mirror of
https://sourceware.org/git/glibc.git
synced 2024-09-19 16:10:01 +00:00
2fe64148a8
If the build itself is run in a container, we may not be able to fully set up a nested container for test-container testing. Notably is the mounting of /proc, since it's critical that it be mounted from within the same PID namespace as its users, and thus cannot be bind mounted from outside the container like other mounts. This patch defaults to using the parent's PID namespace instead of creating a new one, as this is more likely to be allowed. If the test needs an isolated PID namespace, it should add the "pidns" command to its init script. Reviewed-by: Carlos O'Donell <carlos@redhat.com>
154 lines
3.5 KiB
C
154 lines
3.5 KiB
C
/* Test that reloading is disabled after a chroot.
|
|
Copyright (C) 2020-2022 Free Software Foundation, Inc.
|
|
This file is part of the GNU C Library.
|
|
|
|
The GNU C Library is free software; you can redistribute it and/or
|
|
modify it under the terms of the GNU Lesser General Public
|
|
License as published by the Free Software Foundation; either
|
|
version 2.1 of the License, or (at your option) any later version.
|
|
|
|
The GNU C Library is distributed in the hope that it will be useful,
|
|
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
Lesser General Public License for more details.
|
|
|
|
You should have received a copy of the GNU Lesser General Public
|
|
License along with the GNU C Library; if not, see
|
|
<https://www.gnu.org/licenses/>. */
|
|
|
|
#include <nss.h>
|
|
#include <stdio.h>
|
|
#include <stdlib.h>
|
|
#include <string.h>
|
|
#include <limits.h>
|
|
#include <sys/types.h>
|
|
#include <errno.h>
|
|
#include <pwd.h>
|
|
#include <grp.h>
|
|
#include <unistd.h>
|
|
#include <netdb.h>
|
|
|
|
#include <support/support.h>
|
|
#include <support/check.h>
|
|
#include <support/xunistd.h>
|
|
|
|
#include "nss_test.h"
|
|
|
|
#ifndef PATH_MAX
|
|
# define PATH_MAX 1024
|
|
#endif
|
|
|
|
static struct passwd pwd_table1[] =
|
|
{
|
|
PWD_N (1234, "test1"),
|
|
PWD_N (4321, "test2"),
|
|
PWD_LAST ()
|
|
};
|
|
|
|
static const char *group_4[] = {
|
|
"alpha", "beta", "gamma", "fred", NULL
|
|
};
|
|
|
|
static struct group group_table_data1[] =
|
|
{
|
|
GRP (4),
|
|
GRP_LAST ()
|
|
};
|
|
|
|
void
|
|
_nss_test1_init_hook (test_tables *t)
|
|
{
|
|
t->pwd_table = pwd_table1;
|
|
t->grp_table = group_table_data1;
|
|
}
|
|
|
|
static struct passwd pwd_table2[] =
|
|
{
|
|
PWD_N (5, "test1"),
|
|
PWD_N (2468, "test2"),
|
|
PWD_LAST ()
|
|
};
|
|
|
|
static const char *group_5[] = {
|
|
"fred", NULL
|
|
};
|
|
|
|
static struct group group_table_data2[] =
|
|
{
|
|
GRP (5),
|
|
GRP_LAST ()
|
|
};
|
|
|
|
void
|
|
_nss_test2_init_hook (test_tables *t)
|
|
{
|
|
t->pwd_table = pwd_table2;
|
|
t->grp_table = group_table_data2;
|
|
}
|
|
|
|
static int
|
|
do_test (void)
|
|
{
|
|
struct passwd *pw;
|
|
struct group *gr;
|
|
struct hostent *he;
|
|
char buf1[PATH_MAX];
|
|
char buf2[PATH_MAX];
|
|
|
|
support_need_proc ("Our xmkdirp fails if we can't map our uid, which requires /proc.");
|
|
|
|
sprintf (buf1, "/subdir%s", support_slibdir_prefix);
|
|
xmkdirp (buf1, 0777);
|
|
|
|
/* Copy this DSO into the chroot so it *could* be loaded. */
|
|
sprintf (buf1, "%s/libnss_files.so.2", support_slibdir_prefix);
|
|
sprintf (buf2, "/subdir%s/libnss_files.so.2", support_slibdir_prefix);
|
|
support_copy_file (buf1, buf2);
|
|
|
|
/* Check we're using the "outer" nsswitch.conf. */
|
|
|
|
/* This uses the test1 DSO. */
|
|
pw = getpwnam ("test1");
|
|
TEST_VERIFY (pw != NULL);
|
|
if (pw)
|
|
TEST_COMPARE (pw->pw_uid, 1234);
|
|
|
|
/* This just loads the test2 DSO. */
|
|
gr = getgrgid (5);
|
|
TEST_VERIFY (gr != NULL);
|
|
|
|
|
|
/* Change the root dir. */
|
|
|
|
TEST_VERIFY (chroot ("/subdir") == 0);
|
|
chdir ("/");
|
|
|
|
/* Check we're NOT using the "inner" nsswitch.conf. */
|
|
|
|
/* Both DSOs are loaded, which is used? */
|
|
pw = getpwnam ("test2");
|
|
TEST_VERIFY (pw != NULL);
|
|
if (pw)
|
|
TEST_VERIFY (pw->pw_uid != 2468);
|
|
|
|
/* We should still be using the old configuration. */
|
|
pw = getpwnam ("test1");
|
|
TEST_VERIFY (pw != NULL);
|
|
if (pw)
|
|
TEST_COMPARE (pw->pw_uid, 1234);
|
|
gr = getgrgid (5);
|
|
TEST_VERIFY (gr != NULL);
|
|
gr = getgrnam ("name4");
|
|
TEST_VERIFY (gr == NULL);
|
|
|
|
/* hosts in the outer nsswitch is files; the inner one is test1.
|
|
Verify that we're still using the outer nsswitch *and* that we
|
|
can load the files DSO. */
|
|
he = gethostbyname ("test2");
|
|
TEST_VERIFY (he != NULL);
|
|
|
|
return 0;
|
|
}
|
|
|
|
#include <support/test-driver.c>
|