1e1199815SMickaël Salaün // SPDX-License-Identifier: GPL-2.0
2e1199815SMickaël Salaün /*
3e1199815SMickaël Salaün * Landlock tests - Common user space base
4e1199815SMickaël Salaün *
5e1199815SMickaël Salaün * Copyright © 2017-2020 Mickaël Salaün <mic@digikod.net>
6e1199815SMickaël Salaün * Copyright © 2019-2020 ANSSI
7e1199815SMickaël Salaün */
8e1199815SMickaël Salaün
9e1199815SMickaël Salaün #define _GNU_SOURCE
10e1199815SMickaël Salaün #include <errno.h>
11e1199815SMickaël Salaün #include <fcntl.h>
12e1199815SMickaël Salaün #include <linux/landlock.h>
13e1199815SMickaël Salaün #include <string.h>
14e1199815SMickaël Salaün #include <sys/prctl.h>
15e1199815SMickaël Salaün #include <sys/socket.h>
16e1199815SMickaël Salaün #include <sys/types.h>
17e1199815SMickaël Salaün
18e1199815SMickaël Salaün #include "common.h"
19e1199815SMickaël Salaün
20e1199815SMickaël Salaün #ifndef O_PATH
21e1199815SMickaël Salaün #define O_PATH 010000000
22e1199815SMickaël Salaün #endif
23e1199815SMickaël Salaün
TEST(inconsistent_attr)24371183faSMickaël Salaün TEST(inconsistent_attr)
25371183faSMickaël Salaün {
26e1199815SMickaël Salaün const long page_size = sysconf(_SC_PAGESIZE);
27e1199815SMickaël Salaün char *const buf = malloc(page_size + 1);
28e1199815SMickaël Salaün struct landlock_ruleset_attr *const ruleset_attr = (void *)buf;
29e1199815SMickaël Salaün
30e1199815SMickaël Salaün ASSERT_NE(NULL, buf);
31e1199815SMickaël Salaün
32e1199815SMickaël Salaün /* Checks copy_from_user(). */
33e1199815SMickaël Salaün ASSERT_EQ(-1, landlock_create_ruleset(ruleset_attr, 0, 0));
34e1199815SMickaël Salaün /* The size if less than sizeof(struct landlock_attr_enforce). */
35e1199815SMickaël Salaün ASSERT_EQ(EINVAL, errno);
36e1199815SMickaël Salaün ASSERT_EQ(-1, landlock_create_ruleset(ruleset_attr, 1, 0));
37e1199815SMickaël Salaün ASSERT_EQ(EINVAL, errno);
38291865bdSMickaël Salaün ASSERT_EQ(-1, landlock_create_ruleset(ruleset_attr, 7, 0));
39291865bdSMickaël Salaün ASSERT_EQ(EINVAL, errno);
40e1199815SMickaël Salaün
41e1199815SMickaël Salaün ASSERT_EQ(-1, landlock_create_ruleset(NULL, 1, 0));
42e1199815SMickaël Salaün /* The size if less than sizeof(struct landlock_attr_enforce). */
43e1199815SMickaël Salaün ASSERT_EQ(EFAULT, errno);
44e1199815SMickaël Salaün
45371183faSMickaël Salaün ASSERT_EQ(-1, landlock_create_ruleset(
46371183faSMickaël Salaün NULL, sizeof(struct landlock_ruleset_attr), 0));
47e1199815SMickaël Salaün ASSERT_EQ(EFAULT, errno);
48e1199815SMickaël Salaün
49e1199815SMickaël Salaün ASSERT_EQ(-1, landlock_create_ruleset(ruleset_attr, page_size + 1, 0));
50e1199815SMickaël Salaün ASSERT_EQ(E2BIG, errno);
51e1199815SMickaël Salaün
52291865bdSMickaël Salaün /* Checks minimal valid attribute size. */
53291865bdSMickaël Salaün ASSERT_EQ(-1, landlock_create_ruleset(ruleset_attr, 8, 0));
54291865bdSMickaël Salaün ASSERT_EQ(ENOMSG, errno);
55371183faSMickaël Salaün ASSERT_EQ(-1, landlock_create_ruleset(
56371183faSMickaël Salaün ruleset_attr,
57e1199815SMickaël Salaün sizeof(struct landlock_ruleset_attr), 0));
58e1199815SMickaël Salaün ASSERT_EQ(ENOMSG, errno);
59e1199815SMickaël Salaün ASSERT_EQ(-1, landlock_create_ruleset(ruleset_attr, page_size, 0));
60e1199815SMickaël Salaün ASSERT_EQ(ENOMSG, errno);
61e1199815SMickaël Salaün
62e1199815SMickaël Salaün /* Checks non-zero value. */
63e1199815SMickaël Salaün buf[page_size - 2] = '.';
64e1199815SMickaël Salaün ASSERT_EQ(-1, landlock_create_ruleset(ruleset_attr, page_size, 0));
65e1199815SMickaël Salaün ASSERT_EQ(E2BIG, errno);
66e1199815SMickaël Salaün
67e1199815SMickaël Salaün ASSERT_EQ(-1, landlock_create_ruleset(ruleset_attr, page_size + 1, 0));
68e1199815SMickaël Salaün ASSERT_EQ(E2BIG, errno);
69e1199815SMickaël Salaün
70e1199815SMickaël Salaün free(buf);
71e1199815SMickaël Salaün }
72e1199815SMickaël Salaün
TEST(abi_version)73371183faSMickaël Salaün TEST(abi_version)
74371183faSMickaël Salaün {
753532b0b4SMickaël Salaün const struct landlock_ruleset_attr ruleset_attr = {
763532b0b4SMickaël Salaün .handled_access_fs = LANDLOCK_ACCESS_FS_READ_FILE,
773532b0b4SMickaël Salaün };
78b9f5ce27SGünther Noack ASSERT_EQ(3, landlock_create_ruleset(NULL, 0,
793532b0b4SMickaël Salaün LANDLOCK_CREATE_RULESET_VERSION));
803532b0b4SMickaël Salaün
813532b0b4SMickaël Salaün ASSERT_EQ(-1, landlock_create_ruleset(&ruleset_attr, 0,
823532b0b4SMickaël Salaün LANDLOCK_CREATE_RULESET_VERSION));
833532b0b4SMickaël Salaün ASSERT_EQ(EINVAL, errno);
843532b0b4SMickaël Salaün
853532b0b4SMickaël Salaün ASSERT_EQ(-1, landlock_create_ruleset(NULL, sizeof(ruleset_attr),
863532b0b4SMickaël Salaün LANDLOCK_CREATE_RULESET_VERSION));
873532b0b4SMickaël Salaün ASSERT_EQ(EINVAL, errno);
883532b0b4SMickaël Salaün
89371183faSMickaël Salaün ASSERT_EQ(-1,
90371183faSMickaël Salaün landlock_create_ruleset(&ruleset_attr, sizeof(ruleset_attr),
913532b0b4SMickaël Salaün LANDLOCK_CREATE_RULESET_VERSION));
923532b0b4SMickaël Salaün ASSERT_EQ(EINVAL, errno);
933532b0b4SMickaël Salaün
943532b0b4SMickaël Salaün ASSERT_EQ(-1, landlock_create_ruleset(NULL, 0,
95371183faSMickaël Salaün LANDLOCK_CREATE_RULESET_VERSION |
96371183faSMickaël Salaün 1 << 31));
973532b0b4SMickaël Salaün ASSERT_EQ(EINVAL, errno);
983532b0b4SMickaël Salaün }
993532b0b4SMickaël Salaün
1006533d0c3SMickaël Salaün /* Tests ordering of syscall argument checks. */
TEST(create_ruleset_checks_ordering)1016533d0c3SMickaël Salaün TEST(create_ruleset_checks_ordering)
102371183faSMickaël Salaün {
1033532b0b4SMickaël Salaün const int last_flag = LANDLOCK_CREATE_RULESET_VERSION;
1043532b0b4SMickaël Salaün const int invalid_flag = last_flag << 1;
1056533d0c3SMickaël Salaün int ruleset_fd;
1063532b0b4SMickaël Salaün const struct landlock_ruleset_attr ruleset_attr = {
1073532b0b4SMickaël Salaün .handled_access_fs = LANDLOCK_ACCESS_FS_READ_FILE,
1083532b0b4SMickaël Salaün };
1093532b0b4SMickaël Salaün
1106533d0c3SMickaël Salaün /* Checks priority for invalid flags. */
1113532b0b4SMickaël Salaün ASSERT_EQ(-1, landlock_create_ruleset(NULL, 0, invalid_flag));
1123532b0b4SMickaël Salaün ASSERT_EQ(EINVAL, errno);
1133532b0b4SMickaël Salaün
1143532b0b4SMickaël Salaün ASSERT_EQ(-1, landlock_create_ruleset(&ruleset_attr, 0, invalid_flag));
1153532b0b4SMickaël Salaün ASSERT_EQ(EINVAL, errno);
1163532b0b4SMickaël Salaün
1173532b0b4SMickaël Salaün ASSERT_EQ(-1, landlock_create_ruleset(NULL, sizeof(ruleset_attr),
1183532b0b4SMickaël Salaün invalid_flag));
1193532b0b4SMickaël Salaün ASSERT_EQ(EINVAL, errno);
1203532b0b4SMickaël Salaün
121371183faSMickaël Salaün ASSERT_EQ(-1,
122371183faSMickaël Salaün landlock_create_ruleset(&ruleset_attr, sizeof(ruleset_attr),
123371183faSMickaël Salaün invalid_flag));
1243532b0b4SMickaël Salaün ASSERT_EQ(EINVAL, errno);
1256533d0c3SMickaël Salaün
1266533d0c3SMickaël Salaün /* Checks too big ruleset_attr size. */
1276533d0c3SMickaël Salaün ASSERT_EQ(-1, landlock_create_ruleset(&ruleset_attr, -1, 0));
1286533d0c3SMickaël Salaün ASSERT_EQ(E2BIG, errno);
1296533d0c3SMickaël Salaün
1306533d0c3SMickaël Salaün /* Checks too small ruleset_attr size. */
1316533d0c3SMickaël Salaün ASSERT_EQ(-1, landlock_create_ruleset(&ruleset_attr, 0, 0));
1326533d0c3SMickaël Salaün ASSERT_EQ(EINVAL, errno);
1336533d0c3SMickaël Salaün ASSERT_EQ(-1, landlock_create_ruleset(&ruleset_attr, 1, 0));
1346533d0c3SMickaël Salaün ASSERT_EQ(EINVAL, errno);
1356533d0c3SMickaël Salaün
1366533d0c3SMickaël Salaün /* Checks valid call. */
1376533d0c3SMickaël Salaün ruleset_fd =
1386533d0c3SMickaël Salaün landlock_create_ruleset(&ruleset_attr, sizeof(ruleset_attr), 0);
1396533d0c3SMickaël Salaün ASSERT_LE(0, ruleset_fd);
1406533d0c3SMickaël Salaün ASSERT_EQ(0, close(ruleset_fd));
1413532b0b4SMickaël Salaün }
1423532b0b4SMickaël Salaün
143589172e5SMickaël Salaün /* Tests ordering of syscall argument checks. */
TEST(add_rule_checks_ordering)144589172e5SMickaël Salaün TEST(add_rule_checks_ordering)
145371183faSMickaël Salaün {
146e1199815SMickaël Salaün const struct landlock_ruleset_attr ruleset_attr = {
147e1199815SMickaël Salaün .handled_access_fs = LANDLOCK_ACCESS_FS_EXECUTE,
148e1199815SMickaël Salaün };
149589172e5SMickaël Salaün struct landlock_path_beneath_attr path_beneath_attr = {
150589172e5SMickaël Salaün .allowed_access = LANDLOCK_ACCESS_FS_EXECUTE,
151589172e5SMickaël Salaün .parent_fd = -1,
152589172e5SMickaël Salaün };
153371183faSMickaël Salaün const int ruleset_fd =
154371183faSMickaël Salaün landlock_create_ruleset(&ruleset_attr, sizeof(ruleset_attr), 0);
155e1199815SMickaël Salaün
156e1199815SMickaël Salaün ASSERT_LE(0, ruleset_fd);
157e1199815SMickaël Salaün
158589172e5SMickaël Salaün /* Checks invalid flags. */
159589172e5SMickaël Salaün ASSERT_EQ(-1, landlock_add_rule(-1, 0, NULL, 1));
160589172e5SMickaël Salaün ASSERT_EQ(EINVAL, errno);
161589172e5SMickaël Salaün
162589172e5SMickaël Salaün /* Checks invalid ruleset FD. */
163589172e5SMickaël Salaün ASSERT_EQ(-1, landlock_add_rule(-1, 0, NULL, 0));
164589172e5SMickaël Salaün ASSERT_EQ(EBADF, errno);
165589172e5SMickaël Salaün
166589172e5SMickaël Salaün /* Checks invalid rule type. */
167589172e5SMickaël Salaün ASSERT_EQ(-1, landlock_add_rule(ruleset_fd, 0, NULL, 0));
168589172e5SMickaël Salaün ASSERT_EQ(EINVAL, errno);
169589172e5SMickaël Salaün
170589172e5SMickaël Salaün /* Checks invalid rule attr. */
171e1199815SMickaël Salaün ASSERT_EQ(-1, landlock_add_rule(ruleset_fd, LANDLOCK_RULE_PATH_BENEATH,
172e1199815SMickaël Salaün NULL, 0));
173e1199815SMickaël Salaün ASSERT_EQ(EFAULT, errno);
174589172e5SMickaël Salaün
175589172e5SMickaël Salaün /* Checks invalid path_beneath.parent_fd. */
176589172e5SMickaël Salaün ASSERT_EQ(-1, landlock_add_rule(ruleset_fd, LANDLOCK_RULE_PATH_BENEATH,
177589172e5SMickaël Salaün &path_beneath_attr, 0));
178589172e5SMickaël Salaün ASSERT_EQ(EBADF, errno);
179589172e5SMickaël Salaün
180589172e5SMickaël Salaün /* Checks valid call. */
181589172e5SMickaël Salaün path_beneath_attr.parent_fd =
182589172e5SMickaël Salaün open("/tmp", O_PATH | O_NOFOLLOW | O_DIRECTORY | O_CLOEXEC);
183589172e5SMickaël Salaün ASSERT_LE(0, path_beneath_attr.parent_fd);
184589172e5SMickaël Salaün ASSERT_EQ(0, landlock_add_rule(ruleset_fd, LANDLOCK_RULE_PATH_BENEATH,
185589172e5SMickaël Salaün &path_beneath_attr, 0));
186589172e5SMickaël Salaün ASSERT_EQ(0, close(path_beneath_attr.parent_fd));
187e1199815SMickaël Salaün ASSERT_EQ(0, close(ruleset_fd));
188e1199815SMickaël Salaün }
189e1199815SMickaël Salaün
190eba39ca4SMickaël Salaün /* Tests ordering of syscall argument and permission checks. */
TEST(restrict_self_checks_ordering)191eba39ca4SMickaël Salaün TEST(restrict_self_checks_ordering)
192371183faSMickaël Salaün {
193eba39ca4SMickaël Salaün const struct landlock_ruleset_attr ruleset_attr = {
194eba39ca4SMickaël Salaün .handled_access_fs = LANDLOCK_ACCESS_FS_EXECUTE,
195eba39ca4SMickaël Salaün };
196eba39ca4SMickaël Salaün struct landlock_path_beneath_attr path_beneath_attr = {
197eba39ca4SMickaël Salaün .allowed_access = LANDLOCK_ACCESS_FS_EXECUTE,
198eba39ca4SMickaël Salaün .parent_fd = -1,
199eba39ca4SMickaël Salaün };
200eba39ca4SMickaël Salaün const int ruleset_fd =
201eba39ca4SMickaël Salaün landlock_create_ruleset(&ruleset_attr, sizeof(ruleset_attr), 0);
202eba39ca4SMickaël Salaün
203eba39ca4SMickaël Salaün ASSERT_LE(0, ruleset_fd);
204eba39ca4SMickaël Salaün path_beneath_attr.parent_fd =
205eba39ca4SMickaël Salaün open("/tmp", O_PATH | O_NOFOLLOW | O_DIRECTORY | O_CLOEXEC);
206eba39ca4SMickaël Salaün ASSERT_LE(0, path_beneath_attr.parent_fd);
207eba39ca4SMickaël Salaün ASSERT_EQ(0, landlock_add_rule(ruleset_fd, LANDLOCK_RULE_PATH_BENEATH,
208eba39ca4SMickaël Salaün &path_beneath_attr, 0));
209eba39ca4SMickaël Salaün ASSERT_EQ(0, close(path_beneath_attr.parent_fd));
210eba39ca4SMickaël Salaün
211eba39ca4SMickaël Salaün /* Checks unprivileged enforcement without no_new_privs. */
212eba39ca4SMickaël Salaün drop_caps(_metadata);
213eba39ca4SMickaël Salaün ASSERT_EQ(-1, landlock_restrict_self(-1, -1));
214eba39ca4SMickaël Salaün ASSERT_EQ(EPERM, errno);
215eba39ca4SMickaël Salaün ASSERT_EQ(-1, landlock_restrict_self(-1, 0));
216eba39ca4SMickaël Salaün ASSERT_EQ(EPERM, errno);
217eba39ca4SMickaël Salaün ASSERT_EQ(-1, landlock_restrict_self(ruleset_fd, 0));
218eba39ca4SMickaël Salaün ASSERT_EQ(EPERM, errno);
219eba39ca4SMickaël Salaün
220e1199815SMickaël Salaün ASSERT_EQ(0, prctl(PR_SET_NO_NEW_PRIVS, 1, 0, 0, 0));
221e1199815SMickaël Salaün
222eba39ca4SMickaël Salaün /* Checks invalid flags. */
223eba39ca4SMickaël Salaün ASSERT_EQ(-1, landlock_restrict_self(-1, -1));
224eba39ca4SMickaël Salaün ASSERT_EQ(EINVAL, errno);
225eba39ca4SMickaël Salaün
226eba39ca4SMickaël Salaün /* Checks invalid ruleset FD. */
227e1199815SMickaël Salaün ASSERT_EQ(-1, landlock_restrict_self(-1, 0));
228e1199815SMickaël Salaün ASSERT_EQ(EBADF, errno);
229e1199815SMickaël Salaün
230eba39ca4SMickaël Salaün /* Checks valid call. */
231eba39ca4SMickaël Salaün ASSERT_EQ(0, landlock_restrict_self(ruleset_fd, 0));
232eba39ca4SMickaël Salaün ASSERT_EQ(0, close(ruleset_fd));
233e1199815SMickaël Salaün }
234e1199815SMickaël Salaün
TEST(ruleset_fd_io)235e1199815SMickaël Salaün TEST(ruleset_fd_io)
236e1199815SMickaël Salaün {
237e1199815SMickaël Salaün struct landlock_ruleset_attr ruleset_attr = {
238e1199815SMickaël Salaün .handled_access_fs = LANDLOCK_ACCESS_FS_READ_FILE,
239e1199815SMickaël Salaün };
240e1199815SMickaël Salaün int ruleset_fd;
241e1199815SMickaël Salaün char buf;
242e1199815SMickaël Salaün
243e1199815SMickaël Salaün drop_caps(_metadata);
244371183faSMickaël Salaün ruleset_fd =
245371183faSMickaël Salaün landlock_create_ruleset(&ruleset_attr, sizeof(ruleset_attr), 0);
246e1199815SMickaël Salaün ASSERT_LE(0, ruleset_fd);
247e1199815SMickaël Salaün
248e1199815SMickaël Salaün ASSERT_EQ(-1, write(ruleset_fd, ".", 1));
249e1199815SMickaël Salaün ASSERT_EQ(EINVAL, errno);
250e1199815SMickaël Salaün ASSERT_EQ(-1, read(ruleset_fd, &buf, 1));
251e1199815SMickaël Salaün ASSERT_EQ(EINVAL, errno);
252e1199815SMickaël Salaün
253e1199815SMickaël Salaün ASSERT_EQ(0, close(ruleset_fd));
254e1199815SMickaël Salaün }
255e1199815SMickaël Salaün
256e1199815SMickaël Salaün /* Tests enforcement of a ruleset FD transferred through a UNIX socket. */
TEST(ruleset_fd_transfer)257e1199815SMickaël Salaün TEST(ruleset_fd_transfer)
258e1199815SMickaël Salaün {
259e1199815SMickaël Salaün struct landlock_ruleset_attr ruleset_attr = {
260e1199815SMickaël Salaün .handled_access_fs = LANDLOCK_ACCESS_FS_READ_DIR,
261e1199815SMickaël Salaün };
262e1199815SMickaël Salaün struct landlock_path_beneath_attr path_beneath_attr = {
263e1199815SMickaël Salaün .allowed_access = LANDLOCK_ACCESS_FS_READ_DIR,
264e1199815SMickaël Salaün };
265e1199815SMickaël Salaün int ruleset_fd_tx, dir_fd;
266e1199815SMickaël Salaün int socket_fds[2];
267e1199815SMickaël Salaün pid_t child;
268e1199815SMickaël Salaün int status;
269e1199815SMickaël Salaün
270e1199815SMickaël Salaün drop_caps(_metadata);
271e1199815SMickaël Salaün
272e1199815SMickaël Salaün /* Creates a test ruleset with a simple rule. */
273371183faSMickaël Salaün ruleset_fd_tx =
274371183faSMickaël Salaün landlock_create_ruleset(&ruleset_attr, sizeof(ruleset_attr), 0);
275e1199815SMickaël Salaün ASSERT_LE(0, ruleset_fd_tx);
276371183faSMickaël Salaün path_beneath_attr.parent_fd =
277371183faSMickaël Salaün open("/tmp", O_PATH | O_NOFOLLOW | O_DIRECTORY | O_CLOEXEC);
278e1199815SMickaël Salaün ASSERT_LE(0, path_beneath_attr.parent_fd);
279371183faSMickaël Salaün ASSERT_EQ(0,
280371183faSMickaël Salaün landlock_add_rule(ruleset_fd_tx, LANDLOCK_RULE_PATH_BENEATH,
281e1199815SMickaël Salaün &path_beneath_attr, 0));
282e1199815SMickaël Salaün ASSERT_EQ(0, close(path_beneath_attr.parent_fd));
283e1199815SMickaël Salaün
284e1199815SMickaël Salaün /* Sends the ruleset FD over a socketpair and then close it. */
285371183faSMickaël Salaün ASSERT_EQ(0, socketpair(AF_UNIX, SOCK_STREAM | SOCK_CLOEXEC, 0,
286371183faSMickaël Salaün socket_fds));
287*a1a202a5SGünther Noack ASSERT_EQ(0, send_fd(socket_fds[0], ruleset_fd_tx));
288e1199815SMickaël Salaün ASSERT_EQ(0, close(socket_fds[0]));
289e1199815SMickaël Salaün ASSERT_EQ(0, close(ruleset_fd_tx));
290e1199815SMickaël Salaün
291e1199815SMickaël Salaün child = fork();
292e1199815SMickaël Salaün ASSERT_LE(0, child);
293e1199815SMickaël Salaün if (child == 0) {
294*a1a202a5SGünther Noack const int ruleset_fd_rx = recv_fd(socket_fds[1]);
295e1199815SMickaël Salaün
296*a1a202a5SGünther Noack ASSERT_LE(0, ruleset_fd_rx);
297e1199815SMickaël Salaün ASSERT_EQ(0, close(socket_fds[1]));
298e1199815SMickaël Salaün
299e1199815SMickaël Salaün /* Enforces the received ruleset on the child. */
300e1199815SMickaël Salaün ASSERT_EQ(0, prctl(PR_SET_NO_NEW_PRIVS, 1, 0, 0, 0));
301e1199815SMickaël Salaün ASSERT_EQ(0, landlock_restrict_self(ruleset_fd_rx, 0));
302e1199815SMickaël Salaün ASSERT_EQ(0, close(ruleset_fd_rx));
303e1199815SMickaël Salaün
304e1199815SMickaël Salaün /* Checks that the ruleset enforcement. */
305e1199815SMickaël Salaün ASSERT_EQ(-1, open("/", O_RDONLY | O_DIRECTORY | O_CLOEXEC));
306e1199815SMickaël Salaün ASSERT_EQ(EACCES, errno);
307e1199815SMickaël Salaün dir_fd = open("/tmp", O_RDONLY | O_DIRECTORY | O_CLOEXEC);
308e1199815SMickaël Salaün ASSERT_LE(0, dir_fd);
309e1199815SMickaël Salaün ASSERT_EQ(0, close(dir_fd));
310e1199815SMickaël Salaün _exit(_metadata->passed ? EXIT_SUCCESS : EXIT_FAILURE);
311e1199815SMickaël Salaün return;
312e1199815SMickaël Salaün }
313e1199815SMickaël Salaün
314e1199815SMickaël Salaün ASSERT_EQ(0, close(socket_fds[1]));
315e1199815SMickaël Salaün
316e1199815SMickaël Salaün /* Checks that the parent is unrestricted. */
317e1199815SMickaël Salaün dir_fd = open("/", O_RDONLY | O_DIRECTORY | O_CLOEXEC);
318e1199815SMickaël Salaün ASSERT_LE(0, dir_fd);
319e1199815SMickaël Salaün ASSERT_EQ(0, close(dir_fd));
320e1199815SMickaël Salaün dir_fd = open("/tmp", O_RDONLY | O_DIRECTORY | O_CLOEXEC);
321e1199815SMickaël Salaün ASSERT_LE(0, dir_fd);
322e1199815SMickaël Salaün ASSERT_EQ(0, close(dir_fd));
323e1199815SMickaël Salaün
324e1199815SMickaël Salaün ASSERT_EQ(child, waitpid(child, &status, 0));
325e1199815SMickaël Salaün ASSERT_EQ(1, WIFEXITED(status));
326e1199815SMickaël Salaün ASSERT_EQ(EXIT_SUCCESS, WEXITSTATUS(status));
327e1199815SMickaël Salaün }
328e1199815SMickaël Salaün
329e1199815SMickaël Salaün TEST_HARNESS_MAIN
330