diff options
author | Paul Moore <paul@paul-moore.com> | 2016-02-22 17:07:39 -0500 |
---|---|---|
committer | Paul Moore <paul@paul-moore.com> | 2016-02-22 17:44:01 -0500 |
commit | 8ed78c3859f476d302995b43d6739f3341f5b37d (patch) | |
tree | 72a6631c37e1c347d6b8223987de0b360969f94f /tests/32-live-tsync_allow.c | |
parent | a1f144a9a28aa1b831f7d3f481fb3e0e5e3de3aa (diff) | |
download | libseccomp-8ed78c3859f476d302995b43d6739f3341f5b37d.tar.gz |
tests: create a simple live test to verify we can set the TSYNC attribute
Signed-off-by: Paul Moore <paul@paul-moore.com>
Diffstat (limited to 'tests/32-live-tsync_allow.c')
-rw-r--r-- | tests/32-live-tsync_allow.c | 84 |
1 files changed, 84 insertions, 0 deletions
diff --git a/tests/32-live-tsync_allow.c b/tests/32-live-tsync_allow.c new file mode 100644 index 0000000..26f7af2 --- /dev/null +++ b/tests/32-live-tsync_allow.c @@ -0,0 +1,84 @@ +/** + * Seccomp Library test program + * + * Copyright (c) 2013 Red Hat <pmoore@redhat.com> + * Author: Paul Moore <paul@paul-moore.com> + */ + +/* + * This library is free software; you can redistribute it and/or modify it + * under the terms of version 2.1 of the GNU Lesser General Public License as + * published by the Free Software Foundation. + * + * This library is distributed in the hope that it will be useful, but WITHOUT + * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or + * FITNESS FOR A PARTICULAR PURPOSE. See the GNU Lesser General Public License + * for more details. + * + * You should have received a copy of the GNU Lesser General Public License + * along with this library; if not, see <http://www.gnu.org/licenses>. + */ + +#include <errno.h> +#include <unistd.h> + +#include <seccomp.h> + +#include "util.h" + +int main(int argc, char *argv[]) +{ + int rc; + scmp_filter_ctx ctx = NULL; + + rc = util_action_parse(argv[1]); + if (rc != SCMP_ACT_ALLOW) { + rc = 1; + goto out; + } + + rc = util_trap_install(); + if (rc != 0) + goto out; + + ctx = seccomp_init(SCMP_ACT_TRAP); + if (ctx == NULL) + return ENOMEM; + + rc = seccomp_attr_set(ctx, SCMP_FLTATR_CTL_TSYNC, 1); + if (rc != 0) + goto out; + + rc = seccomp_rule_add(ctx, SCMP_ACT_ALLOW, SCMP_SYS(open), 0); + if (rc != 0) + goto out; + rc = seccomp_rule_add(ctx, SCMP_ACT_ALLOW, SCMP_SYS(openat), 0); + if (rc != 0) + goto out; + rc = seccomp_rule_add(ctx, SCMP_ACT_ALLOW, SCMP_SYS(write), 0); + if (rc != 0) + goto out; + rc = seccomp_rule_add(ctx, SCMP_ACT_ALLOW, SCMP_SYS(close), 0); + if (rc != 0) + goto out; + rc = seccomp_rule_add(ctx, SCMP_ACT_ALLOW, SCMP_SYS(rt_sigreturn), 0); + if (rc != 0) + goto out; + rc = seccomp_rule_add(ctx, SCMP_ACT_ALLOW, SCMP_SYS(exit_group), 0); + if (rc != 0) + goto out; + + rc = seccomp_load(ctx); + if (rc != 0) + goto out; + + rc = util_file_write("/dev/null"); + if (rc != 0) + goto out; + + rc = 160; + +out: + seccomp_release(ctx); + return (rc < 0 ? -rc : rc); +} |