picnoir/Systemd
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

test: make sure that {readonly|inaccessible|readwrite}paths disconnect mount propagation

Browse source 
Better safe.
This commit is contained in:
Djalal Harouni 2016-09-25 19:50:25 +02:00
parent f78b36f016
commit cdfbd1fb26
5 changed files with 35 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
Makefile.am
View file

@ -1644,6 +1644,9 @@ EXTRA_DIST += \
test/test-execute/exec-privatetmp-no.service \
test/test-execute/exec-privatetmp-yes.service \
test/test-execute/exec-readonlypaths.service \
test/test-execute/exec-readonlypaths-mount-propagation.service \
test/test-execute/exec-readwritepaths-mount-propagation.service \
test/test-execute/exec-inaccessiblepaths-mount-propagation.service \
test/test-execute/exec-spec-interpolation.service \
test/test-execute/exec-systemcallerrornumber.service \
test/test-execute/exec-systemcallfilter-failing2.service \

11
src/test/test-execute.c
View file

@ -144,6 +144,15 @@ static void test_exec_privatedevices_capabilities(Manager *m) {
static void test_exec_readonlypaths(Manager *m) {
test(m, "exec-readonlypaths.service", 0, CLD_EXITED);
test(m, "exec-readonlypaths-mount-propagation.service", 0, CLD_EXITED);
}
static void test_exec_readwritepaths(Manager *m) {
test(m, "exec-readwritepaths-mount-propagation.service", 0, CLD_EXITED);
}
static void test_exec_inaccessiblepaths(Manager *m) {
test(m, "exec-inaccessiblepaths-mount-propagation.service", 0, CLD_EXITED);
}
static void test_exec_systemcallfilter(Manager *m) {
@ -360,6 +369,8 @@ int main(int argc, char *argv[]) {
test_exec_privatedevices,
test_exec_privatedevices_capabilities,
test_exec_readonlypaths,
test_exec_readwritepaths,
test_exec_inaccessiblepaths,
test_exec_privatenetwork,
test_exec_systemcallfilter,
test_exec_systemcallerrornumber,

7
test/test-execute/exec-inaccessiblepaths-mount-propagation.service Normal file
View file

@ -0,0 +1,7 @@
[Unit]
Description=Test to make sure that InaccessiblePaths= disconnect mount propagation
[Service]
InaccessiblePaths=-/i-dont-exist
ExecStart=/bin/sh -x -c 'mkdir -p /TEST; mount -t tmpfs tmpfs /TEST; grep TEST /proc/self/mountinfo && ! grep TEST /proc/$${PPID}/mountinfo && ! grep TEST /proc/1/mountinfo'
Type=oneshot

7
test/test-execute/exec-readonlypaths-mount-propagation.service Normal file
View file

@ -0,0 +1,7 @@
[Unit]
Description=Test to make sure that passing ReadOnlyPaths= disconnect mount propagation
[Service]
ReadOnlyPaths=-/i-dont-exist
ExecStart=/bin/sh -x -c 'mkdir -p /TEST; mount -t tmpfs tmpfs /TEST; grep TEST /proc/self/mountinfo && ! grep TEST /proc/$${PPID}/mountinfo && ! grep TEST /proc/1/mountinfo'
Type=oneshot

7
test/test-execute/exec-readwritepaths-mount-propagation.service Normal file
View file

@ -0,0 +1,7 @@
[Unit]
Description=Test to make sure that passing ReadWritePaths= disconnect mount propagation
[Service]
ReadWritePaths=-/i-dont-exist
ExecStart=/bin/sh -x -c 'mkdir -p /TEST; mount -t tmpfs tmpfs /TEST; grep TEST /proc/self/mountinfo && ! grep TEST /proc/$${PPID}/mountinfo && ! grep TEST /proc/1/mountinfo'
Type=oneshot