diff options
| author | Simon McVittie <smcv@collabora.com> | 2017-06-08 14:43:43 +0100 |
|---|---|---|
| committer | Simon McVittie <smcv@collabora.com> | 2017-12-12 16:22:34 +0000 |
| commit | 2c492620573647141679704e659fd64a5783dece (patch) | |
| tree | 292ee8b48a513f33f3a4e72673e4c49c1d616b19 /test/containers.c | |
| parent | 6537b583f64f294f9a9a54660c1ce4a64b4b2aa6 (diff) | |
| download | dbus-2c492620573647141679704e659fd64a5783dece.tar.gz | |
test/containers: Check that connections from containers are unprivileged
Signed-off-by: Simon McVittie <smcv@collabora.com>
Reviewed-by: Philip Withnall <withnall@endlessm.com>
Bug: https://bugs.freedesktop.org/show_bug.cgi?id=101354
Diffstat (limited to 'test/containers.c')
| -rw-r--r-- | test/containers.c | 13 |
1 files changed, 13 insertions, 0 deletions
diff --git a/test/containers.c b/test/containers.c index 4b4a944e..dd5797cb 100644 --- a/test/containers.c +++ b/test/containers.c @@ -333,6 +333,19 @@ test_basic (Fixture *f, g_assert_cmpstr (g_variant_get_type_string (tuple), ==, "()"); g_clear_pointer (&tuple, g_variant_unref); + g_test_message ("Checking that confined app is not considered privileged..."); + tuple = g_dbus_connection_call_sync (f->confined_conn, DBUS_SERVICE_DBUS, + DBUS_PATH_DBUS, DBUS_INTERFACE_DBUS, + "UpdateActivationEnvironment", + g_variant_new ("(a{ss})", NULL), + G_VARIANT_TYPE_UNIT, + G_DBUS_CALL_FLAGS_NONE, -1, NULL, + &f->error); + g_assert_error (f->error, G_DBUS_ERROR, G_DBUS_ERROR_ACCESS_DENIED); + g_test_message ("Access denied as expected: %s", f->error->message); + g_clear_error (&f->error); + g_assert_null (tuple); + /* Check that the socket is cleaned up when the dbus-daemon is terminated */ test_kill_pid (f->daemon_pid); g_spawn_close_pid (f->daemon_pid); |