mirror of
https://github.com/morgan9e/systemd
synced 2026-04-14 16:37:19 +09:00
a6a7983dbf
Let's operate on fds rather than paths. Make some tweaks to the logic on top: 1. Mark the resulting dir as read-only after we are done. 2. Use the new inode_type_to_string() calls to determine the inode names. 3. If an inode already exists, try to adjust the access mode, just in case. 4. Use FOREACH_ARRAY()
68 lines
2.1 KiB
C
68 lines
2.1 KiB
C
/* SPDX-License-Identifier: LGPL-2.1-or-later */
|
|
|
|
#include "capability-util.h"
|
|
#include "dev-setup.h"
|
|
#include "fs-util.h"
|
|
#include "mkdir.h"
|
|
#include "path-util.h"
|
|
#include "rm-rf.h"
|
|
#include "tests.h"
|
|
#include "tmpfile-util.h"
|
|
|
|
int main(int argc, char *argv[]) {
|
|
_cleanup_(rm_rf_physical_and_freep) char *p = NULL;
|
|
const char *f;
|
|
struct stat st;
|
|
|
|
test_setup_logging(LOG_DEBUG);
|
|
|
|
if (have_effective_cap(CAP_DAC_OVERRIDE) <= 0)
|
|
return log_tests_skipped("missing capability (CAP_DAC_OVERRIDE)");
|
|
|
|
assert_se(mkdtemp_malloc("/tmp/test-dev-setupXXXXXX", &p) >= 0);
|
|
|
|
f = prefix_roota(p, "/run/systemd");
|
|
assert_se(mkdir_p(f, 0755) >= 0);
|
|
|
|
assert_se(make_inaccessible_nodes(f, 1, 1) >= 0);
|
|
assert_se(make_inaccessible_nodes(f, 1, 1) >= 0); /* 2nd call should be a clean NOP */
|
|
|
|
f = prefix_roota(p, "/run/systemd/inaccessible/reg");
|
|
assert_se(stat(f, &st) >= 0);
|
|
assert_se(S_ISREG(st.st_mode));
|
|
assert_se((st.st_mode & 07777) == 0000);
|
|
|
|
f = prefix_roota(p, "/run/systemd/inaccessible/dir");
|
|
assert_se(stat(f, &st) >= 0);
|
|
assert_se(S_ISDIR(st.st_mode));
|
|
assert_se((st.st_mode & 07777) == 0000);
|
|
|
|
f = prefix_roota(p, "/run/systemd/inaccessible/fifo");
|
|
assert_se(stat(f, &st) >= 0);
|
|
assert_se(S_ISFIFO(st.st_mode));
|
|
assert_se((st.st_mode & 07777) == 0000);
|
|
|
|
f = prefix_roota(p, "/run/systemd/inaccessible/sock");
|
|
assert_se(stat(f, &st) >= 0);
|
|
assert_se(S_ISSOCK(st.st_mode));
|
|
assert_se((st.st_mode & 07777) == 0000);
|
|
|
|
f = prefix_roota(p, "/run/systemd/inaccessible/chr");
|
|
if (stat(f, &st) < 0)
|
|
assert_se(errno == ENOENT);
|
|
else {
|
|
assert_se(S_ISCHR(st.st_mode));
|
|
assert_se((st.st_mode & 07777) == 0000);
|
|
}
|
|
|
|
f = prefix_roota(p, "/run/systemd/inaccessible/blk");
|
|
if (stat(f, &st) < 0)
|
|
assert_se(errno == ENOENT);
|
|
else {
|
|
assert_se(S_ISBLK(st.st_mode));
|
|
assert_se((st.st_mode & 07777) == 0000);
|
|
}
|
|
|
|
return EXIT_SUCCESS;
|
|
}
|