diff options
Diffstat (limited to 'test/features')
-rwxr-xr-x | test/features/1.1.exp | 79 | ||||
-rwxr-xr-x | test/features/1.10.exp | 82 | ||||
-rwxr-xr-x | test/features/1.2.exp | 143 | ||||
-rwxr-xr-x | test/features/1.4.exp | 116 | ||||
-rwxr-xr-x | test/features/1.5.exp | 79 | ||||
-rwxr-xr-x | test/features/1.6.exp | 79 | ||||
-rwxr-xr-x | test/features/1.7.exp | 81 | ||||
-rwxr-xr-x | test/features/1.8.exp | 169 | ||||
-rwxr-xr-x | test/features/2.1.exp | 127 | ||||
-rwxr-xr-x | test/features/2.2.exp | 103 | ||||
-rwxr-xr-x | test/features/2.3.exp | 295 | ||||
-rwxr-xr-x | test/features/2.4.exp | 239 | ||||
-rwxr-xr-x | test/features/2.5.exp | 114 | ||||
-rwxr-xr-x | test/features/2.6.exp | 77 | ||||
-rwxr-xr-x | test/features/3.1.exp | 167 | ||||
-rwxr-xr-x | test/features/3.10.exp | 187 | ||||
-rwxr-xr-x | test/features/3.11.exp | 174 | ||||
-rw-r--r-- | test/features/3.11.profile | 2 | ||||
-rwxr-xr-x | test/features/3.2.exp | 82 | ||||
-rwxr-xr-x | test/features/3.3.exp | 78 | ||||
-rwxr-xr-x | test/features/3.4.exp | 208 | ||||
-rwxr-xr-x | test/features/3.5.exp | 83 | ||||
-rwxr-xr-x | test/features/3.6.exp | 87 | ||||
-rwxr-xr-x | test/features/3.7.exp | 95 | ||||
-rwxr-xr-x | test/features/3.8.exp | 87 | ||||
-rwxr-xr-x | test/features/3.9.exp | 84 | ||||
-rw-r--r-- | test/features/features.txt | 61 | ||||
-rwxr-xr-x | test/features/test.sh | 119 |
28 files changed, 0 insertions, 3297 deletions
diff --git a/test/features/1.1.exp b/test/features/1.1.exp deleted file mode 100755 index 34159f114..000000000 --- a/test/features/1.1.exp +++ /dev/null | |||
@@ -1,79 +0,0 @@ | |||
1 | #!/usr/bin/expect -f | ||
2 | # This file is part of Firejail project | ||
3 | # Copyright (C) 2014-2023 Firejail Authors | ||
4 | # License GPL v2 | ||
5 | # | ||
6 | # disable /boot | ||
7 | # | ||
8 | |||
9 | set timeout 10 | ||
10 | spawn $env(SHELL) | ||
11 | match_max 100000 | ||
12 | set overlay [lindex $argv 0] | ||
13 | set chroot [lindex $argv 1] | ||
14 | |||
15 | # | ||
16 | # N | ||
17 | # | ||
18 | send -- "firejail --noprofile\r" | ||
19 | expect { | ||
20 | timeout {puts "TESTING ERROR 0\n";exit} | ||
21 | -re "Child process initialized in \[0-9\]+.\[0-9\]+ ms" | ||
22 | } | ||
23 | sleep 1 | ||
24 | |||
25 | send -- "ls -l /boot\r" | ||
26 | expect { | ||
27 | timeout {puts "TESTING ERROR 1\n";exit} | ||
28 | "Permission denied" | ||
29 | } | ||
30 | after 100 | ||
31 | send -- "exit\r" | ||
32 | sleep 1 | ||
33 | |||
34 | |||
35 | # | ||
36 | # O | ||
37 | # | ||
38 | if { $overlay == "overlay" } { | ||
39 | send -- "firejail --noprofile --overlay\r" | ||
40 | expect { | ||
41 | timeout {puts "TESTING ERROR 2\n";exit} | ||
42 | "overlay option is not available" {puts "grsecurity\n"; exit} | ||
43 | -re "Child process initialized in \[0-9\]+.\[0-9\]+ ms" {puts "normal system\n"} | ||
44 | } | ||
45 | sleep 1 | ||
46 | |||
47 | send -- "ls -l /boot\r" | ||
48 | expect { | ||
49 | timeout {puts "TESTING ERROR 3\n";exit} | ||
50 | "Permission denied" | ||
51 | } | ||
52 | after 100 | ||
53 | send -- "exit\r" | ||
54 | sleep 1 | ||
55 | } | ||
56 | |||
57 | # | ||
58 | # C | ||
59 | # | ||
60 | if { $chroot == "chroot" } { | ||
61 | send -- "firejail --noprofile --chroot=/tmp/chroot\r" | ||
62 | expect { | ||
63 | timeout {puts "TESTING ERROR 4\n";exit} | ||
64 | -re "Child process initialized in \[0-9\]+.\[0-9\]+ ms" | ||
65 | } | ||
66 | sleep 1 | ||
67 | |||
68 | send -- "ls -l /boot\r" | ||
69 | expect { | ||
70 | timeout {puts "TESTING ERROR 5\n";exit} | ||
71 | "Permission denied" | ||
72 | } | ||
73 | after 100 | ||
74 | send -- "exit\r" | ||
75 | sleep 1 | ||
76 | } | ||
77 | |||
78 | |||
79 | puts "\nall done\n" | ||
diff --git a/test/features/1.10.exp b/test/features/1.10.exp deleted file mode 100755 index 6744ce826..000000000 --- a/test/features/1.10.exp +++ /dev/null | |||
@@ -1,82 +0,0 @@ | |||
1 | #!/usr/bin/expect -f | ||
2 | # This file is part of Firejail project | ||
3 | # Copyright (C) 2014-2023 Firejail Authors | ||
4 | # License GPL v2 | ||
5 | # | ||
6 | # disable /selinux | ||
7 | # | ||
8 | |||
9 | set timeout 10 | ||
10 | spawn $env(SHELL) | ||
11 | match_max 100000 | ||
12 | set overlay [lindex $argv 0] | ||
13 | set chroot [lindex $argv 1] | ||
14 | |||
15 | # | ||
16 | # N | ||
17 | # | ||
18 | send -- "firejail --noprofile\r" | ||
19 | expect { | ||
20 | timeout {puts "TESTING ERROR 0\n";exit} | ||
21 | -re "Child process initialized in \[0-9\]+.\[0-9\]+ ms" | ||
22 | } | ||
23 | sleep 1 | ||
24 | |||
25 | send -- "ls -l /selinux\r" | ||
26 | expect { | ||
27 | timeout {puts "TESTING ERROR 1\n";exit} | ||
28 | "Permission denied" {puts "denied\n"} | ||
29 | "No such file or directory" {puts "no file\n"} | ||
30 | } | ||
31 | after 100 | ||
32 | send -- "exit\r" | ||
33 | sleep 1 | ||
34 | |||
35 | |||
36 | # | ||
37 | # O | ||
38 | # | ||
39 | if { $overlay == "overlay" } { | ||
40 | send -- "firejail --noprofile --overlay\r" | ||
41 | expect { | ||
42 | timeout {puts "TESTING ERROR 2\n";exit} | ||
43 | "overlay option is not available" {puts "grsecurity\n"; exit} | ||
44 | -re "Child process initialized in \[0-9\]+.\[0-9\]+ ms" {puts "normal system\n"} | ||
45 | } | ||
46 | sleep 1 | ||
47 | |||
48 | send -- "ls -l /selinux\r" | ||
49 | expect { | ||
50 | timeout {puts "TESTING ERROR 3\n";exit} | ||
51 | "Permission denied" {puts "denied\n"} | ||
52 | "No such file or directory" {puts "no file\n"} | ||
53 | } | ||
54 | after 100 | ||
55 | send -- "exit\r" | ||
56 | sleep 1 | ||
57 | } | ||
58 | |||
59 | # | ||
60 | # C | ||
61 | # | ||
62 | if { $chroot == "chroot" } { | ||
63 | send -- "firejail --noprofile --chroot=/tmp/chroot\r" | ||
64 | expect { | ||
65 | timeout {puts "TESTING ERROR 4\n";exit} | ||
66 | -re "Child process initialized in \[0-9\]+.\[0-9\]+ ms" | ||
67 | } | ||
68 | sleep 1 | ||
69 | |||
70 | send -- "ls -l /selinux\r" | ||
71 | expect { | ||
72 | timeout {puts "TESTING ERROR 5\n";exit} | ||
73 | "Permission denied" {puts "denied\n"} | ||
74 | "No such file or directory" {puts "no file\n"} | ||
75 | } | ||
76 | after 100 | ||
77 | send -- "exit\r" | ||
78 | sleep 1 | ||
79 | } | ||
80 | |||
81 | |||
82 | puts "\nall done\n" | ||
diff --git a/test/features/1.2.exp b/test/features/1.2.exp deleted file mode 100755 index 56750670d..000000000 --- a/test/features/1.2.exp +++ /dev/null | |||
@@ -1,143 +0,0 @@ | |||
1 | #!/usr/bin/expect -f | ||
2 | # This file is part of Firejail project | ||
3 | # Copyright (C) 2014-2023 Firejail Authors | ||
4 | # License GPL v2 | ||
5 | # | ||
6 | # new /proc | ||
7 | # | ||
8 | |||
9 | set timeout 10 | ||
10 | spawn $env(SHELL) | ||
11 | match_max 100000 | ||
12 | set overlay [lindex $argv 0] | ||
13 | set chroot [lindex $argv 1] | ||
14 | |||
15 | # | ||
16 | # N | ||
17 | # | ||
18 | send -- "firejail --noprofile\r" | ||
19 | expect { | ||
20 | timeout {puts "TESTING ERROR 0\n";exit} | ||
21 | -re "Child process initialized in \[0-9\]+.\[0-9\]+ ms" | ||
22 | } | ||
23 | sleep 1 | ||
24 | |||
25 | send -- "cat /proc/mounts | grep proc --color=never\r" | ||
26 | expect { | ||
27 | timeout {puts "TESTING ERROR 1.1\n";exit} | ||
28 | "proc /proc proc" | ||
29 | } | ||
30 | expect { | ||
31 | timeout {puts "TESTING ERROR 1.2\n";exit} | ||
32 | "proc /proc proc" | ||
33 | } | ||
34 | expect { | ||
35 | timeout {puts "TESTING ERROR 1.3\n";exit} | ||
36 | "proc /proc/sys proc" | ||
37 | } | ||
38 | expect { | ||
39 | timeout {puts "TESTING ERROR 1.4\n";exit} | ||
40 | "/proc/sysrq-trigger" | ||
41 | } | ||
42 | #expect { | ||
43 | # timeout {puts "TESTING ERROR 1.5\n";exit} | ||
44 | # "proc /proc/sys/kernel/hotplug" | ||
45 | #} | ||
46 | expect { | ||
47 | timeout {puts "TESTING ERROR 1.6\n";exit} | ||
48 | "/proc/irq" | ||
49 | } | ||
50 | expect { | ||
51 | timeout {puts "TESTING ERROR 1.7\n";exit} | ||
52 | "/proc/bus" | ||
53 | } | ||
54 | after 100 | ||
55 | send -- "exit\r" | ||
56 | sleep 1 | ||
57 | |||
58 | |||
59 | # | ||
60 | # O | ||
61 | # | ||
62 | if { $overlay == "overlay" } { | ||
63 | send -- "firejail --noprofile --overlay\r" | ||
64 | expect { | ||
65 | timeout {puts "TESTING ERROR 2\n";exit} | ||
66 | "overlay option is not available" {puts "grsecurity\n"; exit} | ||
67 | -re "Child process initialized in \[0-9\]+.\[0-9\]+ ms" {puts "normal system\n"} | ||
68 | } | ||
69 | sleep 1 | ||
70 | |||
71 | send -- "cat /proc/mounts | grep proc --color=never\r" | ||
72 | expect { | ||
73 | timeout {puts "TESTING ERROR 3.1\n";exit} | ||
74 | "proc /proc proc" | ||
75 | } | ||
76 | expect { | ||
77 | timeout {puts "TESTING ERROR 3.3\n";exit} | ||
78 | "proc /proc/sys proc" | ||
79 | } | ||
80 | expect { | ||
81 | timeout {puts "TESTING ERROR 3.4\n";exit} | ||
82 | "proc /proc/sysrq-trigger proc" | ||
83 | } | ||
84 | # expect { | ||
85 | # timeout {puts "TESTING ERROR 3.5\n";exit} | ||
86 | # "proc /proc/sys/kernel/hotplug" | ||
87 | # } | ||
88 | expect { | ||
89 | timeout {puts "TESTING ERROR 3.6\n";exit} | ||
90 | "proc /proc/irq proc" | ||
91 | } | ||
92 | expect { | ||
93 | timeout {puts "TESTING ERROR 3.7\n";exit} | ||
94 | "proc /proc/bus proc" | ||
95 | } | ||
96 | after 100 | ||
97 | send -- "exit\r" | ||
98 | sleep 1 | ||
99 | } | ||
100 | |||
101 | # | ||
102 | # C | ||
103 | # | ||
104 | if { $chroot == "chroot" } { | ||
105 | send -- "firejail --noprofile --chroot=/tmp/chroot\r" | ||
106 | expect { | ||
107 | timeout {puts "TESTING ERROR 4\n";exit} | ||
108 | -re "Child process initialized in \[0-9\]+.\[0-9\]+ ms" | ||
109 | } | ||
110 | sleep 1 | ||
111 | |||
112 | send -- "cat /proc/mounts | grep proc --color=never\r" | ||
113 | expect { | ||
114 | timeout {puts "TESTING ERROR 5.1\n";exit} | ||
115 | "proc /proc proc" | ||
116 | } | ||
117 | expect { | ||
118 | timeout {puts "TESTING ERROR 5.3\n";exit} | ||
119 | "proc /proc/sys proc" | ||
120 | } | ||
121 | # expect { | ||
122 | # timeout {puts "TESTING ERROR 5.4\n";exit} | ||
123 | # "proc /proc/sysrq-trigger proc" | ||
124 | # } | ||
125 | # expect { | ||
126 | # timeout {puts "TESTING ERROR 5.5\n";exit} | ||
127 | # "proc /proc/sys/kernel/hotplug" | ||
128 | # } | ||
129 | # expect { | ||
130 | # timeout {puts "TESTING ERROR 5.6\n";exit} | ||
131 | # "proc /proc/irq proc" | ||
132 | # } | ||
133 | # expect { | ||
134 | # timeout {puts "TESTING ERROR 5.7\n";exit} | ||
135 | # "proc /proc/bus proc" | ||
136 | # } | ||
137 | after 100 | ||
138 | send -- "exit\r" | ||
139 | sleep 1 | ||
140 | } | ||
141 | |||
142 | |||
143 | puts "\nall done\n" | ||
diff --git a/test/features/1.4.exp b/test/features/1.4.exp deleted file mode 100755 index f5db0c450..000000000 --- a/test/features/1.4.exp +++ /dev/null | |||
@@ -1,116 +0,0 @@ | |||
1 | #!/usr/bin/expect -f | ||
2 | # This file is part of Firejail project | ||
3 | # Copyright (C) 2014-2023 Firejail Authors | ||
4 | # License GPL v2 | ||
5 | # | ||
6 | # mask other users | ||
7 | # | ||
8 | |||
9 | set timeout 10 | ||
10 | spawn $env(SHELL) | ||
11 | match_max 100000 | ||
12 | set overlay [lindex $argv 0] | ||
13 | set chroot [lindex $argv 1] | ||
14 | |||
15 | # | ||
16 | # N | ||
17 | # | ||
18 | send -- "firejail --noprofile\r" | ||
19 | expect { | ||
20 | timeout {puts "TESTING ERROR 0\n";exit} | ||
21 | -re "Child process initialized in \[0-9\]+.\[0-9\]+ ms" | ||
22 | } | ||
23 | sleep 1 | ||
24 | |||
25 | send -- "ls -l /home | wc -l\r" | ||
26 | expect { | ||
27 | timeout {puts "TESTING ERROR 1\n";exit} | ||
28 | "2" | ||
29 | } | ||
30 | after 100 | ||
31 | send -- "cat /etc/passwd | grep 1001 | wc -l\r" | ||
32 | expect { | ||
33 | timeout {puts "TESTING ERROR 1.1\n";exit} | ||
34 | "0" | ||
35 | } | ||
36 | after 100 | ||
37 | send -- "cat /etc/group | grep 1001 | wc -l\r" | ||
38 | expect { | ||
39 | timeout {puts "TESTING ERROR 1.2\n";exit} | ||
40 | "0" | ||
41 | } | ||
42 | after 100 | ||
43 | |||
44 | send -- "exit\r" | ||
45 | sleep 1 | ||
46 | |||
47 | |||
48 | # | ||
49 | # O | ||
50 | # | ||
51 | if { $overlay == "overlay" } { | ||
52 | send -- "firejail --noprofile --overlay\r" | ||
53 | expect { | ||
54 | timeout {puts "TESTING ERROR 2\n";exit} | ||
55 | "overlay option is not available" {puts "grsecurity\n"; exit} | ||
56 | -re "Child process initialized in \[0-9\]+.\[0-9\]+ ms" {puts "normal system\n"} | ||
57 | } | ||
58 | sleep 1 | ||
59 | |||
60 | send -- "ls -l /home | wc -l\r" | ||
61 | expect { | ||
62 | timeout {puts "TESTING ERROR 3\n";exit} | ||
63 | "2" | ||
64 | } | ||
65 | after 100 | ||
66 | send -- "cat /etc/passwd | grep 1001 | wc -l\r" | ||
67 | expect { | ||
68 | timeout {puts "TESTING ERROR 3.1\n";exit} | ||
69 | "0" | ||
70 | } | ||
71 | after 100 | ||
72 | send -- "cat /etc/group | grep 1001 | wc -l\r" | ||
73 | expect { | ||
74 | timeout {puts "TESTING ERROR 3.2\n";exit} | ||
75 | "0" | ||
76 | } | ||
77 | after 100 | ||
78 | send -- "exit\r" | ||
79 | sleep 1 | ||
80 | } | ||
81 | |||
82 | # | ||
83 | # C | ||
84 | # | ||
85 | if { $chroot == "chroot" } { | ||
86 | send -- "firejail --noprofile --chroot=/tmp/chroot\r" | ||
87 | expect { | ||
88 | timeout {puts "TESTING ERROR 4\n";exit} | ||
89 | -re "Child process initialized in \[0-9\]+.\[0-9\]+ ms" | ||
90 | } | ||
91 | sleep 1 | ||
92 | |||
93 | send -- "ls -l /home | wc -l\r" | ||
94 | expect { | ||
95 | timeout {puts "TESTING ERROR 5\n";exit} | ||
96 | "2" | ||
97 | } | ||
98 | after 100 | ||
99 | send -- "cat /etc/passwd | grep 1001 | wc -l\r" | ||
100 | expect { | ||
101 | timeout {puts "TESTING ERROR 5.1\n";exit} | ||
102 | "0" | ||
103 | } | ||
104 | after 100 | ||
105 | send -- "cat /etc/group | grep 1001 | wc -l\r" | ||
106 | expect { | ||
107 | timeout {puts "TESTING ERROR 5.2\n";exit} | ||
108 | "0" | ||
109 | } | ||
110 | after 100 | ||
111 | send -- "exit\r" | ||
112 | sleep 1 | ||
113 | } | ||
114 | |||
115 | |||
116 | puts "\nall done\n" | ||
diff --git a/test/features/1.5.exp b/test/features/1.5.exp deleted file mode 100755 index 68709fcad..000000000 --- a/test/features/1.5.exp +++ /dev/null | |||
@@ -1,79 +0,0 @@ | |||
1 | #!/usr/bin/expect -f | ||
2 | # This file is part of Firejail project | ||
3 | # Copyright (C) 2014-2023 Firejail Authors | ||
4 | # License GPL v2 | ||
5 | # | ||
6 | # PID namespace | ||
7 | # | ||
8 | |||
9 | set timeout 10 | ||
10 | spawn $env(SHELL) | ||
11 | match_max 100000 | ||
12 | set overlay [lindex $argv 0] | ||
13 | set chroot [lindex $argv 1] | ||
14 | |||
15 | # | ||
16 | # N | ||
17 | # | ||
18 | send -- "firejail --noprofile\r" | ||
19 | expect { | ||
20 | timeout {puts "TESTING ERROR 0\n";exit} | ||
21 | -re "Child process initialized in \[0-9\]+.\[0-9\]+ ms" | ||
22 | } | ||
23 | sleep 1 | ||
24 | |||
25 | send -- "ps aux | wc -l \r" | ||
26 | expect { | ||
27 | timeout {puts "TESTING ERROR 1\n";exit} | ||
28 | "5" | ||
29 | } | ||
30 | after 100 | ||
31 | send -- "exit\r" | ||
32 | sleep 1 | ||
33 | |||
34 | |||
35 | # | ||
36 | # O | ||
37 | # | ||
38 | if { $overlay == "overlay" } { | ||
39 | send -- "firejail --noprofile --overlay\r" | ||
40 | expect { | ||
41 | timeout {puts "TESTING ERROR 2\n";exit} | ||
42 | "overlay option is not available" {puts "grsecurity\n"; exit} | ||
43 | -re "Child process initialized in \[0-9\]+.\[0-9\]+ ms" {puts "normal system\n"} | ||
44 | } | ||
45 | sleep 1 | ||
46 | |||
47 | send -- "ps aux | wc -l \r" | ||
48 | expect { | ||
49 | timeout {puts "TESTING ERROR 3\n";exit} | ||
50 | "5" | ||
51 | } | ||
52 | after 100 | ||
53 | send -- "exit\r" | ||
54 | sleep 1 | ||
55 | } | ||
56 | |||
57 | # | ||
58 | # C | ||
59 | # | ||
60 | if { $chroot == "chroot" } { | ||
61 | send -- "firejail --noprofile --chroot=/tmp/chroot\r" | ||
62 | expect { | ||
63 | timeout {puts "TESTING ERROR 4\n";exit} | ||
64 | -re "Child process initialized in \[0-9\]+.\[0-9\]+ ms" | ||
65 | } | ||
66 | sleep 1 | ||
67 | |||
68 | send -- "ps aux | wc -l \r" | ||
69 | expect { | ||
70 | timeout {puts "TESTING ERROR 5\n";exit} | ||
71 | "5" | ||
72 | } | ||
73 | after 100 | ||
74 | send -- "exit\r" | ||
75 | sleep 1 | ||
76 | } | ||
77 | |||
78 | |||
79 | puts "\nall done\n" | ||
diff --git a/test/features/1.6.exp b/test/features/1.6.exp deleted file mode 100755 index 0d0f08817..000000000 --- a/test/features/1.6.exp +++ /dev/null | |||
@@ -1,79 +0,0 @@ | |||
1 | #!/usr/bin/expect -f | ||
2 | # This file is part of Firejail project | ||
3 | # Copyright (C) 2014-2023 Firejail Authors | ||
4 | # License GPL v2 | ||
5 | # | ||
6 | # new /var/log | ||
7 | # | ||
8 | |||
9 | set timeout 10 | ||
10 | spawn $env(SHELL) | ||
11 | match_max 100000 | ||
12 | set overlay [lindex $argv 0] | ||
13 | set chroot [lindex $argv 1] | ||
14 | |||
15 | # | ||
16 | # N | ||
17 | # | ||
18 | send -- "firejail --noprofile\r" | ||
19 | expect { | ||
20 | timeout {puts "TESTING ERROR 0\n";exit} | ||
21 | -re "Child process initialized in \[0-9\]+.\[0-9\]+ ms" | ||
22 | } | ||
23 | sleep 1 | ||
24 | |||
25 | send -- "ls -l /var/log/syslog | wc -l\r" | ||
26 | expect { | ||
27 | timeout {puts "TESTING ERROR 1\n";exit} | ||
28 | "0" | ||
29 | } | ||
30 | after 100 | ||
31 | send -- "exit\r" | ||
32 | sleep 1 | ||
33 | |||
34 | |||
35 | # | ||
36 | # O | ||
37 | # | ||
38 | if { $overlay == "overlay" } { | ||
39 | send -- "firejail --noprofile --overlay\r" | ||
40 | expect { | ||
41 | timeout {puts "TESTING ERROR 2\n";exit} | ||
42 | "overlay option is not available" {puts "grsecurity\n"; exit} | ||
43 | -re "Child process initialized in \[0-9\]+.\[0-9\]+ ms" {puts "normal system\n"} | ||
44 | } | ||
45 | sleep 1 | ||
46 | |||
47 | send -- "ls -l /var/log/syslog | wc -l\r" | ||
48 | expect { | ||
49 | timeout {puts "TESTING ERROR 3\n";exit} | ||
50 | "0" | ||
51 | } | ||
52 | after 100 | ||
53 | send -- "exit\r" | ||
54 | sleep 1 | ||
55 | } | ||
56 | |||
57 | # | ||
58 | # C | ||
59 | # | ||
60 | if { $chroot == "chroot" } { | ||
61 | send -- "firejail --noprofile --chroot=/tmp/chroot\r" | ||
62 | expect { | ||
63 | timeout {puts "TESTING ERROR 4\n";exit} | ||
64 | -re "Child process initialized in \[0-9\]+.\[0-9\]+ ms" | ||
65 | } | ||
66 | sleep 1 | ||
67 | |||
68 | send -- "ls -l /var/log/syslog | wc -l\r" | ||
69 | expect { | ||
70 | timeout {puts "TESTING ERROR 5\n";exit} | ||
71 | "0" | ||
72 | } | ||
73 | after 100 | ||
74 | send -- "exit\r" | ||
75 | sleep 1 | ||
76 | } | ||
77 | |||
78 | |||
79 | puts "\nall done\n" | ||
diff --git a/test/features/1.7.exp b/test/features/1.7.exp deleted file mode 100755 index b3264970d..000000000 --- a/test/features/1.7.exp +++ /dev/null | |||
@@ -1,81 +0,0 @@ | |||
1 | #!/usr/bin/expect -f | ||
2 | # This file is part of Firejail project | ||
3 | # Copyright (C) 2014-2023 Firejail Authors | ||
4 | # License GPL v2 | ||
5 | # | ||
6 | # new /var/tmp | ||
7 | # | ||
8 | |||
9 | set timeout 10 | ||
10 | spawn $env(SHELL) | ||
11 | match_max 100000 | ||
12 | set overlay [lindex $argv 0] | ||
13 | set chroot [lindex $argv 1] | ||
14 | |||
15 | # | ||
16 | # N | ||
17 | # | ||
18 | send -- "touch /var/tmp/somefile\r" | ||
19 | sleep 1 | ||
20 | send -- "firejail --noprofile\r" | ||
21 | expect { | ||
22 | timeout {puts "TESTING ERROR 0\n";exit} | ||
23 | -re "Child process initialized in \[0-9\]+.\[0-9\]+ ms" | ||
24 | } | ||
25 | sleep 1 | ||
26 | |||
27 | send -- "ls -l /var/tmp/somefile | wc -l\r" | ||
28 | expect { | ||
29 | timeout {puts "TESTING ERROR 1\n";exit} | ||
30 | "0" | ||
31 | } | ||
32 | after 100 | ||
33 | send -- "exit\r" | ||
34 | sleep 1 | ||
35 | |||
36 | |||
37 | # | ||
38 | # O | ||
39 | # | ||
40 | if { $overlay == "overlay" } { | ||
41 | send -- "firejail --noprofile --overlay\r" | ||
42 | expect { | ||
43 | timeout {puts "TESTING ERROR 2\n";exit} | ||
44 | "overlay option is not available" {puts "grsecurity\n"; exit} | ||
45 | -re "Child process initialized in \[0-9\]+.\[0-9\]+ ms" {puts "normal system\n"} | ||
46 | } | ||
47 | sleep 1 | ||
48 | |||
49 | send -- "ls -l /var/tmp/somefile | wc -l\r" | ||
50 | expect { | ||
51 | timeout {puts "TESTING ERROR 3\n";exit} | ||
52 | "0" | ||
53 | } | ||
54 | after 100 | ||
55 | send -- "exit\r" | ||
56 | sleep 1 | ||
57 | } | ||
58 | |||
59 | # | ||
60 | # C | ||
61 | # | ||
62 | if { $chroot == "chroot" } { | ||
63 | send -- "firejail --noprofile --chroot=/tmp/chroot\r" | ||
64 | expect { | ||
65 | timeout {puts "TESTING ERROR 4\n";exit} | ||
66 | -re "Child process initialized in \[0-9\]+.\[0-9\]+ ms" | ||
67 | } | ||
68 | sleep 1 | ||
69 | |||
70 | send -- "ls -l /var/tmp/somefile | wc -l\r" | ||
71 | expect { | ||
72 | timeout {puts "TESTING ERROR 5\n";exit} | ||
73 | "0" | ||
74 | } | ||
75 | after 100 | ||
76 | send -- "exit\r" | ||
77 | sleep 1 | ||
78 | } | ||
79 | |||
80 | |||
81 | puts "\nall done\n" | ||
diff --git a/test/features/1.8.exp b/test/features/1.8.exp deleted file mode 100755 index 028077b6f..000000000 --- a/test/features/1.8.exp +++ /dev/null | |||
@@ -1,169 +0,0 @@ | |||
1 | #!/usr/bin/expect -f | ||
2 | # This file is part of Firejail project | ||
3 | # Copyright (C) 2014-2023 Firejail Authors | ||
4 | # License GPL v2 | ||
5 | # | ||
6 | # disable /etc/firejail and ~/.config/firejail | ||
7 | # | ||
8 | |||
9 | set timeout 10 | ||
10 | spawn $env(SHELL) | ||
11 | match_max 100000 | ||
12 | set overlay [lindex $argv 0] | ||
13 | set chroot [lindex $argv 1] | ||
14 | |||
15 | # | ||
16 | # N | ||
17 | # | ||
18 | sleep 1 | ||
19 | send -- "firejail --noprofile\r" | ||
20 | expect { | ||
21 | timeout {puts "TESTING ERROR 0\n";exit} | ||
22 | -re "Child process initialized in \[0-9\]+.\[0-9\]+ ms" | ||
23 | } | ||
24 | sleep 1 | ||
25 | |||
26 | send -- "ls ~/.config/firejail\r" | ||
27 | expect { | ||
28 | timeout {puts "TESTING ERROR 1.1\n";exit} | ||
29 | "Permission denied" | ||
30 | } | ||
31 | after 100 | ||
32 | send -- "ls /run/firejail/bandwidth\r" | ||
33 | expect { | ||
34 | timeout {puts "TESTING ERROR 1.2\n";exit} | ||
35 | "Permission denied" | ||
36 | } | ||
37 | after 100 | ||
38 | #send -- "ls /run/firejail/mnt\r" | ||
39 | #expect { | ||
40 | # timeout {puts "TESTING ERROR 1.3\n";exit} | ||
41 | # "Permission denied" | ||
42 | #} | ||
43 | #after 100 | ||
44 | send -- "ls /run/firejail/name\r" | ||
45 | expect { | ||
46 | timeout {puts "TESTING ERROR 1.4\n";exit} | ||
47 | "Permission denied" | ||
48 | } | ||
49 | after 100 | ||
50 | send -- "ls /run/firejail/network\r" | ||
51 | expect { | ||
52 | timeout {puts "TESTING ERROR 1.5\n";exit} | ||
53 | "Permission denied" | ||
54 | } | ||
55 | after 100 | ||
56 | send -- "ls /run/firejail/x11\r" | ||
57 | expect { | ||
58 | timeout {puts "TESTING ERROR 1.6\n";exit} | ||
59 | "Permission denied" | ||
60 | } | ||
61 | after 100 | ||
62 | send -- "exit\r" | ||
63 | sleep 1 | ||
64 | |||
65 | |||
66 | # | ||
67 | # O | ||
68 | # | ||
69 | if { $overlay == "overlay" } { | ||
70 | send -- "firejail --noprofile --overlay\r" | ||
71 | expect { | ||
72 | timeout {puts "TESTING ERROR 2\n";exit} | ||
73 | "overlay option is not available" {puts "grsecurity\n"; exit} | ||
74 | -re "Child process initialized in \[0-9\]+.\[0-9\]+ ms" {puts "normal system\n"} | ||
75 | } | ||
76 | sleep 1 | ||
77 | send -- "ls ~/.config/firejail\r" | ||
78 | expect { | ||
79 | timeout {puts "TESTING ERROR 3.1\n";exit} | ||
80 | "Permission denied" | ||
81 | } | ||
82 | after 100 | ||
83 | send -- "ls /run/firejail/bandwidth\r" | ||
84 | expect { | ||
85 | timeout {puts "TESTING ERROR 3.2\n";exit} | ||
86 | "Permission denied" | ||
87 | } | ||
88 | after 100 | ||
89 | #send -- "ls /run/firejail/mnt\r" | ||
90 | #expect { | ||
91 | # timeout {puts "TESTING ERROR 3.3\n";exit} | ||
92 | # "Permission denied" | ||
93 | #} | ||
94 | #after 100 | ||
95 | send -- "ls /run/firejail/name\r" | ||
96 | expect { | ||
97 | timeout {puts "TESTING ERROR 3.4\n";exit} | ||
98 | "Permission denied" | ||
99 | } | ||
100 | after 100 | ||
101 | send -- "ls /run/firejail/network\r" | ||
102 | expect { | ||
103 | timeout {puts "TESTING ERROR 3.5\n";exit} | ||
104 | "Permission denied" | ||
105 | } | ||
106 | after 100 | ||
107 | send -- "ls /run/firejail/x11\r" | ||
108 | expect { | ||
109 | timeout {puts "TESTING ERROR 3.6\n";exit} | ||
110 | "Permission denied" | ||
111 | } | ||
112 | after 100 | ||
113 | |||
114 | send -- "exit\r" | ||
115 | sleep 1 | ||
116 | } | ||
117 | |||
118 | # | ||
119 | # C | ||
120 | # | ||
121 | if { $chroot == "chroot" } { | ||
122 | send -- "firejail --noprofile --chroot=/tmp/chroot\r" | ||
123 | expect { | ||
124 | timeout {puts "TESTING ERROR 4\n";exit} | ||
125 | -re "Child process initialized in \[0-9\]+.\[0-9\]+ ms" | ||
126 | } | ||
127 | sleep 1 | ||
128 | send -- "ls ~/.config/firejail\r" | ||
129 | expect { | ||
130 | timeout {puts "TESTING ERROR 5.1\n";exit} | ||
131 | "Permission denied" | ||
132 | } | ||
133 | after 100 | ||
134 | send -- "ls /run/firejail/bandwidth\r" | ||
135 | expect { | ||
136 | timeout {puts "TESTING ERROR 5.2\n";exit} | ||
137 | "Permission denied" | ||
138 | } | ||
139 | after 100 | ||
140 | #send -- "ls /run/firejail/mnt\r" | ||
141 | #expect { | ||
142 | # timeout {puts "TESTING ERROR 5.3\n";exit} | ||
143 | # "Permission denied" | ||
144 | #} | ||
145 | #after 100 | ||
146 | send -- "ls /run/firejail/name\r" | ||
147 | expect { | ||
148 | timeout {puts "TESTING ERROR 5.4\n";exit} | ||
149 | "Permission denied" | ||
150 | } | ||
151 | after 100 | ||
152 | send -- "ls /run/firejail/network\r" | ||
153 | expect { | ||
154 | timeout {puts "TESTING ERROR 5.5\n";exit} | ||
155 | "Permission denied" | ||
156 | } | ||
157 | after 100 | ||
158 | send -- "ls /run/firejail/x11\r" | ||
159 | expect { | ||
160 | timeout {puts "TESTING ERROR 5.6\n";exit} | ||
161 | "Permission denied" | ||
162 | } | ||
163 | after 100 | ||
164 | send -- "exit\r" | ||
165 | sleep 1 | ||
166 | } | ||
167 | |||
168 | |||
169 | puts "\nall done\n" | ||
diff --git a/test/features/2.1.exp b/test/features/2.1.exp deleted file mode 100755 index 8f7ddce2c..000000000 --- a/test/features/2.1.exp +++ /dev/null | |||
@@ -1,127 +0,0 @@ | |||
1 | #!/usr/bin/expect -f | ||
2 | # This file is part of Firejail project | ||
3 | # Copyright (C) 2014-2023 Firejail Authors | ||
4 | # License GPL v2 | ||
5 | # | ||
6 | # hostname | ||
7 | # | ||
8 | |||
9 | set timeout 10 | ||
10 | spawn $env(SHELL) | ||
11 | match_max 100000 | ||
12 | set overlay [lindex $argv 0] | ||
13 | set chroot [lindex $argv 1] | ||
14 | |||
15 | # | ||
16 | # N | ||
17 | # | ||
18 | send -- "firejail --noprofile --hostname=bingo\r" | ||
19 | expect { | ||
20 | timeout {puts "TESTING ERROR 0\n";exit} | ||
21 | -re "Child process initialized in \[0-9\]+.\[0-9\]+ ms" | ||
22 | } | ||
23 | sleep 1 | ||
24 | |||
25 | send -- "hostname\r" | ||
26 | expect { | ||
27 | timeout {puts "TESTING ERROR 1\n";exit} | ||
28 | "bingo" | ||
29 | } | ||
30 | after 100 | ||
31 | send -- "cat /etc/hostname\r" | ||
32 | expect { | ||
33 | timeout {puts "TESTING ERROR 1.0\n";exit} | ||
34 | "bingo" | ||
35 | } | ||
36 | after 100 | ||
37 | send -- "getent hosts bingo\r" | ||
38 | expect { | ||
39 | timeout {puts "TESTING ERROR 1.1\n";exit} | ||
40 | "127.0.0.1" | ||
41 | } | ||
42 | expect { | ||
43 | timeout {puts "TESTING ERROR 1.2\n";exit} | ||
44 | "bingo" | ||
45 | } | ||
46 | after 100 | ||
47 | send -- "exit\r" | ||
48 | sleep 1 | ||
49 | |||
50 | |||
51 | # | ||
52 | # O | ||
53 | # | ||
54 | if { $overlay == "overlay" } { | ||
55 | send -- "firejail --noprofile --hostname=bingo --overlay\r" | ||
56 | expect { | ||
57 | timeout {puts "TESTING ERROR 2\n";exit} | ||
58 | "overlay option is not available" {puts "grsecurity\n"; exit} | ||
59 | -re "Child process initialized in \[0-9\]+.\[0-9\]+ ms" {puts "normal system\n"} | ||
60 | } | ||
61 | sleep 1 | ||
62 | |||
63 | send -- "hostname\r" | ||
64 | expect { | ||
65 | timeout {puts "TESTING ERROR 3\n";exit} | ||
66 | "bingo" | ||
67 | } | ||
68 | after 100 | ||
69 | send -- "cat /etc/hostname\r" | ||
70 | expect { | ||
71 | timeout {puts "TESTING ERROR 3.0\n";exit} | ||
72 | "bingo" | ||
73 | } | ||
74 | after 100 | ||
75 | send -- "getent hosts bingo\r" | ||
76 | expect { | ||
77 | timeout {puts "TESTING ERROR 3.1\n";exit} | ||
78 | "127.0.0.1" | ||
79 | } | ||
80 | expect { | ||
81 | timeout {puts "TESTING ERROR 3.2\n";exit} | ||
82 | "bingo" | ||
83 | } | ||
84 | after 100 | ||
85 | send -- "exit\r" | ||
86 | sleep 1 | ||
87 | } | ||
88 | |||
89 | # | ||
90 | # C | ||
91 | # | ||
92 | if { $chroot == "chroot" } { | ||
93 | send -- "firejail --noprofile --hostname=bingo --chroot=/tmp/chroot\r" | ||
94 | expect { | ||
95 | timeout {puts "TESTING ERROR 4\n";exit} | ||
96 | -re "Child process initialized in \[0-9\]+.\[0-9\]+ ms" | ||
97 | } | ||
98 | sleep 1 | ||
99 | |||
100 | send -- "hostname\r" | ||
101 | expect { | ||
102 | timeout {puts "TESTING ERROR 5\n";exit} | ||
103 | "bingo" | ||
104 | } | ||
105 | after 100 | ||
106 | send -- "cat /etc/hostname\r" | ||
107 | expect { | ||
108 | timeout {puts "TESTING ERROR 5.0\n";exit} | ||
109 | "bingo" | ||
110 | } | ||
111 | after 100 | ||
112 | send -- "getent hosts bingo\r" | ||
113 | expect { | ||
114 | timeout {puts "TESTING ERROR 5.1\n";exit} | ||
115 | "127.0.0.1" | ||
116 | } | ||
117 | expect { | ||
118 | timeout {puts "TESTING ERROR 5.2\n";exit} | ||
119 | "bingo" | ||
120 | } | ||
121 | after 100 | ||
122 | send -- "exit\r" | ||
123 | sleep 1 | ||
124 | } | ||
125 | |||
126 | |||
127 | puts "\nall done\n" | ||
diff --git a/test/features/2.2.exp b/test/features/2.2.exp deleted file mode 100755 index 94bd6f4db..000000000 --- a/test/features/2.2.exp +++ /dev/null | |||
@@ -1,103 +0,0 @@ | |||
1 | #!/usr/bin/expect -f | ||
2 | # This file is part of Firejail project | ||
3 | # Copyright (C) 2014-2023 Firejail Authors | ||
4 | # License GPL v2 | ||
5 | # | ||
6 | # DNS | ||
7 | # | ||
8 | |||
9 | set timeout 10 | ||
10 | spawn $env(SHELL) | ||
11 | match_max 100000 | ||
12 | set overlay [lindex $argv 0] | ||
13 | set chroot [lindex $argv 1] | ||
14 | |||
15 | # | ||
16 | # N | ||
17 | # | ||
18 | send -- "firejail --noprofile --dns=4.2.2.1\r" | ||
19 | expect { | ||
20 | timeout {puts "TESTING ERROR 0\n";exit} | ||
21 | -re "Child process initialized in \[0-9\]+.\[0-9\]+ ms" | ||
22 | } | ||
23 | sleep 1 | ||
24 | |||
25 | send -- "dig google.com\r" | ||
26 | expect { | ||
27 | timeout {puts "TESTING ERROR 1\n";exit} | ||
28 | "ANSWER SECTION" | ||
29 | } | ||
30 | expect { | ||
31 | timeout {puts "TESTING ERROR 1.1\n";exit} | ||
32 | "google.com" | ||
33 | } | ||
34 | expect { | ||
35 | timeout {puts "TESTING ERROR 1.3\n";exit} | ||
36 | "SERVER: 4.2.2.1" | ||
37 | } | ||
38 | after 100 | ||
39 | send -- "exit\r" | ||
40 | sleep 1 | ||
41 | |||
42 | |||
43 | # | ||
44 | # O | ||
45 | # | ||
46 | if { $overlay == "overlay" } { | ||
47 | send -- "firejail --noprofile --dns=4.2.2.1 --overlay\r" | ||
48 | expect { | ||
49 | timeout {puts "TESTING ERROR 2\n";exit} | ||
50 | "overlay option is not available" {puts "grsecurity\n"; exit} | ||
51 | -re "Child process initialized in \[0-9\]+.\[0-9\]+ ms" {puts "normal system\n"} | ||
52 | } | ||
53 | sleep 1 | ||
54 | |||
55 | send -- "dig google.com\r" | ||
56 | expect { | ||
57 | timeout {puts "TESTING ERROR 3\n";exit} | ||
58 | "ANSWER SECTION" | ||
59 | } | ||
60 | expect { | ||
61 | timeout {puts "TESTING ERROR 3.1\n";exit} | ||
62 | "google.com" | ||
63 | } | ||
64 | expect { | ||
65 | timeout {puts "TESTING ERROR 3.3\n";exit} | ||
66 | "SERVER: 4.2.2.1" | ||
67 | } | ||
68 | after 100 | ||
69 | send -- "exit\r" | ||
70 | sleep 1 | ||
71 | } | ||
72 | |||
73 | # | ||
74 | # C | ||
75 | # | ||
76 | if { $chroot == "chroot" } { | ||
77 | send -- "firejail --noprofile --dns=4.2.2.1 --chroot=/tmp/chroot\r" | ||
78 | expect { | ||
79 | timeout {puts "TESTING ERROR 4\n";exit} | ||
80 | -re "Child process initialized in \[0-9\]+.\[0-9\]+ ms" | ||
81 | } | ||
82 | sleep 1 | ||
83 | |||
84 | send -- "dig google.com\r" | ||
85 | expect { | ||
86 | timeout {puts "TESTING ERROR 5\n";exit} | ||
87 | "ANSWER SECTION" | ||
88 | } | ||
89 | expect { | ||
90 | timeout {puts "TESTING ERROR 5.1\n";exit} | ||
91 | "google.com" | ||
92 | } | ||
93 | expect { | ||
94 | timeout {puts "TESTING ERROR 5.3\n";exit} | ||
95 | "SERVER: 4.2.2.1" | ||
96 | } | ||
97 | after 100 | ||
98 | send -- "exit\r" | ||
99 | sleep 1 | ||
100 | } | ||
101 | |||
102 | |||
103 | puts "\nall done\n" | ||
diff --git a/test/features/2.3.exp b/test/features/2.3.exp deleted file mode 100755 index 1e27a7632..000000000 --- a/test/features/2.3.exp +++ /dev/null | |||
@@ -1,295 +0,0 @@ | |||
1 | #!/usr/bin/expect -f | ||
2 | # This file is part of Firejail project | ||
3 | # Copyright (C) 2014-2023 Firejail Authors | ||
4 | # License GPL v2 | ||
5 | # | ||
6 | # mac-vlan | ||
7 | # | ||
8 | |||
9 | set timeout 10 | ||
10 | spawn $env(SHELL) | ||
11 | match_max 100000 | ||
12 | set overlay [lindex $argv 0] | ||
13 | set chroot [lindex $argv 1] | ||
14 | |||
15 | # | ||
16 | # N | ||
17 | # | ||
18 | send -- "firejail --noprofile --net=eth0 --dns=8.8.8.8 --dns=8.8.4.4\r" | ||
19 | expect { | ||
20 | timeout {puts "TESTING ERROR 0\n";exit} | ||
21 | -re "Child process initialized in \[0-9\]+.\[0-9\]+ ms" | ||
22 | } | ||
23 | sleep 1 | ||
24 | |||
25 | send -- "dig google.com\r" | ||
26 | expect { | ||
27 | timeout {puts "TESTING ERROR 1\n";exit} | ||
28 | "ANSWER SECTION" | ||
29 | } | ||
30 | expect { | ||
31 | timeout {puts "TESTING ERROR 1.1\n";exit} | ||
32 | "google.com" | ||
33 | } | ||
34 | expect { | ||
35 | timeout {puts "TESTING ERROR 1.3\n";exit} | ||
36 | "SERVER:" | ||
37 | } | ||
38 | after 100 | ||
39 | |||
40 | send -- "/sbin/ifconfig\r" | ||
41 | expect { | ||
42 | timeout {puts "TESTING ERROR 1.4\n";exit} | ||
43 | "eth0" | ||
44 | } | ||
45 | expect { | ||
46 | timeout {puts "TESTING ERROR 1.5n";exit} | ||
47 | "Link" | ||
48 | } | ||
49 | expect { | ||
50 | timeout {puts "TESTING ERROR 1.6\n";exit} | ||
51 | "192.168.1" | ||
52 | } | ||
53 | expect { | ||
54 | timeout {puts "TESTING ERROR 1.7\n";exit} | ||
55 | "UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1" | ||
56 | } | ||
57 | after 100 | ||
58 | |||
59 | send -- "exit\r" | ||
60 | sleep 3 | ||
61 | |||
62 | send -- "firejail --noprofile --net=eth0 --ip=192.168.1.244 --dns=8.8.8.8 --dns=8.8.4.4\r" | ||
63 | expect { | ||
64 | timeout {puts "TESTING ERROR 0\n";exit} | ||
65 | -re "Child process initialized in \[0-9\]+.\[0-9\]+ ms" | ||
66 | } | ||
67 | sleep 1 | ||
68 | |||
69 | send -- "dig google.com\r" | ||
70 | expect { | ||
71 | timeout {puts "TESTING ERROR 1\n";exit} | ||
72 | "ANSWER SECTION" | ||
73 | } | ||
74 | expect { | ||
75 | timeout {puts "TESTING ERROR 1.1\n";exit} | ||
76 | "google.com" | ||
77 | } | ||
78 | expect { | ||
79 | timeout {puts "TESTING ERROR 1.3\n";exit} | ||
80 | "SERVER:" | ||
81 | } | ||
82 | after 100 | ||
83 | |||
84 | send -- "/sbin/ifconfig\r" | ||
85 | expect { | ||
86 | timeout {puts "TESTING ERROR 1.4\n";exit} | ||
87 | "eth0" | ||
88 | } | ||
89 | expect { | ||
90 | timeout {puts "TESTING ERROR 1.5n";exit} | ||
91 | "Link" | ||
92 | } | ||
93 | expect { | ||
94 | timeout {puts "TESTING ERROR 1.6\n";exit} | ||
95 | "192.168.1.244" | ||
96 | } | ||
97 | expect { | ||
98 | timeout {puts "TESTING ERROR 1.7\n";exit} | ||
99 | "UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1" | ||
100 | } | ||
101 | after 100 | ||
102 | |||
103 | send -- "exit\r" | ||
104 | sleep 3 | ||
105 | |||
106 | # | ||
107 | # O | ||
108 | # | ||
109 | if { $overlay == "overlay" } { | ||
110 | send -- "firejail --noprofile --net=eth0 --overlay --dns=8.8.8.8 --dns=8.8.4.4\r" | ||
111 | expect { | ||
112 | timeout {puts "TESTING ERROR 2\n";exit} | ||
113 | "overlay option is not available" {puts "grsecurity\n"; exit} | ||
114 | -re "Child process initialized in \[0-9\]+.\[0-9\]+ ms" {puts "normal system\n"} | ||
115 | } | ||
116 | sleep 1 | ||
117 | |||
118 | send -- "dig google.com\r" | ||
119 | expect { | ||
120 | timeout {puts "TESTING ERROR 3\n";exit} | ||
121 | "ANSWER SECTION" | ||
122 | } | ||
123 | expect { | ||
124 | timeout {puts "TESTING ERROR 3.1\n";exit} | ||
125 | "google.com" | ||
126 | } | ||
127 | expect { | ||
128 | timeout {puts "TESTING ERROR 3.3\n";exit} | ||
129 | "SERVER" | ||
130 | } | ||
131 | after 100 | ||
132 | |||
133 | send -- "/sbin/ifconfig\r" | ||
134 | expect { | ||
135 | timeout {puts "TESTING ERROR 3.4\n";exit} | ||
136 | "eth0" | ||
137 | } | ||
138 | expect { | ||
139 | timeout {puts "TESTING ERROR 3.5\n";exit} | ||
140 | "Link" | ||
141 | } | ||
142 | expect { | ||
143 | timeout {puts "TESTING ERROR 3.6\n";exit} | ||
144 | "192.168.1" | ||
145 | } | ||
146 | expect { | ||
147 | timeout {puts "TESTING ERROR 3.7\n";exit} | ||
148 | "UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1" | ||
149 | } | ||
150 | after 100 | ||
151 | |||
152 | send -- "exit\r" | ||
153 | sleep 3 | ||
154 | |||
155 | send -- "firejail --noprofile --net=eth0 --ip=192.168.1.244 --overlay --dns=8.8.8.8 --dns=8.8.4.4\r" | ||
156 | expect { | ||
157 | timeout {puts "TESTING ERROR 2\n";exit} | ||
158 | -re "Child process initialized in \[0-9\]+.\[0-9\]+ ms" | ||
159 | } | ||
160 | sleep 1 | ||
161 | |||
162 | send -- "dig google.com\r" | ||
163 | expect { | ||
164 | timeout {puts "TESTING ERROR 3\n";exit} | ||
165 | "ANSWER SECTION" | ||
166 | } | ||
167 | expect { | ||
168 | timeout {puts "TESTING ERROR 3.1\n";exit} | ||
169 | "google.com" | ||
170 | } | ||
171 | expect { | ||
172 | timeout {puts "TESTING ERROR 3.3\n";exit} | ||
173 | "SERVER" | ||
174 | } | ||
175 | after 100 | ||
176 | |||
177 | send -- "/sbin/ifconfig\r" | ||
178 | expect { | ||
179 | timeout {puts "TESTING ERROR 3.4\n";exit} | ||
180 | "eth0" | ||
181 | } | ||
182 | expect { | ||
183 | timeout {puts "TESTING ERROR 3.5\n";exit} | ||
184 | "Link" | ||
185 | } | ||
186 | expect { | ||
187 | timeout {puts "TESTING ERROR 3.6\n";exit} | ||
188 | "192.168.1.244" | ||
189 | } | ||
190 | expect { | ||
191 | timeout {puts "TESTING ERROR 3.7\n";exit} | ||
192 | "UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1" | ||
193 | } | ||
194 | after 100 | ||
195 | |||
196 | send -- "exit\r" | ||
197 | sleep 3 | ||
198 | } | ||
199 | |||
200 | |||
201 | # | ||
202 | # C | ||
203 | # | ||
204 | if { $chroot == "chroot" } { | ||
205 | send -- "firejail --noprofile --net=eth0 --chroot=/tmp/chroot --dns=8.8.8.8 --dns=8.8.4.4\r" | ||
206 | expect { | ||
207 | timeout {puts "TESTING ERROR 4\n";exit} | ||
208 | -re "Child process initialized in \[0-9\]+.\[0-9\]+ ms" | ||
209 | } | ||
210 | sleep 1 | ||
211 | |||
212 | send -- "dig google.com\r" | ||
213 | expect { | ||
214 | timeout {puts "TESTING ERROR 5\n";exit} | ||
215 | "ANSWER SECTION" | ||
216 | } | ||
217 | expect { | ||
218 | timeout {puts "TESTING ERROR 5.1\n";exit} | ||
219 | "google.com" | ||
220 | } | ||
221 | expect { | ||
222 | timeout {puts "TESTING ERROR 5.3\n";exit} | ||
223 | "SERVER:" | ||
224 | } | ||
225 | after 100 | ||
226 | |||
227 | send -- "/sbin/ifconfig\r" | ||
228 | expect { | ||
229 | timeout {puts "TESTING ERROR 5.4\n";exit} | ||
230 | "eth0" | ||
231 | } | ||
232 | expect { | ||
233 | timeout {puts "TESTING ERROR 5.5\n";exit} | ||
234 | "Link" | ||
235 | } | ||
236 | expect { | ||
237 | timeout {puts "TESTING ERROR 5.6\n";exit} | ||
238 | "192.168.1" | ||
239 | } | ||
240 | expect { | ||
241 | timeout {puts "TESTING ERROR 5.7\n";exit} | ||
242 | "UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1" | ||
243 | } | ||
244 | after 100 | ||
245 | |||
246 | send -- "exit\r" | ||
247 | sleep 3 | ||
248 | |||
249 | send -- "firejail --noprofile --net=eth0 --ip=192.168.1.244 --chroot=/tmp/chroot --dns=8.8.8.8 --dns=8.8.4.4\r" | ||
250 | expect { | ||
251 | timeout {puts "TESTING ERROR 4\n";exit} | ||
252 | -re "Child process initialized in \[0-9\]+.\[0-9\]+ ms" | ||
253 | } | ||
254 | sleep 1 | ||
255 | |||
256 | send -- "dig google.com\r" | ||
257 | expect { | ||
258 | timeout {puts "TESTING ERROR 5\n";exit} | ||
259 | "ANSWER SECTION" | ||
260 | } | ||
261 | expect { | ||
262 | timeout {puts "TESTING ERROR 5.1\n";exit} | ||
263 | "google.com" | ||
264 | } | ||
265 | expect { | ||
266 | timeout {puts "TESTING ERROR 5.3\n";exit} | ||
267 | "SERVER:" | ||
268 | } | ||
269 | after 100 | ||
270 | |||
271 | send -- "/sbin/ifconfig\r" | ||
272 | expect { | ||
273 | timeout {puts "TESTING ERROR 5.4\n";exit} | ||
274 | "eth0" | ||
275 | } | ||
276 | expect { | ||
277 | timeout {puts "TESTING ERROR 5.5\n";exit} | ||
278 | "Link" | ||
279 | } | ||
280 | expect { | ||
281 | timeout {puts "TESTING ERROR 5.6\n";exit} | ||
282 | "192.168.1.244" | ||
283 | } | ||
284 | expect { | ||
285 | timeout {puts "TESTING ERROR 5.7\n";exit} | ||
286 | "UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1" | ||
287 | } | ||
288 | after 100 | ||
289 | |||
290 | send -- "exit\r" | ||
291 | sleep 1 | ||
292 | } | ||
293 | |||
294 | |||
295 | puts "\nall done\n" | ||
diff --git a/test/features/2.4.exp b/test/features/2.4.exp deleted file mode 100755 index ed52f4bad..000000000 --- a/test/features/2.4.exp +++ /dev/null | |||
@@ -1,239 +0,0 @@ | |||
1 | #!/usr/bin/expect -f | ||
2 | # This file is part of Firejail project | ||
3 | # Copyright (C) 2014-2023 Firejail Authors | ||
4 | # License GPL v2 | ||
5 | # | ||
6 | # bridge | ||
7 | # - todo: ping test or equivalent on chroot | ||
8 | # | ||
9 | |||
10 | set timeout 10 | ||
11 | spawn $env(SHELL) | ||
12 | match_max 100000 | ||
13 | set overlay [lindex $argv 0] | ||
14 | set chroot [lindex $argv 1] | ||
15 | |||
16 | # | ||
17 | # N | ||
18 | # | ||
19 | send -- "firejail --noprofile --net=br0\r" | ||
20 | expect { | ||
21 | timeout {puts "TESTING ERROR 0\n";exit} | ||
22 | -re "Child process initialized in \[0-9\]+.\[0-9\]+ ms" | ||
23 | } | ||
24 | sleep 1 | ||
25 | |||
26 | send -- "ping -c 3 10.10.20.1\r" | ||
27 | expect { | ||
28 | timeout {puts "TESTING ERROR 1\n";exit} | ||
29 | " packets transmitted, 3 received, 0% packet loss" | ||
30 | } | ||
31 | sleep 1 | ||
32 | |||
33 | |||
34 | send -- "/sbin/ifconfig\r" | ||
35 | expect { | ||
36 | timeout {puts "TESTING ERROR 1.4\n";exit} | ||
37 | "eth0" | ||
38 | } | ||
39 | expect { | ||
40 | timeout {puts "TESTING ERROR 1.5n";exit} | ||
41 | "Link" | ||
42 | } | ||
43 | expect { | ||
44 | timeout {puts "TESTING ERROR 1.6\n";exit} | ||
45 | "10.10.20" | ||
46 | } | ||
47 | expect { | ||
48 | timeout {puts "TESTING ERROR 1.7\n";exit} | ||
49 | "UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1" | ||
50 | } | ||
51 | after 100 | ||
52 | |||
53 | send -- "exit\r" | ||
54 | sleep 1 | ||
55 | |||
56 | send -- "firejail --noprofile --net=br0 --ip=10.10.20.4\r" | ||
57 | expect { | ||
58 | timeout {puts "TESTING ERROR 0\n";exit} | ||
59 | -re "Child process initialized in \[0-9\]+.\[0-9\]+ ms" | ||
60 | } | ||
61 | sleep 1 | ||
62 | |||
63 | send -- "ping -c 3 10.10.20.1\r" | ||
64 | expect { | ||
65 | timeout {puts "TESTING ERROR 1\n";exit} | ||
66 | " packets transmitted, 3 received, 0% packet loss" | ||
67 | } | ||
68 | sleep 1 | ||
69 | |||
70 | |||
71 | send -- "/sbin/ifconfig\r" | ||
72 | expect { | ||
73 | timeout {puts "TESTING ERROR 1.4\n";exit} | ||
74 | "eth0" | ||
75 | } | ||
76 | expect { | ||
77 | timeout {puts "TESTING ERROR 1.5n";exit} | ||
78 | "Link" | ||
79 | } | ||
80 | expect { | ||
81 | timeout {puts "TESTING ERROR 1.6\n";exit} | ||
82 | "10.10.20.4" | ||
83 | } | ||
84 | expect { | ||
85 | timeout {puts "TESTING ERROR 1.7\n";exit} | ||
86 | "UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1" | ||
87 | } | ||
88 | after 100 | ||
89 | |||
90 | send -- "exit\r" | ||
91 | sleep 1 | ||
92 | |||
93 | |||
94 | # | ||
95 | # O | ||
96 | # | ||
97 | if { $overlay == "overlay" } { | ||
98 | send -- "firejail --noprofile --net=br0 --overlay\r" | ||
99 | expect { | ||
100 | timeout {puts "TESTING ERROR 2\n";exit} | ||
101 | "overlay option is not available" {puts "grsecurity\n"; exit} | ||
102 | -re "Child process initialized in \[0-9\]+.\[0-9\]+ ms" {puts "normal system\n"} | ||
103 | } | ||
104 | sleep 1 | ||
105 | |||
106 | send -- "ping -c 3 10.10.20.1\r" | ||
107 | expect { | ||
108 | timeout {puts "TESTING ERROR 3\n";exit} | ||
109 | " packets transmitted, 3 received, 0% packet loss" | ||
110 | } | ||
111 | sleep 1 | ||
112 | |||
113 | |||
114 | send -- "/sbin/ifconfig\r" | ||
115 | expect { | ||
116 | timeout {puts "TESTING ERROR 3.4\n";exit} | ||
117 | "eth0" | ||
118 | } | ||
119 | expect { | ||
120 | timeout {puts "TESTING ERROR 3.5\n";exit} | ||
121 | "Link" | ||
122 | } | ||
123 | expect { | ||
124 | timeout {puts "TESTING ERROR 3.6\n";exit} | ||
125 | "10.10.20" | ||
126 | } | ||
127 | expect { | ||
128 | timeout {puts "TESTING ERROR 3.7\n";exit} | ||
129 | "UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1" | ||
130 | } | ||
131 | after 100 | ||
132 | |||
133 | send -- "exit\r" | ||
134 | sleep 1 | ||
135 | |||
136 | send -- "firejail --noprofile --net=br0 --ip=10.10.20.4 --overlay\r" | ||
137 | expect { | ||
138 | timeout {puts "TESTING ERROR 2\n";exit} | ||
139 | -re "Child process initialized in \[0-9\]+.\[0-9\]+ ms" | ||
140 | } | ||
141 | sleep 1 | ||
142 | |||
143 | send -- "ping -c 3 10.10.20.1\r" | ||
144 | expect { | ||
145 | timeout {puts "TESTING ERROR 3\n";exit} | ||
146 | " packets transmitted, 3 received, 0% packet loss" | ||
147 | } | ||
148 | sleep 1 | ||
149 | |||
150 | |||
151 | send -- "/sbin/ifconfig\r" | ||
152 | expect { | ||
153 | timeout {puts "TESTING ERROR 3.4\n";exit} | ||
154 | "eth0" | ||
155 | } | ||
156 | expect { | ||
157 | timeout {puts "TESTING ERROR 3.5\n";exit} | ||
158 | "Link" | ||
159 | } | ||
160 | expect { | ||
161 | timeout {puts "TESTING ERROR 3.6\n";exit} | ||
162 | "10.10.20.4" | ||
163 | } | ||
164 | expect { | ||
165 | timeout {puts "TESTING ERROR 3.7\n";exit} | ||
166 | "UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1" | ||
167 | } | ||
168 | after 100 | ||
169 | |||
170 | send -- "exit\r" | ||
171 | sleep 1 | ||
172 | } | ||
173 | |||
174 | |||
175 | # | ||
176 | # C | ||
177 | # | ||
178 | if { $chroot == "chroot" } { | ||
179 | send -- "firejail --noprofile --net=br0 --chroot=/tmp/chroot\r" | ||
180 | expect { | ||
181 | timeout {puts "TESTING ERROR 4\n";exit} | ||
182 | -re "Child process initialized in \[0-9\]+.\[0-9\]+ ms" | ||
183 | } | ||
184 | sleep 1 | ||
185 | |||
186 | send -- "/sbin/ifconfig\r" | ||
187 | expect { | ||
188 | timeout {puts "TESTING ERROR 5.4\n";exit} | ||
189 | "eth0" | ||
190 | } | ||
191 | expect { | ||
192 | timeout {puts "TESTING ERROR 5.5\n";exit} | ||
193 | "Link" | ||
194 | } | ||
195 | expect { | ||
196 | timeout {puts "TESTING ERROR 5.6\n";exit} | ||
197 | "10.10.20" | ||
198 | } | ||
199 | expect { | ||
200 | timeout {puts "TESTING ERROR 5.7\n";exit} | ||
201 | "UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1" | ||
202 | } | ||
203 | after 100 | ||
204 | |||
205 | send -- "exit\r" | ||
206 | sleep 1 | ||
207 | |||
208 | send -- "firejail --noprofile --net=br0 --ip=10.10.20.4 --chroot=/tmp/chroot\r" | ||
209 | expect { | ||
210 | timeout {puts "TESTING ERROR 4\n";exit} | ||
211 | -re "Child process initialized in \[0-9\]+.\[0-9\]+ ms" | ||
212 | } | ||
213 | sleep 1 | ||
214 | |||
215 | send -- "/sbin/ifconfig\r" | ||
216 | expect { | ||
217 | timeout {puts "TESTING ERROR 5.4\n";exit} | ||
218 | "eth0" | ||
219 | } | ||
220 | expect { | ||
221 | timeout {puts "TESTING ERROR 5.5\n";exit} | ||
222 | "Link" | ||
223 | } | ||
224 | expect { | ||
225 | timeout {puts "TESTING ERROR 5.6\n";exit} | ||
226 | "10.10.20.4" | ||
227 | } | ||
228 | expect { | ||
229 | timeout {puts "TESTING ERROR 5.7\n";exit} | ||
230 | "UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1" | ||
231 | } | ||
232 | after 100 | ||
233 | |||
234 | send -- "exit\r" | ||
235 | sleep 1 | ||
236 | } | ||
237 | |||
238 | |||
239 | puts "\nall done\n" | ||
diff --git a/test/features/2.5.exp b/test/features/2.5.exp deleted file mode 100755 index ad462e440..000000000 --- a/test/features/2.5.exp +++ /dev/null | |||
@@ -1,114 +0,0 @@ | |||
1 | #!/usr/bin/expect -f | ||
2 | # This file is part of Firejail project | ||
3 | # Copyright (C) 2014-2023 Firejail Authors | ||
4 | # License GPL v2 | ||
5 | # | ||
6 | # interface | ||
7 | # | ||
8 | |||
9 | set timeout 10 | ||
10 | spawn $env(SHELL) | ||
11 | match_max 100000 | ||
12 | set overlay [lindex $argv 0] | ||
13 | set chroot [lindex $argv 1] | ||
14 | |||
15 | # | ||
16 | # N | ||
17 | # | ||
18 | send -- "firejail --noprofile --interface=eth0.5\r" | ||
19 | expect { | ||
20 | timeout {puts "TESTING ERROR 0\n";exit} | ||
21 | -re "Child process initialized in \[0-9\]+.\[0-9\]+ ms" | ||
22 | } | ||
23 | sleep 1 | ||
24 | |||
25 | send -- "/sbin/ifconfig\r" | ||
26 | expect { | ||
27 | timeout {puts "TESTING ERROR 1.4\n";exit} | ||
28 | "eth0.5" | ||
29 | } | ||
30 | expect { | ||
31 | timeout {puts "TESTING ERROR 1.5n";exit} | ||
32 | "Link" | ||
33 | } | ||
34 | expect { | ||
35 | timeout {puts "TESTING ERROR 1.6\n";exit} | ||
36 | "10.10.205.10" | ||
37 | } | ||
38 | expect { | ||
39 | timeout {puts "TESTING ERROR 1.7\n";exit} | ||
40 | "UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1" | ||
41 | } | ||
42 | after 100 | ||
43 | send -- "exit\r" | ||
44 | sleep 1 | ||
45 | |||
46 | # | ||
47 | # O | ||
48 | # | ||
49 | if { $overlay == "overlay" } { | ||
50 | send -- "firejail --noprofile --overlay --interface=eth0.6\r" | ||
51 | expect { | ||
52 | timeout {puts "TESTING ERROR 2\n";exit} | ||
53 | "overlay option is not available" {puts "grsecurity\n"; exit} | ||
54 | -re "Child process initialized in \[0-9\]+.\[0-9\]+ ms" {puts "normal system\n"} | ||
55 | } | ||
56 | sleep 1 | ||
57 | |||
58 | send -- "/sbin/ifconfig\r" | ||
59 | expect { | ||
60 | timeout {puts "TESTING ERROR 3.4\n";exit} | ||
61 | "eth0.6" | ||
62 | } | ||
63 | expect { | ||
64 | timeout {puts "TESTING ERROR 3.5n";exit} | ||
65 | "Link" | ||
66 | } | ||
67 | expect { | ||
68 | timeout {puts "TESTING ERROR 3.6\n";exit} | ||
69 | "10.10.206.10" | ||
70 | } | ||
71 | expect { | ||
72 | timeout {puts "TESTING ERROR 3.7\n";exit} | ||
73 | "UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1" | ||
74 | } | ||
75 | after 100 | ||
76 | send -- "exit\r" | ||
77 | sleep 1 | ||
78 | } | ||
79 | |||
80 | # | ||
81 | # C | ||
82 | # | ||
83 | if { $chroot == "chroot" } { | ||
84 | send -- "firejail --noprofile --chroot=/tmp/chroot --interface=eth0.7\r" | ||
85 | expect { | ||
86 | timeout {puts "TESTING ERROR 4\n";exit} | ||
87 | -re "Child process initialized in \[0-9\]+.\[0-9\]+ ms" | ||
88 | } | ||
89 | sleep 1 | ||
90 | |||
91 | send -- "/sbin/ifconfig\r" | ||
92 | expect { | ||
93 | timeout {puts "TESTING ERROR 5.4\n";exit} | ||
94 | "eth0.7" | ||
95 | } | ||
96 | expect { | ||
97 | timeout {puts "TESTING ERROR 5.5n";exit} | ||
98 | "Link" | ||
99 | } | ||
100 | expect { | ||
101 | timeout {puts "TESTING ERROR 5.6\n";exit} | ||
102 | "10.10.207.10" | ||
103 | } | ||
104 | expect { | ||
105 | timeout {puts "TESTING ERROR 5.7\n";exit} | ||
106 | "UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1" | ||
107 | } | ||
108 | after 100 | ||
109 | send -- "exit\r" | ||
110 | sleep 1 | ||
111 | } | ||
112 | |||
113 | |||
114 | puts "\nall done\n" | ||
diff --git a/test/features/2.6.exp b/test/features/2.6.exp deleted file mode 100755 index 7fdb69052..000000000 --- a/test/features/2.6.exp +++ /dev/null | |||
@@ -1,77 +0,0 @@ | |||
1 | #!/usr/bin/expect -f | ||
2 | # This file is part of Firejail project | ||
3 | # Copyright (C) 2014-2023 Firejail Authors | ||
4 | # License GPL v2 | ||
5 | # | ||
6 | # default gateway | ||
7 | # | ||
8 | |||
9 | set timeout 10 | ||
10 | spawn $env(SHELL) | ||
11 | match_max 100000 | ||
12 | set overlay [lindex $argv 0] | ||
13 | set chroot [lindex $argv 1] | ||
14 | |||
15 | # | ||
16 | # N | ||
17 | # | ||
18 | send -- "firejail --noprofile --net=eth0 --defaultgw=192.168.1.10 --protocol=unix,inet,netlink\r" | ||
19 | expect { | ||
20 | timeout {puts "TESTING ERROR 0\n";exit} | ||
21 | -re "Child process initialized in \[0-9\]+.\[0-9\]+ ms" | ||
22 | } | ||
23 | sleep 1 | ||
24 | |||
25 | send -- "ip route show\r" | ||
26 | expect { | ||
27 | timeout {puts "TESTING ERROR 1\n";exit} | ||
28 | "default via 192.168.1.10 dev eth0" | ||
29 | } | ||
30 | after 100 | ||
31 | send -- "exit\r" | ||
32 | sleep 1 | ||
33 | |||
34 | # | ||
35 | # O | ||
36 | # | ||
37 | if { $overlay == "overlay" } { | ||
38 | send -- "firejail --noprofile --overlay --net=eth0 --defaultgw=192.168.1.10 --protocol=unix,inet,netlink\r" | ||
39 | expect { | ||
40 | timeout {puts "TESTING ERROR 2\n";exit} | ||
41 | "overlay option is not available" {puts "grsecurity\n"; exit} | ||
42 | -re "Child process initialized in \[0-9\]+.\[0-9\]+ ms" {puts "normal system\n"} | ||
43 | } | ||
44 | sleep 1 | ||
45 | |||
46 | send -- "ip route show\r" | ||
47 | expect { | ||
48 | timeout {puts "TESTING ERROR 3\n";exit} | ||
49 | "default via 192.168.1.10 dev eth0" | ||
50 | } | ||
51 | after 100 | ||
52 | send -- "exit\r" | ||
53 | sleep 1 | ||
54 | } | ||
55 | |||
56 | # | ||
57 | # C | ||
58 | # | ||
59 | if { $chroot == "chroot" } { | ||
60 | send -- "firejail --noprofile --chroot=/tmp/chroot --net=eth0 --defaultgw=192.168.1.10 --protocol=unix,inet,netlink\r" | ||
61 | expect { | ||
62 | timeout {puts "TESTING ERROR 4\n";exit} | ||
63 | -re "Child process initialized in \[0-9\]+.\[0-9\]+ ms" | ||
64 | } | ||
65 | sleep 1 | ||
66 | |||
67 | send -- "ip route show\r" | ||
68 | expect { | ||
69 | timeout {puts "TESTING ERROR 5\n";exit} | ||
70 | "default via 192.168.1.10 dev eth0" | ||
71 | } | ||
72 | after 100 | ||
73 | send -- "exit\r" | ||
74 | sleep 1 | ||
75 | } | ||
76 | |||
77 | puts "\nall done\n" | ||
diff --git a/test/features/3.1.exp b/test/features/3.1.exp deleted file mode 100755 index fb144b857..000000000 --- a/test/features/3.1.exp +++ /dev/null | |||
@@ -1,167 +0,0 @@ | |||
1 | #!/usr/bin/expect -f | ||
2 | # This file is part of Firejail project | ||
3 | # Copyright (C) 2014-2023 Firejail Authors | ||
4 | # License GPL v2 | ||
5 | # | ||
6 | # private | ||
7 | # | ||
8 | |||
9 | set timeout 10 | ||
10 | spawn $env(SHELL) | ||
11 | match_max 100000 | ||
12 | set overlay [lindex $argv 0] | ||
13 | set chroot [lindex $argv 1] | ||
14 | |||
15 | # | ||
16 | # N | ||
17 | # | ||
18 | send -- "firejail --noprofile --private\r" | ||
19 | expect { | ||
20 | timeout {puts "TESTING ERROR 0\n";exit} | ||
21 | -re "Child process initialized in \[0-9\]+.\[0-9\]+ ms" | ||
22 | } | ||
23 | sleep 1 | ||
24 | |||
25 | send -- "ls -al | wc -l\r" | ||
26 | expect { | ||
27 | timeout {puts "TESTING ERROR 1.1\n";exit} | ||
28 | "6" | ||
29 | } | ||
30 | |||
31 | send -- "ls -al .bashrc\r" | ||
32 | expect { | ||
33 | timeout {puts "TESTING ERROR 1.2\n";exit} | ||
34 | "netblue" | ||
35 | } | ||
36 | expect { | ||
37 | timeout {puts "TESTING ERROR 1.3\n";exit} | ||
38 | "netblue" | ||
39 | } | ||
40 | expect { | ||
41 | timeout {puts "TESTING ERROR 1.4\n";exit} | ||
42 | ".bashrc" | ||
43 | } | ||
44 | |||
45 | send -- "ls -al .Xauthority\r" | ||
46 | expect { | ||
47 | timeout {puts "TESTING ERROR 1.5\n";exit} | ||
48 | "netblue" | ||
49 | } | ||
50 | expect { | ||
51 | timeout {puts "TESTING ERROR 1.6\n";exit} | ||
52 | "netblue" | ||
53 | } | ||
54 | expect { | ||
55 | timeout {puts "TESTING ERROR 1.7\n";exit} | ||
56 | ".Xauthority" | ||
57 | } | ||
58 | |||
59 | |||
60 | |||
61 | after 100 | ||
62 | send -- "exit\r" | ||
63 | sleep 1 | ||
64 | |||
65 | # | ||
66 | # O | ||
67 | # | ||
68 | if { $overlay == "overlay" } { | ||
69 | send -- "firejail --noprofile --overlay --private\r" | ||
70 | expect { | ||
71 | timeout {puts "TESTING ERROR 2\n";exit} | ||
72 | "overlay option is not available" {puts "grsecurity\n"; exit} | ||
73 | -re "Child process initialized in \[0-9\]+.\[0-9\]+ ms" {puts "normal system\n"} | ||
74 | } | ||
75 | sleep 1 | ||
76 | |||
77 | send -- "ls -al | wc -l\r" | ||
78 | expect { | ||
79 | timeout {puts "TESTING ERROR 3.1\n";exit} | ||
80 | "6" | ||
81 | } | ||
82 | |||
83 | send -- "ls -al .bashrc\r" | ||
84 | expect { | ||
85 | timeout {puts "TESTING ERROR 3.2\n";exit} | ||
86 | "netblue" | ||
87 | } | ||
88 | expect { | ||
89 | timeout {puts "TESTING ERROR 3.3\n";exit} | ||
90 | "netblue" | ||
91 | } | ||
92 | expect { | ||
93 | timeout {puts "TESTING ERROR 3.4\n";exit} | ||
94 | ".bashrc" | ||
95 | } | ||
96 | |||
97 | send -- "ls -al .Xauthority\r" | ||
98 | expect { | ||
99 | timeout {puts "TESTING ERROR 3.5\n";exit} | ||
100 | "netblue" | ||
101 | } | ||
102 | expect { | ||
103 | timeout {puts "TESTING ERROR 3.6\n";exit} | ||
104 | "netblue" | ||
105 | } | ||
106 | expect { | ||
107 | timeout {puts "TESTING ERROR 3.7\n";exit} | ||
108 | ".Xauthority" | ||
109 | } | ||
110 | |||
111 | after 100 | ||
112 | send -- "exit\r" | ||
113 | sleep 1 | ||
114 | } | ||
115 | |||
116 | # | ||
117 | # C | ||
118 | # | ||
119 | if { $chroot == "chroot" } { | ||
120 | send -- "firejail --noprofile --chroot=/tmp/chroot --private\r" | ||
121 | expect { | ||
122 | timeout {puts "TESTING ERROR 4\n";exit} | ||
123 | -re "Child process initialized in \[0-9\]+.\[0-9\]+ ms" | ||
124 | } | ||
125 | sleep 1 | ||
126 | |||
127 | send -- "ls -al | wc -l\r" | ||
128 | expect { | ||
129 | timeout {puts "TESTING ERROR 5.1\n";exit} | ||
130 | "5" | ||
131 | } | ||
132 | |||
133 | send -- "ls -al .bashrc\r" | ||
134 | expect { | ||
135 | timeout {puts "TESTING ERROR 5.2\n";exit} | ||
136 | "netblue" | ||
137 | } | ||
138 | expect { | ||
139 | timeout {puts "TESTING ERROR 5.3\n";exit} | ||
140 | "netblue" | ||
141 | } | ||
142 | expect { | ||
143 | timeout {puts "TESTING ERROR 5.4\n";exit} | ||
144 | ".bashrc" | ||
145 | } | ||
146 | |||
147 | send -- "ls -al .Xauthority\r" | ||
148 | expect { | ||
149 | timeout {puts "TESTING ERROR 5.5\n";exit} | ||
150 | "netblue" | ||
151 | } | ||
152 | expect { | ||
153 | timeout {puts "TESTING ERROR 5.6\n";exit} | ||
154 | "netblue" | ||
155 | } | ||
156 | expect { | ||
157 | timeout {puts "TESTING ERROR 5.7\n";exit} | ||
158 | ".Xauthority" | ||
159 | } | ||
160 | |||
161 | after 100 | ||
162 | send -- "exit\r" | ||
163 | sleep 1 | ||
164 | } | ||
165 | |||
166 | |||
167 | puts "\nall done\n" | ||
diff --git a/test/features/3.10.exp b/test/features/3.10.exp deleted file mode 100755 index 728ad91f5..000000000 --- a/test/features/3.10.exp +++ /dev/null | |||
@@ -1,187 +0,0 @@ | |||
1 | #!/usr/bin/expect -f | ||
2 | # This file is part of Firejail project | ||
3 | # Copyright (C) 2014-2023 Firejail Authors | ||
4 | # License GPL v2 | ||
5 | # | ||
6 | # whitelist tmp | ||
7 | # | ||
8 | |||
9 | set timeout 10 | ||
10 | spawn $env(SHELL) | ||
11 | match_max 100000 | ||
12 | set overlay [lindex $argv 0] | ||
13 | set chroot [lindex $argv 1] | ||
14 | |||
15 | # | ||
16 | # N | ||
17 | # | ||
18 | send -- "mkdir /tmp/test1dir\r" | ||
19 | sleep 1 | ||
20 | send -- "touch /tmp/test1dir/test1\r" | ||
21 | sleep 1 | ||
22 | send -- "firejail --noprofile --whitelist=/tmp/test1dir\r" | ||
23 | expect { | ||
24 | timeout {puts "TESTING ERROR 0\n";exit} | ||
25 | -re "Child process initialized in \[0-9\]+.\[0-9\]+ ms" | ||
26 | } | ||
27 | sleep 1 | ||
28 | |||
29 | send -- "ls -l /tmp | wc -l\r" | ||
30 | expect { | ||
31 | timeout {puts "TESTING ERROR 1.1\n";exit} | ||
32 | "2" | ||
33 | } | ||
34 | send -- "ls -l /tmp\r" | ||
35 | expect { | ||
36 | timeout {puts "TESTING ERROR 1.2\n";exit} | ||
37 | "netblue" | ||
38 | } | ||
39 | expect { | ||
40 | timeout {puts "TESTING ERROR 1.3\n";exit} | ||
41 | "netblue" | ||
42 | } | ||
43 | expect { | ||
44 | timeout {puts "TESTING ERROR 1.4\n";exit} | ||
45 | "test1dir" | ||
46 | } | ||
47 | |||
48 | send -- "ls -l /tmp/test1dir | wc -l\r" | ||
49 | expect { | ||
50 | timeout {puts "TESTING ERROR 1.5\n";exit} | ||
51 | "2" | ||
52 | } | ||
53 | send -- "ls -l /tmp/test1dir\r" | ||
54 | expect { | ||
55 | timeout {puts "TESTING ERROR 1.6\n";exit} | ||
56 | "netblue" | ||
57 | } | ||
58 | expect { | ||
59 | timeout {puts "TESTING ERROR 1.7\n";exit} | ||
60 | "netblue" | ||
61 | } | ||
62 | expect { | ||
63 | timeout {puts "TESTING ERROR 1.8\n";exit} | ||
64 | "test1" | ||
65 | } | ||
66 | |||
67 | |||
68 | after 100 | ||
69 | send -- "exit\r" | ||
70 | sleep 1 | ||
71 | |||
72 | |||
73 | # | ||
74 | # O | ||
75 | # | ||
76 | if { $overlay == "overlay" } { | ||
77 | send -- "firejail --noprofile --overlay --whitelist=/tmp/test1dir\r" | ||
78 | expect { | ||
79 | timeout {puts "TESTING ERROR 2\n";exit} | ||
80 | "overlay option is not available" {puts "grsecurity\n"; exit} | ||
81 | -re "Child process initialized in \[0-9\]+.\[0-9\]+ ms" {puts "normal system\n"} | ||
82 | } | ||
83 | sleep 1 | ||
84 | |||
85 | send -- "ls -l /tmp | wc -l\r" | ||
86 | expect { | ||
87 | timeout {puts "TESTING ERROR 3.1\n";exit} | ||
88 | "2" | ||
89 | } | ||
90 | send -- "ls -l /tmp\r" | ||
91 | expect { | ||
92 | timeout {puts "TESTING ERROR 3.2\n";exit} | ||
93 | "netblue" | ||
94 | } | ||
95 | expect { | ||
96 | timeout {puts "TESTING ERROR 3.3\n";exit} | ||
97 | "netblue" | ||
98 | } | ||
99 | expect { | ||
100 | timeout {puts "TESTING ERROR 3.4\n";exit} | ||
101 | "test1dir" | ||
102 | } | ||
103 | |||
104 | send -- "ls -l /tmp/test1dir | wc -l\r" | ||
105 | expect { | ||
106 | timeout {puts "TESTING ERROR 3.5\n";exit} | ||
107 | "2" | ||
108 | } | ||
109 | send -- "ls -l /tmp/test1dir\r" | ||
110 | expect { | ||
111 | timeout {puts "TESTING ERROR 3.6\n";exit} | ||
112 | "netblue" | ||
113 | } | ||
114 | expect { | ||
115 | timeout {puts "TESTING ERROR 3.7\n";exit} | ||
116 | "netblue" | ||
117 | } | ||
118 | expect { | ||
119 | timeout {puts "TESTING ERROR 3.8\n";exit} | ||
120 | "test1" | ||
121 | } | ||
122 | |||
123 | after 100 | ||
124 | send -- "exit\r" | ||
125 | sleep 1 | ||
126 | } | ||
127 | |||
128 | # | ||
129 | # C | ||
130 | # | ||
131 | if { $chroot == "chroot" } { | ||
132 | send -- "mkdir /tmp/chroot/tmp/test1dir\r" | ||
133 | sleep 1 | ||
134 | send -- "touch /tmp/chroot/tmp/test1dir/test1\r" | ||
135 | sleep 1 | ||
136 | send -- "firejail --noprofile --chroot=/tmp/chroot --whitelist=/tmp/test1dir\r" | ||
137 | expect { | ||
138 | timeout {puts "TESTING ERROR 4\n";exit} | ||
139 | -re "Child process initialized in \[0-9\]+.\[0-9\]+ ms" | ||
140 | } | ||
141 | sleep 1 | ||
142 | |||
143 | send -- "ls -l /tmp | wc -l\r" | ||
144 | expect { | ||
145 | timeout {puts "TESTING ERROR 5.1\n";exit} | ||
146 | "2" | ||
147 | } | ||
148 | send -- "ls -l /tmp\r" | ||
149 | expect { | ||
150 | timeout {puts "TESTING ERROR 5.2\n";exit} | ||
151 | "netblue" | ||
152 | } | ||
153 | expect { | ||
154 | timeout {puts "TESTING ERROR 5.3\n";exit} | ||
155 | "netblue" | ||
156 | } | ||
157 | expect { | ||
158 | timeout {puts "TESTING ERROR 5.4\n";exit} | ||
159 | "test1dir" | ||
160 | } | ||
161 | |||
162 | send -- "ls -l /tmp/test1dir | wc -l\r" | ||
163 | expect { | ||
164 | timeout {puts "TESTING ERROR 5.5\n";exit} | ||
165 | "2" | ||
166 | } | ||
167 | send -- "ls -l /tmp/test1dir\r" | ||
168 | expect { | ||
169 | timeout {puts "TESTING ERROR 5.6\n";exit} | ||
170 | "netblue" | ||
171 | } | ||
172 | expect { | ||
173 | timeout {puts "TESTING ERROR 5.7\n";exit} | ||
174 | "netblue" | ||
175 | } | ||
176 | expect { | ||
177 | timeout {puts "TESTING ERROR 5.8\n";exit} | ||
178 | "test1" | ||
179 | } | ||
180 | |||
181 | after 100 | ||
182 | send -- "exit\r" | ||
183 | sleep 1 | ||
184 | } | ||
185 | |||
186 | |||
187 | puts "\nall done\n" | ||
diff --git a/test/features/3.11.exp b/test/features/3.11.exp deleted file mode 100755 index 9e59b05e7..000000000 --- a/test/features/3.11.exp +++ /dev/null | |||
@@ -1,174 +0,0 @@ | |||
1 | #!/usr/bin/expect -f | ||
2 | # This file is part of Firejail project | ||
3 | # Copyright (C) 2014-2023 Firejail Authors | ||
4 | # License GPL v2 | ||
5 | # | ||
6 | # mkdir | ||
7 | # | ||
8 | |||
9 | set timeout 10 | ||
10 | spawn $env(SHELL) | ||
11 | match_max 100000 | ||
12 | set overlay [lindex $argv 0] | ||
13 | set chroot [lindex $argv 1] | ||
14 | |||
15 | # | ||
16 | # N | ||
17 | # | ||
18 | send -- "rm -fr ~/firejail-xy76_u9\r" | ||
19 | sleep 1 | ||
20 | |||
21 | send -- "firejail --profile=3.11.profile\r" | ||
22 | expect { | ||
23 | timeout {puts "TESTING ERROR 0\n";exit} | ||
24 | -re "Child process initialized in \[0-9\]+.\[0-9\]+ ms" | ||
25 | } | ||
26 | sleep 1 | ||
27 | |||
28 | send -- "ls -l ~ | grep firejail-xy76_u9\r" | ||
29 | expect { | ||
30 | timeout {puts "TESTING ERROR 1\n";exit} | ||
31 | "drwx------" | ||
32 | } | ||
33 | expect { | ||
34 | timeout {puts "TESTING ERROR 2\n";exit} | ||
35 | "netblue netblue" { puts "Debian\n"} | ||
36 | "netblue users" { puts "Arch\n"} | ||
37 | } | ||
38 | expect { | ||
39 | timeout {puts "TESTING ERROR 3\n";exit} | ||
40 | "firejail-xy76_u9" | ||
41 | } | ||
42 | after 100 | ||
43 | |||
44 | send -- "ls -l ~/firejail-xy76_u9\r" | ||
45 | expect { | ||
46 | timeout {puts "TESTING ERROR 4\n";exit} | ||
47 | "drwx------" | ||
48 | } | ||
49 | expect { | ||
50 | timeout {puts "TESTING ERROR 5\n";exit} | ||
51 | "netblue netblue" { puts "Debian\n"} | ||
52 | "netblue users" { puts "Arch\n"} | ||
53 | } | ||
54 | expect { | ||
55 | timeout {puts "TESTING ERROR 6\n";exit} | ||
56 | "testdir" | ||
57 | } | ||
58 | after 100 | ||
59 | |||
60 | send -- "exit\r" | ||
61 | sleep 1 | ||
62 | send -- "rm -fr ~/firejail-xy76_u9\r" | ||
63 | sleep 1 | ||
64 | |||
65 | # | ||
66 | # O | ||
67 | # | ||
68 | if { $overlay == "overlay" } { | ||
69 | send -- "rm -fr ~/firejail-xy76_u9\r" | ||
70 | sleep 1 | ||
71 | |||
72 | send -- "firejail --profile=3.11.profile\r" | ||
73 | expect { | ||
74 | timeout {puts "TESTING ERROR 10\n";exit} | ||
75 | "overlay option is not available" {puts "grsecurity\n"; exit} | ||
76 | -re "Child process initialized in \[0-9\]+.\[0-9\]+ ms" {puts "normal system\n"} | ||
77 | } | ||
78 | sleep 1 | ||
79 | |||
80 | send -- "ls -l ~ | grep firejail-xy76_u9\r" | ||
81 | expect { | ||
82 | timeout {puts "TESTING ERROR 11\n";exit} | ||
83 | "drwx------" | ||
84 | } | ||
85 | expect { | ||
86 | timeout {puts "TESTING ERROR 12\n";exit} | ||
87 | "netblue netblue" { puts "Debian\n"} | ||
88 | "netblue users" { puts "Arch\n"} | ||
89 | } | ||
90 | expect { | ||
91 | timeout {puts "TESTING ERROR 13\n";exit} | ||
92 | "firejail-xy76_u9" | ||
93 | } | ||
94 | after 100 | ||
95 | |||
96 | send -- "ls -l ~/firejail-xy76_u9\r" | ||
97 | expect { | ||
98 | timeout {puts "TESTING ERROR 14\n";exit} | ||
99 | "drwx------" | ||
100 | } | ||
101 | expect { | ||
102 | timeout {puts "TESTING ERROR 15\n";exit} | ||
103 | "netblue netblue" { puts "Debian\n"} | ||
104 | "netblue users" { puts "Arch\n"} | ||
105 | } | ||
106 | expect { | ||
107 | timeout {puts "TESTING ERROR 16\n";exit} | ||
108 | "testdir" | ||
109 | } | ||
110 | after 100 | ||
111 | |||
112 | send -- "exit\r" | ||
113 | sleep 1 | ||
114 | send -- "rm -fr ~/firejail-xy76_u9\r" | ||
115 | sleep 1 | ||
116 | |||
117 | |||
118 | } | ||
119 | |||
120 | # | ||
121 | # C | ||
122 | # | ||
123 | if { $chroot == "chroot" } { | ||
124 | send -- "rm -fr ~/firejail-xy76_u9\r" | ||
125 | sleep 1 | ||
126 | |||
127 | send -- "firejail --profile=3.11.profile\r" | ||
128 | expect { | ||
129 | timeout {puts "TESTING ERROR 20\n";exit} | ||
130 | -re "Child process initialized in \[0-9\]+.\[0-9\]+ ms" | ||
131 | } | ||
132 | sleep 1 | ||
133 | |||
134 | send -- "ls -l ~ | grep firejail-xy76_u9\r" | ||
135 | expect { | ||
136 | timeout {puts "TESTING ERROR 21\n";exit} | ||
137 | "drwx------" | ||
138 | } | ||
139 | expect { | ||
140 | timeout {puts "TESTING ERROR 22\n";exit} | ||
141 | "netblue netblue" { puts "Debian\n"} | ||
142 | "netblue users" { puts "Arch\n"} | ||
143 | } | ||
144 | expect { | ||
145 | timeout {puts "TESTING ERROR 23\n";exit} | ||
146 | "firejail-xy76_u9" | ||
147 | } | ||
148 | after 100 | ||
149 | |||
150 | send -- "ls -l ~/firejail-xy76_u9\r" | ||
151 | expect { | ||
152 | timeout {puts "TESTING ERROR 24\n";exit} | ||
153 | "drwx------" | ||
154 | } | ||
155 | expect { | ||
156 | timeout {puts "TESTING ERROR 25\n";exit} | ||
157 | "netblue netblue" { puts "Debian\n"} | ||
158 | "netblue users" { puts "Arch\n"} | ||
159 | } | ||
160 | expect { | ||
161 | timeout {puts "TESTING ERROR 26\n";exit} | ||
162 | "testdir" | ||
163 | } | ||
164 | after 100 | ||
165 | |||
166 | send -- "rm -fr ~/firejail-xy76_u9\r" | ||
167 | sleep 1 | ||
168 | |||
169 | send -- "exit\r" | ||
170 | |||
171 | } | ||
172 | |||
173 | |||
174 | puts "\nall done\n" | ||
diff --git a/test/features/3.11.profile b/test/features/3.11.profile deleted file mode 100644 index 144733f8f..000000000 --- a/test/features/3.11.profile +++ /dev/null | |||
@@ -1,2 +0,0 @@ | |||
1 | mkdir ~/firejail-xy76_u9 | ||
2 | mkdir ~/firejail-xy76_u9/testdir | ||
diff --git a/test/features/3.2.exp b/test/features/3.2.exp deleted file mode 100755 index 1fdb74a42..000000000 --- a/test/features/3.2.exp +++ /dev/null | |||
@@ -1,82 +0,0 @@ | |||
1 | #!/usr/bin/expect -f | ||
2 | # This file is part of Firejail project | ||
3 | # Copyright (C) 2014-2023 Firejail Authors | ||
4 | # License GPL v2 | ||
5 | # | ||
6 | # read-only | ||
7 | # | ||
8 | |||
9 | set timeout 10 | ||
10 | spawn $env(SHELL) | ||
11 | match_max 100000 | ||
12 | set overlay [lindex $argv 0] | ||
13 | set chroot [lindex $argv 1] | ||
14 | |||
15 | # | ||
16 | # N | ||
17 | # | ||
18 | send -- "rm -f ~/.config/firejail-test-file\r" | ||
19 | sleep 1 | ||
20 | send -- "firejail --noprofile --read-only=/home/netblue/.config\r" | ||
21 | expect { | ||
22 | timeout {puts "TESTING ERROR 0\n";exit} | ||
23 | -re "Child process initialized in \[0-9\]+.\[0-9\]+ ms" | ||
24 | } | ||
25 | sleep 1 | ||
26 | |||
27 | send -- "touch ~/.config/firejail-test-file\r" | ||
28 | expect { | ||
29 | timeout {puts "TESTING ERROR 1\n";exit} | ||
30 | "Read-only file system" | ||
31 | } | ||
32 | after 100 | ||
33 | send -- "exit\r" | ||
34 | sleep 1 | ||
35 | |||
36 | # | ||
37 | # O | ||
38 | # | ||
39 | if { $overlay == "overlay" } { | ||
40 | send -- "firejail --noprofile --overlay --read-only=/home/netblue/.config\r" | ||
41 | expect { | ||
42 | timeout {puts "TESTING ERROR 2\n";exit} | ||
43 | "overlay option is not available" {puts "grsecurity\n"; exit} | ||
44 | -re "Child process initialized in \[0-9\]+.\[0-9\]+ ms" {puts "normal system\n"} | ||
45 | } | ||
46 | sleep 1 | ||
47 | |||
48 | send -- "touch ~/.config/firejail-test-file\r" | ||
49 | expect { | ||
50 | timeout {puts "TESTING ERROR 3\n";exit} | ||
51 | "Read-only file system" | ||
52 | } | ||
53 | after 100 | ||
54 | send -- "exit\r" | ||
55 | sleep 1 | ||
56 | } | ||
57 | |||
58 | # | ||
59 | # C | ||
60 | # | ||
61 | if { $chroot == "chroot" } { | ||
62 | send -- "rm -f /tmp/chroot/home/netblue/.config/firejail-test-file\r" | ||
63 | sleep 1 | ||
64 | send -- "firejail --noprofile --chroot=/tmp/chroot --read-only=/home/netblue/.config\r" | ||
65 | expect { | ||
66 | timeout {puts "TESTING ERROR 4\n";exit} | ||
67 | -re "Child process initialized in \[0-9\]+.\[0-9\]+ ms" | ||
68 | } | ||
69 | sleep 1 | ||
70 | |||
71 | send -- "touch ~/.config/firejail-test-file\r" | ||
72 | expect { | ||
73 | timeout {puts "TESTING ERROR 5\n";exit} | ||
74 | "Read-only file system" | ||
75 | } | ||
76 | after 100 | ||
77 | send -- "exit\r" | ||
78 | sleep 1 | ||
79 | } | ||
80 | |||
81 | |||
82 | puts "\nall done\n" | ||
diff --git a/test/features/3.3.exp b/test/features/3.3.exp deleted file mode 100755 index 8c931dcf1..000000000 --- a/test/features/3.3.exp +++ /dev/null | |||
@@ -1,78 +0,0 @@ | |||
1 | #!/usr/bin/expect -f | ||
2 | # This file is part of Firejail project | ||
3 | # Copyright (C) 2014-2023 Firejail Authors | ||
4 | # License GPL v2 | ||
5 | # | ||
6 | # blacklist | ||
7 | # | ||
8 | |||
9 | set timeout 10 | ||
10 | spawn $env(SHELL) | ||
11 | match_max 100000 | ||
12 | set overlay [lindex $argv 0] | ||
13 | set chroot [lindex $argv 1] | ||
14 | |||
15 | # | ||
16 | # N | ||
17 | # | ||
18 | send -- "firejail --noprofile --blacklist=/home/netblue/.config\r" | ||
19 | expect { | ||
20 | timeout {puts "TESTING ERROR 0\n";exit} | ||
21 | -re "Child process initialized in \[0-9\]+.\[0-9\]+ ms" | ||
22 | } | ||
23 | sleep 1 | ||
24 | |||
25 | send -- "cd ~/.config\r" | ||
26 | expect { | ||
27 | timeout {puts "TESTING ERROR 1\n";exit} | ||
28 | "Permission denied" | ||
29 | } | ||
30 | after 100 | ||
31 | send -- "exit\r" | ||
32 | sleep 1 | ||
33 | |||
34 | |||
35 | # | ||
36 | # O | ||
37 | # | ||
38 | if { $overlay == "overlay" } { | ||
39 | send -- "firejail --noprofile --overlay --blacklist=/home/netblue/.config\r" | ||
40 | expect { | ||
41 | timeout {puts "TESTING ERROR 2\n";exit} | ||
42 | "overlay option is not available" {puts "grsecurity\n"; exit} | ||
43 | -re "Child process initialized in \[0-9\]+.\[0-9\]+ ms" {puts "normal system\n"} | ||
44 | } | ||
45 | sleep 1 | ||
46 | |||
47 | send -- "cd ~/.config\r" | ||
48 | expect { | ||
49 | timeout {puts "TESTING ERROR 3\n";exit} | ||
50 | "Permission denied" | ||
51 | } | ||
52 | after 100 | ||
53 | send -- "exit\r" | ||
54 | sleep 1 | ||
55 | } | ||
56 | |||
57 | # | ||
58 | # C | ||
59 | # | ||
60 | if { $chroot == "chroot" } { | ||
61 | send -- "firejail --noprofile --chroot=/tmp/chroot --blacklist=/home/netblue/.config\r" | ||
62 | expect { | ||
63 | timeout {puts "TESTING ERROR 4\n";exit} | ||
64 | -re "Child process initialized in \[0-9\]+.\[0-9\]+ ms" | ||
65 | } | ||
66 | sleep 1 | ||
67 | |||
68 | send -- "cd ~/.config\r" | ||
69 | expect { | ||
70 | timeout {puts "TESTING ERROR 5\n";exit} | ||
71 | "Permission denied" | ||
72 | } | ||
73 | after 100 | ||
74 | send -- "exit\r" | ||
75 | sleep 1 | ||
76 | } | ||
77 | |||
78 | puts "\nall done\n" | ||
diff --git a/test/features/3.4.exp b/test/features/3.4.exp deleted file mode 100755 index 813c2d86a..000000000 --- a/test/features/3.4.exp +++ /dev/null | |||
@@ -1,208 +0,0 @@ | |||
1 | #!/usr/bin/expect -f | ||
2 | # This file is part of Firejail project | ||
3 | # Copyright (C) 2014-2023 Firejail Authors | ||
4 | # License GPL v2 | ||
5 | # | ||
6 | # whitelist home | ||
7 | # | ||
8 | |||
9 | set timeout 10 | ||
10 | spawn $env(SHELL) | ||
11 | match_max 100000 | ||
12 | set overlay [lindex $argv 0] | ||
13 | set chroot [lindex $argv 1] | ||
14 | |||
15 | # | ||
16 | # N | ||
17 | # | ||
18 | send -- "firejail --noprofile --whitelist=/home/netblue/.config\r" | ||
19 | expect { | ||
20 | timeout {puts "TESTING ERROR 0\n";exit} | ||
21 | -re "Child process initialized in \[0-9\]+.\[0-9\]+ ms" | ||
22 | } | ||
23 | sleep 1 | ||
24 | |||
25 | send -- "ls -al | wc -l\r" | ||
26 | expect { | ||
27 | timeout {puts "TESTING ERROR 1.1\n";exit} | ||
28 | "6" | ||
29 | } | ||
30 | |||
31 | send -- "ls -al .bashrc\r" | ||
32 | expect { | ||
33 | timeout {puts "TESTING ERROR 1.2\n";exit} | ||
34 | "netblue" | ||
35 | } | ||
36 | expect { | ||
37 | timeout {puts "TESTING ERROR 1.3\n";exit} | ||
38 | "netblue" | ||
39 | } | ||
40 | expect { | ||
41 | timeout {puts "TESTING ERROR 1.4\n";exit} | ||
42 | ".bashrc" | ||
43 | } | ||
44 | |||
45 | send -- "ls -al .Xauthority\r" | ||
46 | expect { | ||
47 | timeout {puts "TESTING ERROR 1.5\n";exit} | ||
48 | "netblue" | ||
49 | } | ||
50 | expect { | ||
51 | timeout {puts "TESTING ERROR 1.6\n";exit} | ||
52 | "netblue" | ||
53 | } | ||
54 | expect { | ||
55 | timeout {puts "TESTING ERROR 1.7\n";exit} | ||
56 | ".Xauthority" | ||
57 | } | ||
58 | |||
59 | send -- "ls -al | grep .config\r" | ||
60 | expect { | ||
61 | timeout {puts "TESTING ERROR 1.8\n";exit} | ||
62 | "netblue" | ||
63 | } | ||
64 | expect { | ||
65 | timeout {puts "TESTING ERROR 1.9\n";exit} | ||
66 | "netblue" | ||
67 | } | ||
68 | expect { | ||
69 | timeout {puts "TESTING ERROR 1.10\n";exit} | ||
70 | ".config" | ||
71 | } | ||
72 | |||
73 | after 100 | ||
74 | send -- "exit\r" | ||
75 | sleep 1 | ||
76 | |||
77 | |||
78 | # | ||
79 | # O | ||
80 | # | ||
81 | if { $overlay == "overlay" } { | ||
82 | send -- "firejail --noprofile --overlay --whitelist=/home/netblue/.config\r" | ||
83 | expect { | ||
84 | timeout {puts "TESTING ERROR 2\n";exit} | ||
85 | "overlay option is not available" {puts "grsecurity\n"; exit} | ||
86 | -re "Child process initialized in \[0-9\]+.\[0-9\]+ ms" {puts "normal system\n"} | ||
87 | } | ||
88 | sleep 1 | ||
89 | |||
90 | send -- "ls -al | wc -l\r" | ||
91 | expect { | ||
92 | timeout {puts "TESTING ERROR 3.1\n";exit} | ||
93 | "6" | ||
94 | } | ||
95 | |||
96 | send -- "ls -al .bashrc\r" | ||
97 | expect { | ||
98 | timeout {puts "TESTING ERROR 3.2\n";exit} | ||
99 | "netblue" | ||
100 | } | ||
101 | expect { | ||
102 | timeout {puts "TESTING ERROR 3.3\n";exit} | ||
103 | "netblue" | ||
104 | } | ||
105 | expect { | ||
106 | timeout {puts "TESTING ERROR 3.4\n";exit} | ||
107 | ".bashrc" | ||
108 | } | ||
109 | |||
110 | send -- "ls -al .Xauthority\r" | ||
111 | expect { | ||
112 | timeout {puts "TESTING ERROR 3.5\n";exit} | ||
113 | "netblue" | ||
114 | } | ||
115 | expect { | ||
116 | timeout {puts "TESTING ERROR 3.6\n";exit} | ||
117 | "netblue" | ||
118 | } | ||
119 | expect { | ||
120 | timeout {puts "TESTING ERROR 3.7\n";exit} | ||
121 | ".Xauthority" | ||
122 | } | ||
123 | |||
124 | send -- "ls -al | grep .config\r" | ||
125 | expect { | ||
126 | timeout {puts "TESTING ERROR 3.8\n";exit} | ||
127 | "netblue" | ||
128 | } | ||
129 | expect { | ||
130 | timeout {puts "TESTING ERROR 3.9\n";exit} | ||
131 | "netblue" | ||
132 | } | ||
133 | expect { | ||
134 | timeout {puts "TESTING ERROR 3.10\n";exit} | ||
135 | ".config" | ||
136 | } | ||
137 | |||
138 | after 100 | ||
139 | send -- "exit\r" | ||
140 | sleep 1 | ||
141 | } | ||
142 | |||
143 | # | ||
144 | # C | ||
145 | # | ||
146 | if { $chroot == "chroot" } { | ||
147 | send -- "firejail --noprofile --chroot=/tmp/chroot --whitelist=/home/netblue/.config\r" | ||
148 | expect { | ||
149 | timeout {puts "TESTING ERROR 4\n";exit} | ||
150 | -re "Child process initialized in \[0-9\]+.\[0-9\]+ ms" | ||
151 | } | ||
152 | sleep 1 | ||
153 | |||
154 | send -- "ls -al | wc -l\r" | ||
155 | expect { | ||
156 | timeout {puts "TESTING ERROR 5.1\n";exit} | ||
157 | "6" | ||
158 | } | ||
159 | |||
160 | send -- "ls -al .bashrc\r" | ||
161 | expect { | ||
162 | timeout {puts "TESTING ERROR 5.2\n";exit} | ||
163 | "netblue" | ||
164 | } | ||
165 | expect { | ||
166 | timeout {puts "TESTING ERROR 5.3\n";exit} | ||
167 | "netblue" | ||
168 | } | ||
169 | expect { | ||
170 | timeout {puts "TESTING ERROR 5.4\n";exit} | ||
171 | ".bashrc" | ||
172 | } | ||
173 | |||
174 | send -- "ls -al .Xauthority\r" | ||
175 | expect { | ||
176 | timeout {puts "TESTING ERROR 5.5\n";exit} | ||
177 | "netblue" | ||
178 | } | ||
179 | expect { | ||
180 | timeout {puts "TESTING ERROR 5.6\n";exit} | ||
181 | "netblue" | ||
182 | } | ||
183 | expect { | ||
184 | timeout {puts "TESTING ERROR 5.7\n";exit} | ||
185 | ".Xauthority" | ||
186 | } | ||
187 | |||
188 | send -- "ls -al | grep .config\r" | ||
189 | expect { | ||
190 | timeout {puts "TESTING ERROR 5.8\n";exit} | ||
191 | "netblue" | ||
192 | } | ||
193 | expect { | ||
194 | timeout {puts "TESTING ERROR 5.9\n";exit} | ||
195 | "netblue" | ||
196 | } | ||
197 | expect { | ||
198 | timeout {puts "TESTING ERROR 5.10\n";exit} | ||
199 | ".config" | ||
200 | } | ||
201 | |||
202 | after 100 | ||
203 | send -- "exit\r" | ||
204 | sleep 1 | ||
205 | } | ||
206 | |||
207 | |||
208 | puts "\nall done\n" | ||
diff --git a/test/features/3.5.exp b/test/features/3.5.exp deleted file mode 100755 index 93bbfe054..000000000 --- a/test/features/3.5.exp +++ /dev/null | |||
@@ -1,83 +0,0 @@ | |||
1 | #!/usr/bin/expect -f | ||
2 | # This file is part of Firejail project | ||
3 | # Copyright (C) 2014-2023 Firejail Authors | ||
4 | # License GPL v2 | ||
5 | # | ||
6 | # private-dev | ||
7 | # | ||
8 | |||
9 | set timeout 10 | ||
10 | spawn $env(SHELL) | ||
11 | match_max 100000 | ||
12 | set overlay [lindex $argv 0] | ||
13 | set chroot [lindex $argv 1] | ||
14 | |||
15 | # | ||
16 | # N | ||
17 | # | ||
18 | send -- "firejail --noprofile --private-dev\r" | ||
19 | expect { | ||
20 | timeout {puts "TESTING ERROR 0\n";exit} | ||
21 | -re "Child process initialized in \[0-9\]+.\[0-9\]+ ms" | ||
22 | } | ||
23 | sleep 1 | ||
24 | |||
25 | send -- "ls -l /dev | wc -l\r" | ||
26 | expect { | ||
27 | timeout {puts "TESTING ERROR 1.1\n";exit} | ||
28 | "13" { puts "Debian\n"} | ||
29 | "12" { puts "Centos\n"} | ||
30 | } | ||
31 | |||
32 | after 100 | ||
33 | send -- "exit\r" | ||
34 | sleep 1 | ||
35 | |||
36 | # | ||
37 | # O | ||
38 | # | ||
39 | if { $overlay == "overlay" } { | ||
40 | send -- "firejail --noprofile --overlay --private-dev\r" | ||
41 | expect { | ||
42 | timeout {puts "TESTING ERROR 2\n";exit} | ||
43 | "overlay option is not available" {puts "grsecurity\n"; exit} | ||
44 | -re "Child process initialized in \[0-9\]+.\[0-9\]+ ms" {puts "normal system\n"} | ||
45 | } | ||
46 | sleep 1 | ||
47 | |||
48 | send -- "ls -l /dev | wc -l\r" | ||
49 | expect { | ||
50 | timeout {puts "TESTING ERROR 3.1\n";exit} | ||
51 | "13" { puts "Debian\n"} | ||
52 | "12" { puts "Centos\n"} | ||
53 | } | ||
54 | |||
55 | after 100 | ||
56 | send -- "exit\r" | ||
57 | sleep 1 | ||
58 | } | ||
59 | |||
60 | # | ||
61 | # C | ||
62 | # | ||
63 | if { $chroot == "chroot" } { | ||
64 | send -- "firejail --noprofile --chroot=/tmp/chroot --private-dev\r" | ||
65 | expect { | ||
66 | timeout {puts "TESTING ERROR 4\n";exit} | ||
67 | -re "Child process initialized in \[0-9\]+.\[0-9\]+ ms" | ||
68 | } | ||
69 | sleep 1 | ||
70 | |||
71 | send -- "ls -l /dev | wc -l\r" | ||
72 | expect { | ||
73 | timeout {puts "TESTING ERROR 5.1\n";exit} | ||
74 | "12" | ||
75 | } | ||
76 | |||
77 | after 100 | ||
78 | send -- "exit\r" | ||
79 | sleep 1 | ||
80 | } | ||
81 | |||
82 | |||
83 | puts "\nall done\n" | ||
diff --git a/test/features/3.6.exp b/test/features/3.6.exp deleted file mode 100755 index 5dcbdd483..000000000 --- a/test/features/3.6.exp +++ /dev/null | |||
@@ -1,87 +0,0 @@ | |||
1 | #!/usr/bin/expect -f | ||
2 | # This file is part of Firejail project | ||
3 | # Copyright (C) 2014-2023 Firejail Authors | ||
4 | # License GPL v2 | ||
5 | # | ||
6 | # private-etc | ||
7 | # | ||
8 | |||
9 | set timeout 10 | ||
10 | spawn $env(SHELL) | ||
11 | match_max 100000 | ||
12 | set overlay [lindex $argv 0] | ||
13 | set chroot [lindex $argv 1] | ||
14 | |||
15 | # | ||
16 | # N | ||
17 | # | ||
18 | send -- "firejail --noprofile --private-etc=group,hostname,hosts,nsswitch.conf,passwd,resolv.conf,skel\r" | ||
19 | expect { | ||
20 | timeout {puts "TESTING ERROR 0\n";exit} | ||
21 | -re "Child process initialized in \[0-9\]+.\[0-9\]+ ms" | ||
22 | } | ||
23 | sleep 1 | ||
24 | |||
25 | send -- "ls -al /etc | wc -l\r" | ||
26 | expect { | ||
27 | timeout {puts "TESTING ERROR 1.1\n";exit} | ||
28 | "10" | ||
29 | } | ||
30 | |||
31 | after 100 | ||
32 | send -- "exit\r" | ||
33 | sleep 1 | ||
34 | |||
35 | # | ||
36 | # O | ||
37 | # | ||
38 | if { $overlay == "overlay" } { | ||
39 | send -- "firejail --noprofile --overlay --private-etc=group,hostname,hosts,nsswitch.conf,passwd,resolv.conf,skel\r" | ||
40 | expect { | ||
41 | timeout {puts "TESTING ERROR 2\n";exit} | ||
42 | "overlay option is not available" {puts "grsecurity\n"; exit} | ||
43 | -re "Child process initialized in \[0-9\]+.\[0-9\]+ ms" {puts "normal system\n"} | ||
44 | } | ||
45 | sleep 1 | ||
46 | |||
47 | send -- "ls -al /etc | wc -l\r" | ||
48 | expect { | ||
49 | timeout {puts "TESTING ERROR 3.1\n";exit} | ||
50 | "10" | ||
51 | } | ||
52 | |||
53 | after 100 | ||
54 | send -- "exit\r" | ||
55 | sleep 1 | ||
56 | } | ||
57 | |||
58 | # | ||
59 | # C | ||
60 | # | ||
61 | if { $chroot == "chroot" } { | ||
62 | send -- "firejail --noprofile --chroot=/tmp/chroot --private-etc=group,hostname,hosts,nsswitch.conf,passwd,resolv.conf,skel\r" | ||
63 | expect { | ||
64 | timeout {puts "TESTING ERROR 4\n";exit} | ||
65 | "chroot option is not available" {puts "grsecurity\n"; exit} | ||
66 | "private-etc feature is disabled in chroot" | ||
67 | } | ||
68 | expect { | ||
69 | timeout {puts "TESTING ERROR 5\n";exit} | ||
70 | "chroot option is not available" {puts "grsecurity\n"; exit} | ||
71 | -re "Child process initialized in \[0-9\]+.\[0-9\]+ ms" | ||
72 | } | ||
73 | sleep 1 | ||
74 | |||
75 | send -- "ls /etc | grep firejail\r" | ||
76 | expect { | ||
77 | timeout {puts "TESTING ERROR 6\n";exit} | ||
78 | "firejail" | ||
79 | } | ||
80 | |||
81 | after 100 | ||
82 | send -- "exit\r" | ||
83 | sleep 1 | ||
84 | } | ||
85 | |||
86 | |||
87 | puts "\nall done\n" | ||
diff --git a/test/features/3.7.exp b/test/features/3.7.exp deleted file mode 100755 index f7f5fa67f..000000000 --- a/test/features/3.7.exp +++ /dev/null | |||
@@ -1,95 +0,0 @@ | |||
1 | #!/usr/bin/expect -f | ||
2 | # This file is part of Firejail project | ||
3 | # Copyright (C) 2014-2023 Firejail Authors | ||
4 | # License GPL v2 | ||
5 | # | ||
6 | # private-tmp | ||
7 | # | ||
8 | |||
9 | set timeout 10 | ||
10 | spawn $env(SHELL) | ||
11 | match_max 100000 | ||
12 | set overlay [lindex $argv 0] | ||
13 | set chroot [lindex $argv 1] | ||
14 | |||
15 | # | ||
16 | # N | ||
17 | # | ||
18 | send -- "touch /tmp/test1\r" | ||
19 | sleep 1 | ||
20 | send -- "touch /tmp/test2\r" | ||
21 | sleep 1 | ||
22 | send -- "firejail --noprofile --private-tmp\r" | ||
23 | expect { | ||
24 | timeout {puts "TESTING ERROR 0\n";exit} | ||
25 | -re "Child process initialized in \[0-9\]+.\[0-9\]+ ms" | ||
26 | } | ||
27 | sleep 1 | ||
28 | |||
29 | send -- "ls -al /tmp | wc -l\r" | ||
30 | expect { | ||
31 | timeout {puts "TESTING ERROR 1.1\n";exit} | ||
32 | "3" | ||
33 | } | ||
34 | |||
35 | |||
36 | after 100 | ||
37 | send -- "exit\r" | ||
38 | sleep 1 | ||
39 | |||
40 | # | ||
41 | # O | ||
42 | # | ||
43 | if { $overlay == "overlay" } { | ||
44 | send -- "touch /tmp/test1\r" | ||
45 | sleep 1 | ||
46 | send -- "touch /tmp/test2\r" | ||
47 | sleep 1 | ||
48 | send -- "firejail --noprofile --overlay --private-tmp\r" | ||
49 | expect { | ||
50 | timeout {puts "TESTING ERROR 2\n";exit} | ||
51 | "overlay option is not available" {puts "grsecurity\n"; exit} | ||
52 | -re "Child process initialized in \[0-9\]+.\[0-9\]+ ms" {puts "normal system\n"} | ||
53 | } | ||
54 | sleep 1 | ||
55 | |||
56 | send -- "ls -al /tmp | wc -l\r" | ||
57 | expect { | ||
58 | timeout {puts "TESTING ERROR 3.1\n";exit} | ||
59 | "3" | ||
60 | } | ||
61 | |||
62 | |||
63 | after 100 | ||
64 | send -- "exit\r" | ||
65 | sleep 1 | ||
66 | } | ||
67 | |||
68 | # | ||
69 | # C | ||
70 | # | ||
71 | if { $chroot == "chroot" } { | ||
72 | send -- "touch /tmp/test1\r" | ||
73 | sleep 1 | ||
74 | send -- "touch /tmp/test2\r" | ||
75 | sleep 1 | ||
76 | send -- "firejail --noprofile --chroot=/tmp/chroot --private-tmp\r" | ||
77 | expect { | ||
78 | timeout {puts "TESTING ERROR 4\n";exit} | ||
79 | -re "Child process initialized in \[0-9\]+.\[0-9\]+ ms" | ||
80 | } | ||
81 | sleep 1 | ||
82 | |||
83 | send -- "ls -al /tmp | wc -l\r" | ||
84 | expect { | ||
85 | timeout {puts "TESTING ERROR 5.1\n";exit} | ||
86 | "3" | ||
87 | } | ||
88 | |||
89 | after 100 | ||
90 | send -- "exit\r" | ||
91 | sleep 1 | ||
92 | } | ||
93 | |||
94 | |||
95 | puts "\nall done\n" | ||
diff --git a/test/features/3.8.exp b/test/features/3.8.exp deleted file mode 100755 index 23adab634..000000000 --- a/test/features/3.8.exp +++ /dev/null | |||
@@ -1,87 +0,0 @@ | |||
1 | #!/usr/bin/expect -f | ||
2 | # This file is part of Firejail project | ||
3 | # Copyright (C) 2014-2023 Firejail Authors | ||
4 | # License GPL v2 | ||
5 | # | ||
6 | # private-bin | ||
7 | # | ||
8 | |||
9 | set timeout 10 | ||
10 | spawn $env(SHELL) | ||
11 | match_max 100000 | ||
12 | set overlay [lindex $argv 0] | ||
13 | set chroot [lindex $argv 1] | ||
14 | |||
15 | # | ||
16 | # N | ||
17 | # | ||
18 | send -- "firejail --noprofile --private-bin=bash,cat,cp,ls,wc\r" | ||
19 | expect { | ||
20 | timeout {puts "TESTING ERROR 0\n";exit} | ||
21 | -re "Child process initialized in \[0-9\]+.\[0-9\]+ ms" | ||
22 | } | ||
23 | sleep 1 | ||
24 | |||
25 | send -- "ls -l /usr/bin | wc -l\r" | ||
26 | expect { | ||
27 | timeout {puts "TESTING ERROR 1.1\n";exit} | ||
28 | "6" | ||
29 | } | ||
30 | |||
31 | |||
32 | after 100 | ||
33 | send -- "exit\r" | ||
34 | sleep 1 | ||
35 | |||
36 | # | ||
37 | # O | ||
38 | # | ||
39 | if { $overlay == "overlay" } { | ||
40 | send -- "firejail --noprofile --overlay --private-bin=bash,cat,cp,ls,wc\r" | ||
41 | expect { | ||
42 | timeout {puts "TESTING ERROR 2\n";exit} | ||
43 | "overlay option is not available" {puts "grsecurity\n"; exit} | ||
44 | -re "Child process initialized in \[0-9\]+.\[0-9\]+ ms" {puts "normal system\n"} | ||
45 | } | ||
46 | sleep 1 | ||
47 | |||
48 | send -- "ls -l /usr/bin | wc -l\r" | ||
49 | expect { | ||
50 | timeout {puts "TESTING ERROR 3.1\n";exit} | ||
51 | "6" | ||
52 | } | ||
53 | |||
54 | |||
55 | after 100 | ||
56 | send -- "exit\r" | ||
57 | sleep 1 | ||
58 | } | ||
59 | |||
60 | # | ||
61 | # C | ||
62 | # | ||
63 | if { $chroot == "chroot" } { | ||
64 | send -- "firejail --noprofile --chroot=/tmp/chroot --private-bin=bash,cat,cp,ls,wc\r" | ||
65 | expect { | ||
66 | timeout {puts "TESTING ERROR 4\n";exit} | ||
67 | "private-bin feature is disabled in chroot" | ||
68 | } | ||
69 | expect { | ||
70 | timeout {puts "TESTING ERROR 5\n";exit} | ||
71 | -re "Child process initialized in \[0-9\]+.\[0-9\]+ ms" | ||
72 | } | ||
73 | sleep 1 | ||
74 | |||
75 | send -- "ls -l /usr/bin | wc -l\r" | ||
76 | expect { | ||
77 | timeout {puts "TESTING ERROR 6\n";exit} | ||
78 | "9" | ||
79 | } | ||
80 | |||
81 | after 100 | ||
82 | send -- "exit\r" | ||
83 | sleep 1 | ||
84 | } | ||
85 | |||
86 | |||
87 | puts "\nall done\n" | ||
diff --git a/test/features/3.9.exp b/test/features/3.9.exp deleted file mode 100755 index cfc588bf1..000000000 --- a/test/features/3.9.exp +++ /dev/null | |||
@@ -1,84 +0,0 @@ | |||
1 | #!/usr/bin/expect -f | ||
2 | # This file is part of Firejail project | ||
3 | # Copyright (C) 2014-2023 Firejail Authors | ||
4 | # License GPL v2 | ||
5 | # | ||
6 | # whitelist dev | ||
7 | # | ||
8 | |||
9 | set timeout 10 | ||
10 | spawn $env(SHELL) | ||
11 | match_max 100000 | ||
12 | set overlay [lindex $argv 0] | ||
13 | set chroot [lindex $argv 1] | ||
14 | |||
15 | # | ||
16 | # N | ||
17 | # | ||
18 | send -- "firejail --noprofile --whitelist=/dev/tty --whitelist=/dev/null\r" | ||
19 | expect { | ||
20 | timeout {puts "TESTING ERROR 0\n";exit} | ||
21 | -re "Child process initialized in \[0-9\]+.\[0-9\]+ ms" | ||
22 | } | ||
23 | sleep 1 | ||
24 | |||
25 | send -- "ls -l /dev | wc -l\r" | ||
26 | expect { | ||
27 | timeout {puts "TESTING ERROR 1.1\n";exit} | ||
28 | "3" | ||
29 | } | ||
30 | |||
31 | |||
32 | after 100 | ||
33 | send -- "exit\r" | ||
34 | sleep 1 | ||
35 | |||
36 | |||
37 | # | ||
38 | # O | ||
39 | # | ||
40 | if { $overlay == "overlay" } { | ||
41 | send -- "firejail --noprofile --overlay --whitelist=/dev/tty --whitelist=/dev/null\r" | ||
42 | expect { | ||
43 | timeout {puts "TESTING ERROR 2\n";exit} | ||
44 | "overlay option is not available" {puts "grsecurity\n"; exit} | ||
45 | -re "Child process initialized in \[0-9\]+.\[0-9\]+ ms" {puts "normal system\n"} | ||
46 | } | ||
47 | sleep 1 | ||
48 | |||
49 | send -- "ls -l /dev | wc -l\r" | ||
50 | expect { | ||
51 | timeout {puts "TESTING ERROR 3.1\n";exit} | ||
52 | "3" | ||
53 | } | ||
54 | |||
55 | |||
56 | after 100 | ||
57 | send -- "exit\r" | ||
58 | sleep 1 | ||
59 | } | ||
60 | |||
61 | # | ||
62 | # C | ||
63 | # | ||
64 | if { $chroot == "chroot" } { | ||
65 | send -- "firejail --noprofile --chroot=/tmp/chroot --whitelist=/dev/tty --whitelist=/dev/null\r" | ||
66 | expect { | ||
67 | timeout {puts "TESTING ERROR 4\n";exit} | ||
68 | -re "Child process initialized in \[0-9\]+.\[0-9\]+ ms" | ||
69 | } | ||
70 | sleep 1 | ||
71 | |||
72 | send -- "ls -l /dev | wc -l\r" | ||
73 | expect { | ||
74 | timeout {puts "TESTING ERROR 5.1\n";exit} | ||
75 | "3" | ||
76 | } | ||
77 | |||
78 | after 100 | ||
79 | send -- "exit\r" | ||
80 | sleep 1 | ||
81 | } | ||
82 | |||
83 | |||
84 | puts "\nall done\n" | ||
diff --git a/test/features/features.txt b/test/features/features.txt deleted file mode 100644 index 904803234..000000000 --- a/test/features/features.txt +++ /dev/null | |||
@@ -1,61 +0,0 @@ | |||
1 | Firejail Feature Testing | ||
2 | |||
3 | N - normal user filesystem | ||
4 | O - overlay filesystem | ||
5 | C - chroot filesystem | ||
6 | |||
7 | |||
8 | |||
9 | 1. Default features (tesing with --noprofile) | ||
10 | |||
11 | 1.1 disable /boot | ||
12 | 1.2 new /proc | ||
13 | 1.3 new /sys | ||
14 | - N, O fails remount, C fails remount | ||
15 | |||
16 | 1.4 mask other users | ||
17 | - home directory: N, O, C | ||
18 | - /etc/passwd: N, O, C to test | ||
19 | - /etc/group: N, O, C to test | ||
20 | |||
21 | 1.5 PID namespace | ||
22 | 1.6 new /var/log | ||
23 | 1.7 new /var/tmp | ||
24 | 1.8 disable firejail config and run time information | ||
25 | 1.9 mount namespace | ||
26 | 1.10 disable /selinux | ||
27 | |||
28 | |||
29 | 2. Networking features | ||
30 | |||
31 | 2.1 Hostname (use --hostname=newhostname, do a ping and cat /etc/hostname) | ||
32 | - ping disabled for C by default seccomp filter, use "getent hosts bingo" | ||
33 | |||
34 | 2.2 DNS (use --dns=4.2.2.1, use "dig google.com") | ||
35 | 2.3 mac-vlan (use --net=eth0 and --noprofile; run ifconfig and dig google.com) | ||
36 | 2.4 bridge (use --net=br0 and --noprofile; run ifconfig, netstat -rn, ping default gw) | ||
37 | - ping disabled for C by default seccomp filter - transfer test not implemented for C | ||
38 | 2.5 interface | ||
39 | 2.6 Default gw (--noprofile --net=eth0 --defaultgw=192.168.1.10, run netstat -rn) | ||
40 | |||
41 | |||
42 | 3. Filesystem features (use --noprofile) | ||
43 | |||
44 | 3.1 private | ||
45 | 3.2 read-only | ||
46 | 3.3 blacklist | ||
47 | 3.4 whitelist home | ||
48 | - N braking on Fedora | ||
49 | 3.5 private-dev | ||
50 | - O, C - somehow /dev/log is missing | ||
51 | - N - problems on Debian wheezy 32-bit, Fedora | ||
52 | 3.6 private-etc | ||
53 | - O not working - todo | ||
54 | 3.7 private-tmp | ||
55 | 3.8 private-bin | ||
56 | - O, C not working - todo | ||
57 | 3.9 whitelist dev | ||
58 | - N not working on Debian wheezy (32-bit and 64-bit) - todo | ||
59 | 3.10 whitelist tmp | ||
60 | - O not working on Arch Linux - todo | ||
61 | 3.11 mkdir | ||
diff --git a/test/features/test.sh b/test/features/test.sh deleted file mode 100755 index b3e29bc28..000000000 --- a/test/features/test.sh +++ /dev/null | |||
@@ -1,119 +0,0 @@ | |||
1 | #!/bin/bash | ||
2 | # This file is part of Firejail project | ||
3 | # Copyright (C) 2014-2023 Firejail Authors | ||
4 | # License GPL v2 | ||
5 | |||
6 | export LC_ALL=C | ||
7 | OVERLAY="overlay" | ||
8 | CHROOT="chroot" | ||
9 | NETWORK="network" | ||
10 | |||
11 | while [[ $# -gt 0 ]]; do # Until you run out of parameters . . . | ||
12 | case "$1" in | ||
13 | --nooverlay) | ||
14 | OVERLAY="none" | ||
15 | ;; | ||
16 | --nochroot) | ||
17 | CHROOT="none" | ||
18 | ;; | ||
19 | --nonetwork) | ||
20 | NETWORK="none" | ||
21 | ;; | ||
22 | --help) | ||
23 | echo "./test.sh [--nooverlay|--nochroot|--nonetwork|--help] | grep TESTING" | ||
24 | exit | ||
25 | ;; | ||
26 | esac | ||
27 | shift # Check next set of parameters. | ||
28 | done | ||
29 | |||
30 | # | ||
31 | # Feature testing | ||
32 | # | ||
33 | |||
34 | #################### | ||
35 | # Default features | ||
36 | #################### | ||
37 | echo "TESTING: 1.1 disable /boot" | ||
38 | ./1.1.exp "$OVERLAY" "$CHROOT" | ||
39 | |||
40 | echo "TESTING: 1.2 new /proc" | ||
41 | ./1.2.exp "$OVERLAY" "$CHROOT" | ||
42 | |||
43 | echo "TESTING: 1.4 mask other users" | ||
44 | ./1.4.exp "$OVERLAY" "$CHROOT" | ||
45 | |||
46 | echo "TESTING: 1.5 PID namespace" | ||
47 | ./1.5.exp "$OVERLAY" "$CHROOT" | ||
48 | |||
49 | echo "TESTING: 1.6 new /var/log" | ||
50 | ./1.6.exp "$OVERLAY" "$CHROOT" | ||
51 | |||
52 | echo "TESTING: 1.7 new /var/tmp" | ||
53 | ./1.7.exp "$OVERLAY" "$CHROOT" | ||
54 | |||
55 | echo "TESTING: 1.8 disable firejail config and run time information" | ||
56 | ./1.8.exp "$OVERLAY" "$CHROOT" | ||
57 | |||
58 | echo "TESTING: 1.10 disable /selinux" | ||
59 | ./1.10.exp "$OVERLAY" "$CHROOT" | ||
60 | |||
61 | #################### | ||
62 | # networking features | ||
63 | #################### | ||
64 | if [[ $NETWORK == "network" ]] | ||
65 | then | ||
66 | echo "TESTING: 2.1 hostname" | ||
67 | ./2.1.exp "$OVERLAY" "$CHROOT" | ||
68 | |||
69 | echo "TESTING: 2.2 DNS" | ||
70 | ./2.2.exp "$OVERLAY" "$CHROOT" | ||
71 | |||
72 | echo "TESTING: 2.3 mac-vlan" | ||
73 | ./2.3.exp "$OVERLAY" "$CHROOT" | ||
74 | |||
75 | echo "TESTING: 2.4 bridge" | ||
76 | ./2.4.exp "$OVERLAY" "$CHROOT" | ||
77 | |||
78 | echo "TESTING: 2.5 interface" | ||
79 | ./2.5.exp "$OVERLAY" "$CHROOT" | ||
80 | |||
81 | echo "TESTING: 2.6 Default gateway" | ||
82 | ./2.6.exp "$OVERLAY" "$CHROOT" | ||
83 | fi | ||
84 | |||
85 | #################### | ||
86 | # filesystem features | ||
87 | #################### | ||
88 | echo "TESTING: 3.1 private (fails on OpenSUSE)" | ||
89 | ./3.1.exp "$OVERLAY" "$CHROOT" | ||
90 | |||
91 | echo "TESTING: 3.2 read-only" | ||
92 | ./3.2.exp "$OVERLAY" "$CHROOT" | ||
93 | |||
94 | echo "TESTING: 3.3 blacklist" | ||
95 | ./3.3.exp "$OVERLAY" "$CHROOT" | ||
96 | |||
97 | echo "TESTING: 3.4 whitelist home (fails on OpenSUSE)" | ||
98 | ./3.4.exp "$OVERLAY" "$CHROOT" | ||
99 | |||
100 | echo "TESTING: 3.5 private-dev" | ||
101 | ./3.5.exp "$OVERLAY" "$CHROOT" | ||
102 | |||
103 | echo "TESTING: 3.6 private-etc" | ||
104 | ./3.6.exp notworking "$CHROOT" | ||
105 | |||
106 | echo "TESTING: 3.7 private-tmp" | ||
107 | ./3.7.exp "$OVERLAY" "$CHROOT" | ||
108 | |||
109 | echo "TESTING: 3.8 private-bin" | ||
110 | ./3.8.exp notworking notworking | ||
111 | |||
112 | echo "TESTING: 3.9 whitelist dev" | ||
113 | ./3.9.exp "$OVERLAY" "$CHROOT" | ||
114 | |||
115 | echo "TESTING: 3.10 whitelist tmp" | ||
116 | ./3.10.exp "$OVERLAY" "$CHROOT" | ||
117 | |||
118 | echo "TESTING: 3.11 mkdir" | ||
119 | ./3.11.exp "$OVERLAY" "$CHROOT" | ||