From 200b205b69f9a6874e55bf76ca876d2c4fcee4ac Mon Sep 17 00:00:00 2001 From: netblue30 Date: Sun, 27 Sep 2015 08:00:06 -0400 Subject: seccomp errno testing --- test/seccomp-errno.exp | 63 ++++++++++++++++++++++++++++++++++++++++++++++++-- 1 file changed, 61 insertions(+), 2 deletions(-) diff --git a/test/seccomp-errno.exp b/test/seccomp-errno.exp index e69b89c7a..138f039b0 100755 --- a/test/seccomp-errno.exp +++ b/test/seccomp-errno.exp @@ -12,17 +12,76 @@ expect { timeout {puts "TESTING ERROR 0\n";exit} "No such file or directory" } - sleep 1 send -- "firejail --seccomp.enoent=unlinkat --debug rm seccomp-test-file\r" expect { - timeout {puts "TESTING ERROR 0\n";exit} + timeout {puts "TESTING ERROR 1\n";exit} "ERRNO 263 unlinkat 2 ENOENT" } +sleep 1 + +send -- "firejail --seccomp.enoent=unlinkat,mkdir\r" +expect { + timeout {puts "TESTING ERROR 2\n";exit} + "Child process initialized" +} +sleep 1 +send -- "rm seccomp-test-file\r" +expect { + timeout {puts "TESTING ERROR 3\n";exit} + "No such file or directory" +} +after 100 +puts "\n" + +send -- "mkdir seccomp-test-dir\r" +expect { + timeout {puts "TESTING ERROR 4\n";exit} + "No such file or directory" +} +after 100 +puts "\n" + +send -- "exit\r" +sleep 1 + + +send -- "firejail --seccomp.enoent=unlinkat --seccomp.enoent=mkdir\r" +expect { + timeout {puts "TESTING ERROR 5\n";exit} + "errno enoent already configured" +} +sleep 1 + +send -- "firejail --seccomp.enoent=unlinkat --seccomp.eperm=mkdir\r" +expect { + timeout {puts "TESTING ERROR 6\n";exit} + "Child process initialized" +} +sleep 1 +send -- "rm seccomp-test-file\r" +expect { + timeout {puts "TESTING ERROR 7\n";exit} + "No such file or directory" +} +after 100 +puts "\n" +send -- "mkdir seccomp-test-dir\r" +expect { + timeout {puts "TESTING ERROR 8\n";exit} + "Operation not permitted" +} +after 100 +puts "\n" + +send -- "exit\r" sleep 1 + + + send -- "rm seccomp-test-file\r" sleep 1 puts "all done\n" -- cgit v1.2.3-70-g09d2