 21 | ||
22 | send -- "ls -al /dev | wc -l\r" | 22 | send -- "ls -l /dev | wc -l\r" |
23 | expect { | 23 | expect { |
24 | timeout {puts "TESTING ERROR 1.1\n";exit} | 24 | timeout {puts "TESTING ERROR 1.1\n";exit} |
25 | "14" | 25 | "12" |
26 | } | 26 | } |
27 | 27 | ||
28 | after 100 | 28 | after 100 |
@@ -40,10 +40,10 @@ if { $overlay == "overlay" } { | |||
40 | } | 40 | } |
41 | sleep 1 | 41 | sleep 1 |
42 | 42 | ||
43 | send -- "ls -al /dev | wc -l\r" | 43 | send -- "ls -l /dev | wc -l\r" |
44 | expect { | 44 | expect { |
45 | timeout {puts "TESTING ERROR 3.1\n";exit} | 45 | timeout {puts "TESTING ERROR 3.1\n";exit} |
46 | "13" | 46 | "12" |
47 | } | 47 | } |
48 | 48 | ||
49 | after 100 | 49 | after 100 |
@@ -62,10 +62,10 @@ if { $chroot == "chroot" } { | |||
62 | } | 62 | } |
63 | sleep 1 | 63 | sleep 1 |
64 | 64 | ||
65 | send -- "ls -al /dev | wc -l\r" | 65 | send -- "ls -l /dev | wc -l\r" |
66 | expect { | 66 | expect { |
67 | timeout {puts "TESTING ERROR 5.1\n";exit} | 67 | timeout {puts "TESTING ERROR 5.1\n";exit} |
68 | "13" | 68 | "12" |
69 | } | 69 | } |
70 | 70 | ||
71 | after 100 | 71 | after 100 |
diff --git a/test/features/3.9.exp b/test/features/3.9.exp index 1dc556d78..a1797804f 100755 --- a/test/features/3.9.exp +++ b/test/features/3.9.exp | |||
@@ -12,7 +12,7 @@ set chroot [lindex $argv 1] | |||
12 | # | 12 | # |
13 | # N | 13 | # N |
14 | # | 14 | # |
15 | send -- "firejail --noprofile --whitelist=/dev/tty --whitelist=/dev/shm --whitelist=/dev/null\r" | 15 | send -- "firejail --noprofile --whitelist=/dev/tty --whitelist=/dev/null\r" |
16 | expect { | 16 | expect { |
17 | timeout {puts "TESTING ERROR 0\n";exit} | 17 | timeout {puts "TESTING ERROR 0\n";exit} |
18 | "Child process initialized" | 18 | "Child process initialized" |
@@ -22,7 +22,7 @@ sleep 1 | |||
22 | send -- "ls -l /dev | wc -l\r" | 22 | send -- "ls -l /dev | wc -l\r" |
23 | expect { | 23 | expect { |
24 | timeout {puts "TESTING ERROR 1.1\n";exit} | 24 | timeout {puts "TESTING ERROR 1.1\n";exit} |
25 | "4" | 25 | "3" |
26 | } | 26 | } |
27 | 27 | ||
28 | 28 | ||
@@ -35,7 +35,7 @@ sleep 1 | |||
35 | # O | 35 | # O |
36 | # | 36 | # |
37 | if { $overlay == "overlay" } { | 37 | if { $overlay == "overlay" } { |
38 | send -- "firejail --noprofile --overlay --whitelist=/dev/tty --whitelist=/dev/shm --whitelist=/dev/null\r" | 38 | send -- "firejail --noprofile --overlay --whitelist=/dev/tty --whitelist=/dev/null\r" |
39 | expect { | 39 | expect { |
40 | timeout {puts "TESTING ERROR 2\n";exit} | 40 | timeout {puts "TESTING ERROR 2\n";exit} |
41 | "Child process initialized" | 41 | "Child process initialized" |
@@ -45,7 +45,7 @@ if { $overlay == "overlay" } { | |||
45 | send -- "ls -l /dev | wc -l\r" | 45 | send -- "ls -l /dev | wc -l\r" |
46 | expect { | 46 | expect { |
47 | timeout {puts "TESTING ERROR 3.1\n";exit} | 47 | timeout {puts "TESTING ERROR 3.1\n";exit} |
48 | "4" | 48 | "3" |
49 | } | 49 | } |
50 | 50 | ||
51 | 51 | ||
@@ -58,7 +58,7 @@ if { $overlay == "overlay" } { | |||
58 | # C | 58 | # C |
59 | # | 59 | # |
60 | if { $chroot == "chroot" } { | 60 | if { $chroot == "chroot" } { |
61 | send -- "firejail --noprofile --chroot=/tmp/chroot --whitelist=/dev/tty --whitelist=/dev/shm --whitelist=/dev/null\r" | 61 | send -- "firejail --noprofile --chroot=/tmp/chroot --whitelist=/dev/tty --whitelist=/dev/null\r" |
62 | expect { | 62 | expect { |
63 | timeout {puts "TESTING ERROR 4\n";exit} | 63 | timeout {puts "TESTING ERROR 4\n";exit} |
64 | "Child process initialized" | 64 | "Child process initialized" |
@@ -68,7 +68,7 @@ if { $chroot == "chroot" } { | |||
68 | send -- "ls -l /dev | wc -l\r" | 68 | send -- "ls -l /dev | wc -l\r" |
69 | expect { | 69 | expect { |
70 | timeout {puts "TESTING ERROR 5.1\n";exit} | 70 | timeout {puts "TESTING ERROR 5.1\n";exit} |
71 | "4" | 71 | "3" |
72 | } | 72 | } |
73 | 73 | ||
74 | after 100 | 74 | after 100 |
diff --git a/test/test.sh b/test/test.sh index 923a9b390..48f74a0ed 100755 --- a/test/test.sh +++ b/test/test.sh | |||
@@ -6,37 +6,37 @@ | |||
6 | 6 | ||
7 | ./fscheck.sh | 7 | ./fscheck.sh |
8 | 8 | ||
9 | echo "TESTING: nice" | 9 | echo "TESTING: nice (nice.exp)" |
10 | ./nice.exp | 10 | ./nice.exp |
11 | 11 | ||
12 | echo "TESTING: protocol" | 12 | echo "TESTING: protocol (protocol.exp)" |
13 | ./protocol.exp | 13 | ./protocol.exp |
14 | 14 | ||
15 | echo "TESTING: invalid filename" | 15 | echo "TESTING: invalid filename (invalid_filename.exp)" |
16 | ./invalid_filename.exp | 16 | ./invalid_filename.exp |
17 | 17 | ||
18 | echo "TESTING: environment variables" | 18 | echo "TESTING: environment variables (env.exp)" |
19 | ./env.exp | 19 | ./env.exp |
20 | 20 | ||
21 | echo "TESTING: whitelist empty" | 21 | echo "TESTING: whitelist empty (whitelist-empty.exp)" |
22 | ./whitelist-empty.exp | 22 | ./whitelist-empty.exp |
23 | 23 | ||
24 | echo "TESTING: ignore command" | 24 | echo "TESTING: ignore command (ignore.exp)" |
25 | ./ignore.exp | 25 | ./ignore.exp |
26 | 26 | ||
27 | echo "TESTING: private-etc" | 27 | echo "TESTING: private-etc (private-etc.exp)" |
28 | ./private-etc.exp | 28 | ./private-etc.exp |
29 | 29 | ||
30 | echo "TESTING: private-bin" | 30 | echo "TESTING: private-bin (private-bin.exp)" |
31 | ./private-bin.exp | 31 | ./private-bin.exp |
32 | 32 | ||
33 | echo "TESTING: private whitelist" | 33 | echo "TESTING: private whitelist (private-whitelist.exp)" |
34 | ./private-whitelist.exp | 34 | ./private-whitelist.exp |
35 | 35 | ||
36 | sleep 1 | 36 | sleep 1 |
37 | rm -fr dir\ with\ space | 37 | rm -fr dir\ with\ space |
38 | mkdir dir\ with\ space | 38 | mkdir dir\ with\ space |
39 | echo "TESTING: blacklist" | 39 | echo "TESTING: blacklist (blacklist.exp)" |
40 | ./blacklist.exp | 40 | ./blacklist.exp |
41 | sleep 1 | 41 | sleep 1 |
42 | rm -fr dir\ with\ space | 42 | rm -fr dir\ with\ space |
@@ -44,31 +44,31 @@ rm -fr dir\ with\ space | |||
44 | ln -s auto auto2 | 44 | ln -s auto auto2 |
45 | ln -s /bin auto3 | 45 | ln -s /bin auto3 |
46 | ln -s /usr/bin auto4 | 46 | ln -s /usr/bin auto4 |
47 | echo "TESTING: blacklist directory link" | 47 | echo "TESTING: blacklist directory link (blacklist-link.exp)" |
48 | ./blacklist-link.exp | 48 | ./blacklist-link.exp |
49 | rm -fr auto2 | 49 | rm -fr auto2 |
50 | rm -fr auto3 | 50 | rm -fr auto3 |
51 | rm -fr auto4 | 51 | rm -fr auto4 |
52 | 52 | ||
53 | 53 | ||
54 | echo "TESTING: version" | 54 | echo "TESTING: version (option_version.exp)" |
55 | ./option_version.exp | 55 | ./option_version.exp |
56 | 56 | ||
57 | echo "TESTING: help" | 57 | echo "TESTING: help (option_help.exp)" |
58 | ./option_help.exp | 58 | ./option_help.exp |
59 | 59 | ||
60 | echo "TESTING: man" | 60 | echo "TESTING: man (opton_man.exp)" |
61 | ./option_man.exp | 61 | ./option_man.exp |
62 | 62 | ||
63 | echo "TESTING: list" | 63 | echo "TESTING: list (option_list.exp)" |
64 | ./option_list.exp | 64 | ./option_list.exp |
65 | 65 | ||
66 | echo "TESTING: tree" | 66 | echo "TESTING: tree (option_tree.exp)" |
67 | ./option_tree.exp | 67 | ./option_tree.exp |
68 | 68 | ||
69 | if [ -f /proc/self/uid_map ]; | 69 | if [ -f /proc/self/uid_map ]; |
70 | then | 70 | then |
71 | echo "TESTING: noroot" | 71 | echo "TESTING: noroot (noroot.exp)" |
72 | ./noroot.exp | 72 | ./noroot.exp |
73 | else | 73 | else |
74 | echo "TESTING: user namespaces not available" | 74 | echo "TESTING: user namespaces not available" |
@@ -81,78 +81,78 @@ cp -- /bin/bash -testdir/. | |||
81 | ./doubledash.exp | 81 | ./doubledash.exp |
82 | rm -fr -- -testdir | 82 | rm -fr -- -testdir |
83 | 83 | ||
84 | echo "TESTING: trace1" | 84 | echo "TESTING: trace1 (option-trace.exp)" |
85 | ./option-trace.exp | 85 | ./option-trace.exp |
86 | 86 | ||
87 | echo "TESTING: trace2" | 87 | echo "TESTING: trace2 (trace.exp)" |
88 | rm -f index.html* | 88 | rm -f index.html* |
89 | ./trace.exp | 89 | ./trace.exp |
90 | rm -f index.html* | 90 | rm -f index.html* |
91 | 91 | ||
92 | echo "TESTING: extract command" | 92 | echo "TESTING: extract command (extract_command.exp)" |
93 | ./extract_command.exp | 93 | ./extract_command.exp |
94 | 94 | ||
95 | echo "TESTING: kmsg access" | 95 | echo "TESTING: kmsg access (kmsg.exp)" |
96 | ./kmsg.exp | 96 | ./kmsg.exp |
97 | 97 | ||
98 | echo "TESTING: rlimit" | 98 | echo "TESTING: rlimit (option_rlimit.exp)" |
99 | ./option_rlimit.exp | 99 | ./option_rlimit.exp |
100 | 100 | ||
101 | echo "TESTING: shutdown" | 101 | echo "TESTING: shutdown (option_shutdown.exp)" |
102 | ./option-shutdown.exp | 102 | ./option-shutdown.exp |
103 | 103 | ||
104 | echo "TESTING: join" | 104 | echo "TESTING: join (opton-join.exp)" |
105 | ./option-join.exp | 105 | ./option-join.exp |
106 | 106 | ||
107 | echo "TESTING: join profile" | 107 | echo "TESTING: join profile (option-join-profile.exp)" |
108 | ./option-join-profile.exp | 108 | ./option-join-profile.exp |
109 | 109 | ||
110 | echo "TESTING: firejail in firejail - single sandbox" | 110 | echo "TESTING: firejail in firejail - single sandbox (firejail-in-firejail.exp)" |
111 | ./firejail-in-firejail.exp | 111 | ./firejail-in-firejail.exp |
112 | 112 | ||
113 | echo "TESTING: firejail in firejail - force new sandbox" | 113 | echo "TESTING: firejail in firejail - force new sandbox (firejail-in-firejail2.exp)" |
114 | ./firejail-in-firejail2.exp | 114 | ./firejail-in-firejail2.exp |
115 | 115 | ||
116 | echo "TESTING: chroot overlay" | 116 | echo "TESTING: chroot overlay (opton_chroot_overlay.exp)" |
117 | ./option_chroot_overlay.exp | 117 | ./option_chroot_overlay.exp |
118 | 118 | ||
119 | echo "TESTING: blacklist directory" | 119 | echo "TESTING: blacklist directory (option_blacklist.exp)" |
120 | ./option_blacklist.exp | 120 | ./option_blacklist.exp |
121 | 121 | ||
122 | echo "TESTING: blacklist file" | 122 | echo "TESTING: blacklist file (opton_blacklist_file.exp)" |
123 | ./option_blacklist_file.exp | 123 | ./option_blacklist_file.exp |
124 | 124 | ||
125 | echo "TESTING: bind as user" | 125 | echo "TESTING: bind as user (option_bind_user.exp)" |
126 | ./option_bind_user.exp | 126 | ./option_bind_user.exp |
127 | 127 | ||
128 | if [ -d /home/bingo ]; | 128 | if [ -d /home/bingo ]; |
129 | then | 129 | then |
130 | echo "TESTING: home sanitize" | 130 | echo "TESTING: home sanitize (opton_version.exp)" |
131 | ./option_version.exp | 131 | ./option_version.exp |
132 | fi | 132 | fi |
133 | 133 | ||
134 | echo "TESTING: chroot as user" | 134 | echo "TESTING: chroot as user (fs_chroot.exp)" |
135 | ./fs_chroot.exp | 135 | ./fs_chroot.exp |
136 | 136 | ||
137 | echo "TESTING: /sys" | 137 | echo "TESTING: /sys (fs_sys.exp)" |
138 | ./fs_sys.exp | 138 | ./fs_sys.exp |
139 | 139 | ||
140 | echo "TESTING: readonly" | 140 | echo "TESTING: readonly (option_readonly.exp)" |
141 | ls -al > tmpreadonly | 141 | ls -al > tmpreadonly |
142 | ./option_readonly.exp | 142 | ./option_readonly.exp |
143 | sleep 5 | 143 | sleep 5 |
144 | rm -f tmpreadonly | 144 | rm -f tmpreadonly |
145 | 145 | ||
146 | echo "TESTING: zsh" | 146 | echo "TESTING: zsh (shell_zsh.exp)" |
147 | ./shell_zsh.exp | 147 | ./shell_zsh.exp |
148 | 148 | ||
149 | echo "TESTING: csh" | 149 | echo "TESTING: csh (shell_csh.exp)" |
150 | ./shell_csh.exp | 150 | ./shell_csh.exp |
151 | 151 | ||
152 | which dash | 152 | which dash |
153 | if [ "$?" -eq 0 ]; | 153 | if [ "$?" -eq 0 ]; |
154 | then | 154 | then |
155 | echo "TESTING: dash" | 155 | echo "TESTING: dash (shell_dash.exp)" |
156 | ./shell_dash.exp | 156 | ./shell_dash.exp |
157 | else | 157 | else |
158 | echo "TESTING: dash not found" | 158 | echo "TESTING: dash not found" |
@@ -160,151 +160,151 @@ fi | |||
160 | 160 | ||
161 | ./test-apps.sh | 161 | ./test-apps.sh |
162 | 162 | ||
163 | echo "TESTING: PID" | 163 | echo "TESTING: PID (pid.exp)" |
164 | ./pid.exp | 164 | ./pid.exp |
165 | 165 | ||
166 | echo "TESTING: output" | 166 | echo "TESTING: output (output.exp)" |
167 | ./output.exp | 167 | ./output.exp |
168 | 168 | ||
169 | echo "TESTING: profile no permissions" | 169 | echo "TESTING: profile no permissions (profile_noperm.exp)" |
170 | ./profile_noperm.exp | 170 | ./profile_noperm.exp |
171 | 171 | ||
172 | echo "TESTING: profile syntax" | 172 | echo "TESTING: profile syntax (profile_syntax.exp)" |
173 | ./profile_syntax.exp | 173 | ./profile_syntax.exp |
174 | 174 | ||
175 | echo "TESTING: profile syntax 2" | 175 | echo "TESTING: profile syntax 2 (profile_syntax2.exp)" |
176 | ./profile_syntax2.exp | 176 | ./profile_syntax2.exp |
177 | 177 | ||
178 | echo "TESTING: profile rlimit" | 178 | echo "TESTING: profile rlimit (profile_rlimit.exp)" |
179 | ./profile_rlimit.exp | 179 | ./profile_rlimit.exp |
180 | 180 | ||
181 | echo "TESTING: profile read-only" | 181 | echo "TESTING: profile read-only (profile_readonly.exp)" |
182 | ./profile_readonly.exp | 182 | ./profile_readonly.exp |
183 | 183 | ||
184 | echo "TESTING: private" | 184 | echo "TESTING: private (private.exp)" |
185 | ./private.exp `whoami` | 185 | ./private.exp `whoami` |
186 | 186 | ||
187 | echo "TESTING: private directory" | 187 | echo "TESTING: private directory (private_dir.exp)" |
188 | rm -fr dirprivate | 188 | rm -fr dirprivate |
189 | mkdir dirprivate | 189 | mkdir dirprivate |
190 | ./private_dir.exp | 190 | ./private_dir.exp |
191 | rm -fr dirprivate | 191 | rm -fr dirprivate |
192 | 192 | ||
193 | echo "TESTING: private directory profile" | 193 | echo "TESTING: private directory profile (private_dir_profile.exp)" |
194 | rm -fr dirprivate | 194 | rm -fr dirprivate |
195 | mkdir dirprivate | 195 | mkdir dirprivate |
196 | ./private_dir_profile.exp | 196 | ./private_dir_profile.exp |
197 | rm -fr dirprivate | 197 | rm -fr dirprivate |
198 | 198 | ||
199 | echo "TESTING: overlayfs" | 199 | echo "TESTING: overlayfs (fs_overlay.exp)" |
200 | ./fs_overlay.exp | 200 | ./fs_overlay.exp |
201 | 201 | ||
202 | echo "TESTING: seccomp debug" | 202 | echo "TESTING: seccomp debug (seccomp-debug.exp)" |
203 | ./seccomp-debug.exp | 203 | ./seccomp-debug.exp |
204 | 204 | ||
205 | echo "TESTING: seccomp errno" | 205 | echo "TESTING: seccomp errno (seccomp-errno.exp)" |
206 | ./seccomp-errno.exp | 206 | ./seccomp-errno.exp |
207 | 207 | ||
208 | echo "TESTING: seccomp su" | 208 | echo "TESTING: seccomp su (seccomp-su.exp)" |
209 | ./seccomp-su.exp | 209 | ./seccomp-su.exp |
210 | 210 | ||
211 | echo "TESTING: seccomp ptrace" | 211 | echo "TESTING: seccomp ptrace (seccomp-ptrace.exp)" |
212 | ./seccomp-ptrace.exp | 212 | ./seccomp-ptrace.exp |
213 | 213 | ||
214 | echo "TESTING: seccomp chmod - seccomp lists" | 214 | echo "TESTING: seccomp chmod - seccomp lists (seccomp-chmod.exp)" |
215 | ./seccomp-chmod.exp | 215 | ./seccomp-chmod.exp |
216 | 216 | ||
217 | echo "TESTING: seccomp chmod profile - seccomp lists" | 217 | echo "TESTING: seccomp chmod profile - seccomp lists (seccomp-chmod-profile.exp)" |
218 | ./seccomp-chmod-profile.exp | 218 | ./seccomp-chmod-profile.exp |
219 | 219 | ||
220 | echo "TESTING: seccomp empty" | 220 | echo "TESTING: seccomp empty (seccomp-empty.exp)" |
221 | ./seccomp-empty.exp | 221 | ./seccomp-empty.exp |
222 | 222 | ||
223 | echo "TESTING: seccomp bad empty" | 223 | echo "TESTING: seccomp bad empty (seccomp-bad-empty.exp)" |
224 | ./seccomp-bad-empty.exp | 224 | ./seccomp-bad-empty.exp |
225 | 225 | ||
226 | echo "TESTING: seccomp dual filter" | 226 | echo "TESTING: seccomp dual filter (seccomp-dualfilter.exp)" |
227 | ./seccomp-dualfilter.exp | 227 | ./seccomp-dualfilter.exp |
228 | 228 | ||
229 | echo "TESTING: read/write /var/tmp" | 229 | echo "TESTING: read/write /var/tmp (fs_var_tmp.exp)" |
230 | ./fs_var_tmp.exp | 230 | ./fs_var_tmp.exp |
231 | 231 | ||
232 | echo "TESTING: read/write /var/lock" | 232 | echo "TESTING: read/write /var/lock (fs_var_lock.exp)" |
233 | ./fs_var_lock.exp | 233 | ./fs_var_lock.exp |
234 | 234 | ||
235 | echo "TESTING: read/write /dev/shm" | 235 | echo "TESTING: read/write /dev/shm (fs_dev_shm.exp)" |
236 | ./fs_dev_shm.exp | 236 | ./fs_dev_shm.exp |
237 | 237 | ||
238 | echo "TESTING: quiet" | 238 | echo "TESTING: quiet (quiet.exp)" |
239 | ./quiet.exp | 239 | ./quiet.exp |
240 | 240 | ||
241 | echo "TESTING: IPv6 support" | 241 | echo "TESTING: IPv6 support (ip6.exp)" |
242 | ./ip6.exp | 242 | ./ip6.exp |
243 | 243 | ||
244 | echo "TESTING: local network" | 244 | echo "TESTING: local network (net_local.exp)" |
245 | ./net_local.exp | 245 | ./net_local.exp |
246 | 246 | ||
247 | echo "TESTING: no network" | 247 | echo "TESTING: no network (net_none.exp)" |
248 | ./net_none.exp | 248 | ./net_none.exp |
249 | 249 | ||
250 | echo "TESTING: network IP" | 250 | echo "TESTING: network IP (net_ip.exp)" |
251 | ./net_ip.exp | 251 | ./net_ip.exp |
252 | 252 | ||
253 | echo "TESTING: network MAC" | 253 | echo "TESTING: network MAC (net_mac.exp)" |
254 | sleep 2 | 254 | sleep 2 |
255 | ./net_mac.exp | 255 | ./net_mac.exp |
256 | 256 | ||
257 | echo "TESTING: network MTU" | 257 | echo "TESTING: network MTU (net_mtu.exp)" |
258 | ./net_mtu.exp | 258 | ./net_mtu.exp |
259 | 259 | ||
260 | echo "TESTING: network hostname" | 260 | echo "TESTING: network hostname (hostname.exp)" |
261 | ./hostname.exp | 261 | ./hostname.exp |
262 | 262 | ||
263 | echo "TESTING: network bad IP" | 263 | echo "TESTING: network bad IP (net_badip.exp)" |
264 | ./net_badip.exp | 264 | ./net_badip.exp |
265 | 265 | ||
266 | echo "TESTING: network no IP test 1" | 266 | echo "TESTING: network no IP test 1 (net_noip.exp)" |
267 | ./net_noip.exp | 267 | ./net_noip.exp |
268 | 268 | ||
269 | echo "TESTING: network no IP test 2" | 269 | echo "TESTING: network no IP test 2 (net_noip2.exp)" |
270 | ./net_noip2.exp | 270 | ./net_noip2.exp |
271 | 271 | ||
272 | echo "TESTING: network default gateway test 1" | 272 | echo "TESTING: network default gateway test 1 (net_defaultgw.exp)" |
273 | ./net_defaultgw.exp | 273 | ./net_defaultgw.exp |
274 | 274 | ||
275 | echo "TESTING: network default gateway test 2" | 275 | echo "TESTING: network default gateway test 2 (net_defaultgw2.exp)" |
276 | ./net_defaultgw2.exp | 276 | ./net_defaultgw2.exp |
277 | 277 | ||
278 | echo "TESTING: network default gateway test 3" | 278 | echo "TESTING: network default gateway test 3 (net_defaultgw3.exp)" |
279 | ./net_defaultgw3.exp | 279 | ./net_defaultgw3.exp |
280 | 280 | ||
281 | echo "TESTING: netfilter" | 281 | echo "TESTING: netfilter (net_netfilter.exp)" |
282 | ./net_netfilter.exp | 282 | ./net_netfilter.exp |
283 | 283 | ||
284 | echo "TESTING: 4 bridges ARP" | 284 | echo "TESTING: 4 bridges ARP (4bridges_arp.exp)" |
285 | ./4bridges_arp.exp | 285 | ./4bridges_arp.exp |
286 | 286 | ||
287 | echo "TESTING: 4 bridges IP" | 287 | echo "TESTING: 4 bridges IP (4bridges_ip.exp)" |
288 | ./4bridges_ip.exp | 288 | ./4bridges_ip.exp |
289 | 289 | ||
290 | echo "TESTING: login SSH" | 290 | echo "TESTING: login SSH (login_ssh.exp)" |
291 | ./login_ssh.exp | 291 | ./login_ssh.exp |
292 | 292 | ||
293 | echo "TESTING: ARP" | 293 | echo "TESTING: ARP (net_arp.exp)" |
294 | ./net_arp.exp | 294 | ./net_arp.exp |
295 | 295 | ||
296 | echo "TESTING: DNS" | 296 | echo "TESTING: DNS (dns.exp)" |
297 | ./dns.exp | 297 | ./dns.exp |
298 | 298 | ||
299 | echo "TESTING: firemon --arp" | 299 | echo "TESTING: firemon --arp (firemon-arp.exp)" |
300 | ./firemon-arp.exp | 300 | ./firemon-arp.exp |
301 | 301 | ||
302 | echo "TESTING: firemon --route" | 302 | echo "TESTING: firemon --route (firemon-route.exp)" |
303 | ./firemon-route.exp | 303 | ./firemon-route.exp |
304 | 304 | ||
305 | echo "TESTING: firemon --seccomp" | 305 | echo "TESTING: firemon --seccomp (firemon-seccomp.exp)" |
306 | ./firemon-seccomp.exp | 306 | ./firemon-seccomp.exp |
307 | 307 | ||
308 | echo "TESTING: firemon --caps" | 308 | echo "TESTING: firemon --caps (firemon-caps.exp)" |
309 | ./firemon-caps.exp | 309 | ./firemon-caps.exp |
310 | 310 | ||