1e1199815SMickaël Salaün // SPDX-License-Identifier: GPL-2.0 2e1199815SMickaël Salaün /* 3e1199815SMickaël Salaün * Landlock tests - Common user space base 4e1199815SMickaël Salaün * 5e1199815SMickaël Salaün * Copyright © 2017-2020 Mickaël Salaün <mic@digikod.net> 6e1199815SMickaël Salaün * Copyright © 2019-2020 ANSSI 7e1199815SMickaël Salaün */ 8e1199815SMickaël Salaün 9e1199815SMickaël Salaün #define _GNU_SOURCE 10e1199815SMickaël Salaün #include <errno.h> 11e1199815SMickaël Salaün #include <fcntl.h> 12e1199815SMickaël Salaün #include <linux/landlock.h> 13e1199815SMickaël Salaün #include <string.h> 14e1199815SMickaël Salaün #include <sys/prctl.h> 15e1199815SMickaël Salaün #include <sys/socket.h> 16e1199815SMickaël Salaün #include <sys/types.h> 17e1199815SMickaël Salaün 18e1199815SMickaël Salaün #include "common.h" 19e1199815SMickaël Salaün 20e1199815SMickaël Salaün #ifndef O_PATH 21e1199815SMickaël Salaün #define O_PATH 010000000 22e1199815SMickaël Salaün #endif 23e1199815SMickaël Salaün 24371183faSMickaël Salaün TEST(inconsistent_attr) 25371183faSMickaël Salaün { 26e1199815SMickaël Salaün const long page_size = sysconf(_SC_PAGESIZE); 27e1199815SMickaël Salaün char *const buf = malloc(page_size + 1); 28e1199815SMickaël Salaün struct landlock_ruleset_attr *const ruleset_attr = (void *)buf; 29e1199815SMickaël Salaün 30e1199815SMickaël Salaün ASSERT_NE(NULL, buf); 31e1199815SMickaël Salaün 32e1199815SMickaël Salaün /* Checks copy_from_user(). */ 33e1199815SMickaël Salaün ASSERT_EQ(-1, landlock_create_ruleset(ruleset_attr, 0, 0)); 34e1199815SMickaël Salaün /* The size if less than sizeof(struct landlock_attr_enforce). */ 35e1199815SMickaël Salaün ASSERT_EQ(EINVAL, errno); 36e1199815SMickaël Salaün ASSERT_EQ(-1, landlock_create_ruleset(ruleset_attr, 1, 0)); 37e1199815SMickaël Salaün ASSERT_EQ(EINVAL, errno); 38291865bdSMickaël Salaün ASSERT_EQ(-1, landlock_create_ruleset(ruleset_attr, 7, 0)); 39291865bdSMickaël Salaün ASSERT_EQ(EINVAL, errno); 40e1199815SMickaël Salaün 41e1199815SMickaël Salaün ASSERT_EQ(-1, landlock_create_ruleset(NULL, 1, 0)); 42e1199815SMickaël Salaün /* The size if less than sizeof(struct landlock_attr_enforce). */ 43e1199815SMickaël Salaün ASSERT_EQ(EFAULT, errno); 44e1199815SMickaël Salaün 45371183faSMickaël Salaün ASSERT_EQ(-1, landlock_create_ruleset( 46371183faSMickaël Salaün NULL, sizeof(struct landlock_ruleset_attr), 0)); 47e1199815SMickaël Salaün ASSERT_EQ(EFAULT, errno); 48e1199815SMickaël Salaün 49e1199815SMickaël Salaün ASSERT_EQ(-1, landlock_create_ruleset(ruleset_attr, page_size + 1, 0)); 50e1199815SMickaël Salaün ASSERT_EQ(E2BIG, errno); 51e1199815SMickaël Salaün 52291865bdSMickaël Salaün /* Checks minimal valid attribute size. */ 53291865bdSMickaël Salaün ASSERT_EQ(-1, landlock_create_ruleset(ruleset_attr, 8, 0)); 54291865bdSMickaël Salaün ASSERT_EQ(ENOMSG, errno); 55371183faSMickaël Salaün ASSERT_EQ(-1, landlock_create_ruleset( 56371183faSMickaël Salaün ruleset_attr, 57e1199815SMickaël Salaün sizeof(struct landlock_ruleset_attr), 0)); 58e1199815SMickaël Salaün ASSERT_EQ(ENOMSG, errno); 59e1199815SMickaël Salaün ASSERT_EQ(-1, landlock_create_ruleset(ruleset_attr, page_size, 0)); 60e1199815SMickaël Salaün ASSERT_EQ(ENOMSG, errno); 61e1199815SMickaël Salaün 62e1199815SMickaël Salaün /* Checks non-zero value. */ 63e1199815SMickaël Salaün buf[page_size - 2] = '.'; 64e1199815SMickaël Salaün ASSERT_EQ(-1, landlock_create_ruleset(ruleset_attr, page_size, 0)); 65e1199815SMickaël Salaün ASSERT_EQ(E2BIG, errno); 66e1199815SMickaël Salaün 67e1199815SMickaël Salaün ASSERT_EQ(-1, landlock_create_ruleset(ruleset_attr, page_size + 1, 0)); 68e1199815SMickaël Salaün ASSERT_EQ(E2BIG, errno); 69e1199815SMickaël Salaün 70e1199815SMickaël Salaün free(buf); 71e1199815SMickaël Salaün } 72e1199815SMickaël Salaün 73371183faSMickaël Salaün TEST(abi_version) 74371183faSMickaël Salaün { 753532b0b4SMickaël Salaün const struct landlock_ruleset_attr ruleset_attr = { 763532b0b4SMickaël Salaün .handled_access_fs = LANDLOCK_ACCESS_FS_READ_FILE, 773532b0b4SMickaël Salaün }; 783532b0b4SMickaël Salaün ASSERT_EQ(1, landlock_create_ruleset(NULL, 0, 793532b0b4SMickaël Salaün LANDLOCK_CREATE_RULESET_VERSION)); 803532b0b4SMickaël Salaün 813532b0b4SMickaël Salaün ASSERT_EQ(-1, landlock_create_ruleset(&ruleset_attr, 0, 823532b0b4SMickaël Salaün LANDLOCK_CREATE_RULESET_VERSION)); 833532b0b4SMickaël Salaün ASSERT_EQ(EINVAL, errno); 843532b0b4SMickaël Salaün 853532b0b4SMickaël Salaün ASSERT_EQ(-1, landlock_create_ruleset(NULL, sizeof(ruleset_attr), 863532b0b4SMickaël Salaün LANDLOCK_CREATE_RULESET_VERSION)); 873532b0b4SMickaël Salaün ASSERT_EQ(EINVAL, errno); 883532b0b4SMickaël Salaün 89371183faSMickaël Salaün ASSERT_EQ(-1, 90371183faSMickaël Salaün landlock_create_ruleset(&ruleset_attr, sizeof(ruleset_attr), 913532b0b4SMickaël Salaün LANDLOCK_CREATE_RULESET_VERSION)); 923532b0b4SMickaël Salaün ASSERT_EQ(EINVAL, errno); 933532b0b4SMickaël Salaün 943532b0b4SMickaël Salaün ASSERT_EQ(-1, landlock_create_ruleset(NULL, 0, 95371183faSMickaël Salaün LANDLOCK_CREATE_RULESET_VERSION | 96371183faSMickaël Salaün 1 << 31)); 973532b0b4SMickaël Salaün ASSERT_EQ(EINVAL, errno); 983532b0b4SMickaël Salaün } 993532b0b4SMickaël Salaün 100*6533d0c3SMickaël Salaün /* Tests ordering of syscall argument checks. */ 101*6533d0c3SMickaël Salaün TEST(create_ruleset_checks_ordering) 102371183faSMickaël Salaün { 1033532b0b4SMickaël Salaün const int last_flag = LANDLOCK_CREATE_RULESET_VERSION; 1043532b0b4SMickaël Salaün const int invalid_flag = last_flag << 1; 105*6533d0c3SMickaël Salaün int ruleset_fd; 1063532b0b4SMickaël Salaün const struct landlock_ruleset_attr ruleset_attr = { 1073532b0b4SMickaël Salaün .handled_access_fs = LANDLOCK_ACCESS_FS_READ_FILE, 1083532b0b4SMickaël Salaün }; 1093532b0b4SMickaël Salaün 110*6533d0c3SMickaël Salaün /* Checks priority for invalid flags. */ 1113532b0b4SMickaël Salaün ASSERT_EQ(-1, landlock_create_ruleset(NULL, 0, invalid_flag)); 1123532b0b4SMickaël Salaün ASSERT_EQ(EINVAL, errno); 1133532b0b4SMickaël Salaün 1143532b0b4SMickaël Salaün ASSERT_EQ(-1, landlock_create_ruleset(&ruleset_attr, 0, invalid_flag)); 1153532b0b4SMickaël Salaün ASSERT_EQ(EINVAL, errno); 1163532b0b4SMickaël Salaün 1173532b0b4SMickaël Salaün ASSERT_EQ(-1, landlock_create_ruleset(NULL, sizeof(ruleset_attr), 1183532b0b4SMickaël Salaün invalid_flag)); 1193532b0b4SMickaël Salaün ASSERT_EQ(EINVAL, errno); 1203532b0b4SMickaël Salaün 121371183faSMickaël Salaün ASSERT_EQ(-1, 122371183faSMickaël Salaün landlock_create_ruleset(&ruleset_attr, sizeof(ruleset_attr), 123371183faSMickaël Salaün invalid_flag)); 1243532b0b4SMickaël Salaün ASSERT_EQ(EINVAL, errno); 125*6533d0c3SMickaël Salaün 126*6533d0c3SMickaël Salaün /* Checks too big ruleset_attr size. */ 127*6533d0c3SMickaël Salaün ASSERT_EQ(-1, landlock_create_ruleset(&ruleset_attr, -1, 0)); 128*6533d0c3SMickaël Salaün ASSERT_EQ(E2BIG, errno); 129*6533d0c3SMickaël Salaün 130*6533d0c3SMickaël Salaün /* Checks too small ruleset_attr size. */ 131*6533d0c3SMickaël Salaün ASSERT_EQ(-1, landlock_create_ruleset(&ruleset_attr, 0, 0)); 132*6533d0c3SMickaël Salaün ASSERT_EQ(EINVAL, errno); 133*6533d0c3SMickaël Salaün ASSERT_EQ(-1, landlock_create_ruleset(&ruleset_attr, 1, 0)); 134*6533d0c3SMickaël Salaün ASSERT_EQ(EINVAL, errno); 135*6533d0c3SMickaël Salaün 136*6533d0c3SMickaël Salaün /* Checks valid call. */ 137*6533d0c3SMickaël Salaün ruleset_fd = 138*6533d0c3SMickaël Salaün landlock_create_ruleset(&ruleset_attr, sizeof(ruleset_attr), 0); 139*6533d0c3SMickaël Salaün ASSERT_LE(0, ruleset_fd); 140*6533d0c3SMickaël Salaün ASSERT_EQ(0, close(ruleset_fd)); 1413532b0b4SMickaël Salaün } 1423532b0b4SMickaël Salaün 143589172e5SMickaël Salaün /* Tests ordering of syscall argument checks. */ 144589172e5SMickaël Salaün TEST(add_rule_checks_ordering) 145371183faSMickaël Salaün { 146e1199815SMickaël Salaün const struct landlock_ruleset_attr ruleset_attr = { 147e1199815SMickaël Salaün .handled_access_fs = LANDLOCK_ACCESS_FS_EXECUTE, 148e1199815SMickaël Salaün }; 149589172e5SMickaël Salaün struct landlock_path_beneath_attr path_beneath_attr = { 150589172e5SMickaël Salaün .allowed_access = LANDLOCK_ACCESS_FS_EXECUTE, 151589172e5SMickaël Salaün .parent_fd = -1, 152589172e5SMickaël Salaün }; 153371183faSMickaël Salaün const int ruleset_fd = 154371183faSMickaël Salaün landlock_create_ruleset(&ruleset_attr, sizeof(ruleset_attr), 0); 155e1199815SMickaël Salaün 156e1199815SMickaël Salaün ASSERT_LE(0, ruleset_fd); 157e1199815SMickaël Salaün 158589172e5SMickaël Salaün /* Checks invalid flags. */ 159589172e5SMickaël Salaün ASSERT_EQ(-1, landlock_add_rule(-1, 0, NULL, 1)); 160589172e5SMickaël Salaün ASSERT_EQ(EINVAL, errno); 161589172e5SMickaël Salaün 162589172e5SMickaël Salaün /* Checks invalid ruleset FD. */ 163589172e5SMickaël Salaün ASSERT_EQ(-1, landlock_add_rule(-1, 0, NULL, 0)); 164589172e5SMickaël Salaün ASSERT_EQ(EBADF, errno); 165589172e5SMickaël Salaün 166589172e5SMickaël Salaün /* Checks invalid rule type. */ 167589172e5SMickaël Salaün ASSERT_EQ(-1, landlock_add_rule(ruleset_fd, 0, NULL, 0)); 168589172e5SMickaël Salaün ASSERT_EQ(EINVAL, errno); 169589172e5SMickaël Salaün 170589172e5SMickaël Salaün /* Checks invalid rule attr. */ 171e1199815SMickaël Salaün ASSERT_EQ(-1, landlock_add_rule(ruleset_fd, LANDLOCK_RULE_PATH_BENEATH, 172e1199815SMickaël Salaün NULL, 0)); 173e1199815SMickaël Salaün ASSERT_EQ(EFAULT, errno); 174589172e5SMickaël Salaün 175589172e5SMickaël Salaün /* Checks invalid path_beneath.parent_fd. */ 176589172e5SMickaël Salaün ASSERT_EQ(-1, landlock_add_rule(ruleset_fd, LANDLOCK_RULE_PATH_BENEATH, 177589172e5SMickaël Salaün &path_beneath_attr, 0)); 178589172e5SMickaël Salaün ASSERT_EQ(EBADF, errno); 179589172e5SMickaël Salaün 180589172e5SMickaël Salaün /* Checks valid call. */ 181589172e5SMickaël Salaün path_beneath_attr.parent_fd = 182589172e5SMickaël Salaün open("/tmp", O_PATH | O_NOFOLLOW | O_DIRECTORY | O_CLOEXEC); 183589172e5SMickaël Salaün ASSERT_LE(0, path_beneath_attr.parent_fd); 184589172e5SMickaël Salaün ASSERT_EQ(0, landlock_add_rule(ruleset_fd, LANDLOCK_RULE_PATH_BENEATH, 185589172e5SMickaël Salaün &path_beneath_attr, 0)); 186589172e5SMickaël Salaün ASSERT_EQ(0, close(path_beneath_attr.parent_fd)); 187e1199815SMickaël Salaün ASSERT_EQ(0, close(ruleset_fd)); 188e1199815SMickaël Salaün } 189e1199815SMickaël Salaün 190eba39ca4SMickaël Salaün /* Tests ordering of syscall argument and permission checks. */ 191eba39ca4SMickaël Salaün TEST(restrict_self_checks_ordering) 192371183faSMickaël Salaün { 193eba39ca4SMickaël Salaün const struct landlock_ruleset_attr ruleset_attr = { 194eba39ca4SMickaël Salaün .handled_access_fs = LANDLOCK_ACCESS_FS_EXECUTE, 195eba39ca4SMickaël Salaün }; 196eba39ca4SMickaël Salaün struct landlock_path_beneath_attr path_beneath_attr = { 197eba39ca4SMickaël Salaün .allowed_access = LANDLOCK_ACCESS_FS_EXECUTE, 198eba39ca4SMickaël Salaün .parent_fd = -1, 199eba39ca4SMickaël Salaün }; 200eba39ca4SMickaël Salaün const int ruleset_fd = 201eba39ca4SMickaël Salaün landlock_create_ruleset(&ruleset_attr, sizeof(ruleset_attr), 0); 202eba39ca4SMickaël Salaün 203eba39ca4SMickaël Salaün ASSERT_LE(0, ruleset_fd); 204eba39ca4SMickaël Salaün path_beneath_attr.parent_fd = 205eba39ca4SMickaël Salaün open("/tmp", O_PATH | O_NOFOLLOW | O_DIRECTORY | O_CLOEXEC); 206eba39ca4SMickaël Salaün ASSERT_LE(0, path_beneath_attr.parent_fd); 207eba39ca4SMickaël Salaün ASSERT_EQ(0, landlock_add_rule(ruleset_fd, LANDLOCK_RULE_PATH_BENEATH, 208eba39ca4SMickaël Salaün &path_beneath_attr, 0)); 209eba39ca4SMickaël Salaün ASSERT_EQ(0, close(path_beneath_attr.parent_fd)); 210eba39ca4SMickaël Salaün 211eba39ca4SMickaël Salaün /* Checks unprivileged enforcement without no_new_privs. */ 212eba39ca4SMickaël Salaün drop_caps(_metadata); 213eba39ca4SMickaël Salaün ASSERT_EQ(-1, landlock_restrict_self(-1, -1)); 214eba39ca4SMickaël Salaün ASSERT_EQ(EPERM, errno); 215eba39ca4SMickaël Salaün ASSERT_EQ(-1, landlock_restrict_self(-1, 0)); 216eba39ca4SMickaël Salaün ASSERT_EQ(EPERM, errno); 217eba39ca4SMickaël Salaün ASSERT_EQ(-1, landlock_restrict_self(ruleset_fd, 0)); 218eba39ca4SMickaël Salaün ASSERT_EQ(EPERM, errno); 219eba39ca4SMickaël Salaün 220e1199815SMickaël Salaün ASSERT_EQ(0, prctl(PR_SET_NO_NEW_PRIVS, 1, 0, 0, 0)); 221e1199815SMickaël Salaün 222eba39ca4SMickaël Salaün /* Checks invalid flags. */ 223eba39ca4SMickaël Salaün ASSERT_EQ(-1, landlock_restrict_self(-1, -1)); 224eba39ca4SMickaël Salaün ASSERT_EQ(EINVAL, errno); 225eba39ca4SMickaël Salaün 226eba39ca4SMickaël Salaün /* Checks invalid ruleset FD. */ 227e1199815SMickaël Salaün ASSERT_EQ(-1, landlock_restrict_self(-1, 0)); 228e1199815SMickaël Salaün ASSERT_EQ(EBADF, errno); 229e1199815SMickaël Salaün 230eba39ca4SMickaël Salaün /* Checks valid call. */ 231eba39ca4SMickaël Salaün ASSERT_EQ(0, landlock_restrict_self(ruleset_fd, 0)); 232eba39ca4SMickaël Salaün ASSERT_EQ(0, close(ruleset_fd)); 233e1199815SMickaël Salaün } 234e1199815SMickaël Salaün 235e1199815SMickaël Salaün TEST(ruleset_fd_io) 236e1199815SMickaël Salaün { 237e1199815SMickaël Salaün struct landlock_ruleset_attr ruleset_attr = { 238e1199815SMickaël Salaün .handled_access_fs = LANDLOCK_ACCESS_FS_READ_FILE, 239e1199815SMickaël Salaün }; 240e1199815SMickaël Salaün int ruleset_fd; 241e1199815SMickaël Salaün char buf; 242e1199815SMickaël Salaün 243e1199815SMickaël Salaün drop_caps(_metadata); 244371183faSMickaël Salaün ruleset_fd = 245371183faSMickaël Salaün landlock_create_ruleset(&ruleset_attr, sizeof(ruleset_attr), 0); 246e1199815SMickaël Salaün ASSERT_LE(0, ruleset_fd); 247e1199815SMickaël Salaün 248e1199815SMickaël Salaün ASSERT_EQ(-1, write(ruleset_fd, ".", 1)); 249e1199815SMickaël Salaün ASSERT_EQ(EINVAL, errno); 250e1199815SMickaël Salaün ASSERT_EQ(-1, read(ruleset_fd, &buf, 1)); 251e1199815SMickaël Salaün ASSERT_EQ(EINVAL, errno); 252e1199815SMickaël Salaün 253e1199815SMickaël Salaün ASSERT_EQ(0, close(ruleset_fd)); 254e1199815SMickaël Salaün } 255e1199815SMickaël Salaün 256e1199815SMickaël Salaün /* Tests enforcement of a ruleset FD transferred through a UNIX socket. */ 257e1199815SMickaël Salaün TEST(ruleset_fd_transfer) 258e1199815SMickaël Salaün { 259e1199815SMickaël Salaün struct landlock_ruleset_attr ruleset_attr = { 260e1199815SMickaël Salaün .handled_access_fs = LANDLOCK_ACCESS_FS_READ_DIR, 261e1199815SMickaël Salaün }; 262e1199815SMickaël Salaün struct landlock_path_beneath_attr path_beneath_attr = { 263e1199815SMickaël Salaün .allowed_access = LANDLOCK_ACCESS_FS_READ_DIR, 264e1199815SMickaël Salaün }; 265e1199815SMickaël Salaün int ruleset_fd_tx, dir_fd; 266e1199815SMickaël Salaün union { 267e1199815SMickaël Salaün /* Aligned ancillary data buffer. */ 268e1199815SMickaël Salaün char buf[CMSG_SPACE(sizeof(ruleset_fd_tx))]; 269e1199815SMickaël Salaün struct cmsghdr _align; 270e1199815SMickaël Salaün } cmsg_tx = {}; 271e1199815SMickaël Salaün char data_tx = '.'; 272e1199815SMickaël Salaün struct iovec io = { 273e1199815SMickaël Salaün .iov_base = &data_tx, 274e1199815SMickaël Salaün .iov_len = sizeof(data_tx), 275e1199815SMickaël Salaün }; 276e1199815SMickaël Salaün struct msghdr msg = { 277e1199815SMickaël Salaün .msg_iov = &io, 278e1199815SMickaël Salaün .msg_iovlen = 1, 279e1199815SMickaël Salaün .msg_control = &cmsg_tx.buf, 280e1199815SMickaël Salaün .msg_controllen = sizeof(cmsg_tx.buf), 281e1199815SMickaël Salaün }; 282e1199815SMickaël Salaün struct cmsghdr *cmsg; 283e1199815SMickaël Salaün int socket_fds[2]; 284e1199815SMickaël Salaün pid_t child; 285e1199815SMickaël Salaün int status; 286e1199815SMickaël Salaün 287e1199815SMickaël Salaün drop_caps(_metadata); 288e1199815SMickaël Salaün 289e1199815SMickaël Salaün /* Creates a test ruleset with a simple rule. */ 290371183faSMickaël Salaün ruleset_fd_tx = 291371183faSMickaël Salaün landlock_create_ruleset(&ruleset_attr, sizeof(ruleset_attr), 0); 292e1199815SMickaël Salaün ASSERT_LE(0, ruleset_fd_tx); 293371183faSMickaël Salaün path_beneath_attr.parent_fd = 294371183faSMickaël Salaün open("/tmp", O_PATH | O_NOFOLLOW | O_DIRECTORY | O_CLOEXEC); 295e1199815SMickaël Salaün ASSERT_LE(0, path_beneath_attr.parent_fd); 296371183faSMickaël Salaün ASSERT_EQ(0, 297371183faSMickaël Salaün landlock_add_rule(ruleset_fd_tx, LANDLOCK_RULE_PATH_BENEATH, 298e1199815SMickaël Salaün &path_beneath_attr, 0)); 299e1199815SMickaël Salaün ASSERT_EQ(0, close(path_beneath_attr.parent_fd)); 300e1199815SMickaël Salaün 301e1199815SMickaël Salaün cmsg = CMSG_FIRSTHDR(&msg); 302e1199815SMickaël Salaün ASSERT_NE(NULL, cmsg); 303e1199815SMickaël Salaün cmsg->cmsg_len = CMSG_LEN(sizeof(ruleset_fd_tx)); 304e1199815SMickaël Salaün cmsg->cmsg_level = SOL_SOCKET; 305e1199815SMickaël Salaün cmsg->cmsg_type = SCM_RIGHTS; 306e1199815SMickaël Salaün memcpy(CMSG_DATA(cmsg), &ruleset_fd_tx, sizeof(ruleset_fd_tx)); 307e1199815SMickaël Salaün 308e1199815SMickaël Salaün /* Sends the ruleset FD over a socketpair and then close it. */ 309371183faSMickaël Salaün ASSERT_EQ(0, socketpair(AF_UNIX, SOCK_STREAM | SOCK_CLOEXEC, 0, 310371183faSMickaël Salaün socket_fds)); 311e1199815SMickaël Salaün ASSERT_EQ(sizeof(data_tx), sendmsg(socket_fds[0], &msg, 0)); 312e1199815SMickaël Salaün ASSERT_EQ(0, close(socket_fds[0])); 313e1199815SMickaël Salaün ASSERT_EQ(0, close(ruleset_fd_tx)); 314e1199815SMickaël Salaün 315e1199815SMickaël Salaün child = fork(); 316e1199815SMickaël Salaün ASSERT_LE(0, child); 317e1199815SMickaël Salaün if (child == 0) { 318e1199815SMickaël Salaün int ruleset_fd_rx; 319e1199815SMickaël Salaün 320e1199815SMickaël Salaün *(char *)msg.msg_iov->iov_base = '\0'; 321371183faSMickaël Salaün ASSERT_EQ(sizeof(data_tx), 322371183faSMickaël Salaün recvmsg(socket_fds[1], &msg, MSG_CMSG_CLOEXEC)); 323e1199815SMickaël Salaün ASSERT_EQ('.', *(char *)msg.msg_iov->iov_base); 324e1199815SMickaël Salaün ASSERT_EQ(0, close(socket_fds[1])); 325e1199815SMickaël Salaün cmsg = CMSG_FIRSTHDR(&msg); 326e1199815SMickaël Salaün ASSERT_EQ(cmsg->cmsg_len, CMSG_LEN(sizeof(ruleset_fd_tx))); 327e1199815SMickaël Salaün memcpy(&ruleset_fd_rx, CMSG_DATA(cmsg), sizeof(ruleset_fd_tx)); 328e1199815SMickaël Salaün 329e1199815SMickaël Salaün /* Enforces the received ruleset on the child. */ 330e1199815SMickaël Salaün ASSERT_EQ(0, prctl(PR_SET_NO_NEW_PRIVS, 1, 0, 0, 0)); 331e1199815SMickaël Salaün ASSERT_EQ(0, landlock_restrict_self(ruleset_fd_rx, 0)); 332e1199815SMickaël Salaün ASSERT_EQ(0, close(ruleset_fd_rx)); 333e1199815SMickaël Salaün 334e1199815SMickaël Salaün /* Checks that the ruleset enforcement. */ 335e1199815SMickaël Salaün ASSERT_EQ(-1, open("/", O_RDONLY | O_DIRECTORY | O_CLOEXEC)); 336e1199815SMickaël Salaün ASSERT_EQ(EACCES, errno); 337e1199815SMickaël Salaün dir_fd = open("/tmp", O_RDONLY | O_DIRECTORY | O_CLOEXEC); 338e1199815SMickaël Salaün ASSERT_LE(0, dir_fd); 339e1199815SMickaël Salaün ASSERT_EQ(0, close(dir_fd)); 340e1199815SMickaël Salaün _exit(_metadata->passed ? EXIT_SUCCESS : EXIT_FAILURE); 341e1199815SMickaël Salaün return; 342e1199815SMickaël Salaün } 343e1199815SMickaël Salaün 344e1199815SMickaël Salaün ASSERT_EQ(0, close(socket_fds[1])); 345e1199815SMickaël Salaün 346e1199815SMickaël Salaün /* Checks that the parent is unrestricted. */ 347e1199815SMickaël Salaün dir_fd = open("/", O_RDONLY | O_DIRECTORY | O_CLOEXEC); 348e1199815SMickaël Salaün ASSERT_LE(0, dir_fd); 349e1199815SMickaël Salaün ASSERT_EQ(0, close(dir_fd)); 350e1199815SMickaël Salaün dir_fd = open("/tmp", O_RDONLY | O_DIRECTORY | O_CLOEXEC); 351e1199815SMickaël Salaün ASSERT_LE(0, dir_fd); 352e1199815SMickaël Salaün ASSERT_EQ(0, close(dir_fd)); 353e1199815SMickaël Salaün 354e1199815SMickaël Salaün ASSERT_EQ(child, waitpid(child, &status, 0)); 355e1199815SMickaël Salaün ASSERT_EQ(1, WIFEXITED(status)); 356e1199815SMickaël Salaün ASSERT_EQ(EXIT_SUCCESS, WEXITSTATUS(status)); 357e1199815SMickaël Salaün } 358e1199815SMickaël Salaün 359e1199815SMickaël Salaün TEST_HARNESS_MAIN 360