selftests/landlock/fs_test.c

77 static const char file1_s1d1[] = TMP_DIR "/s1d1/f1";
360 	create_file(_metadata, file1_s1d1);
389 	EXPECT_EQ(0, remove_path(file1_s1d1));
455 	ASSERT_EQ(0, test_open(file1_s1d1, O_RDONLY));
893 	ASSERT_EQ(EACCES, test_open(file1_s1d1, O_RDONLY));
894 	ASSERT_EQ(0, test_open(file1_s1d1, O_RDONLY | O_PATH));
944 	ASSERT_EQ(0, test_open(file1_s1d1, O_WRONLY));
945 	ASSERT_EQ(EACCES, test_open(file1_s1d1, O_RDWR));
974 	ASSERT_EQ(EACCES, test_open(file1_s1d1, O_RDONLY));
975 	ASSERT_EQ(EACCES, test_open(file1_s1d1, O_WRONLY));
976 	ASSERT_EQ(EACCES, test_open(file1_s1d1, O_RDWR));
1030 	ASSERT_EQ(EACCES, test_open(file1_s1d1, O_RDONLY));
1031 	ASSERT_EQ(EACCES, test_open(file1_s1d1, O_WRONLY));
1032 	ASSERT_EQ(EACCES, test_open(file1_s1d1, O_RDWR));
1055 	ASSERT_EQ(EACCES, test_open(file1_s1d1, O_RDONLY));
1056 	ASSERT_EQ(EACCES, test_open(file1_s1d1, O_WRONLY));
1057 	ASSERT_EQ(EACCES, test_open(file1_s1d1, O_RDWR));
1080 	ASSERT_EQ(EACCES, test_open(file1_s1d1, O_RDONLY));
1081 	ASSERT_EQ(EACCES, test_open(file1_s1d1, O_WRONLY));
1082 	ASSERT_EQ(EACCES, test_open(file1_s1d1, O_RDWR));
1117 	ASSERT_EQ(0, unlink(file1_s1d1));
1126 	ASSERT_EQ(-1, mknod(file1_s1d1, S_IFREG | 0700, 0));
1138 	ASSERT_EQ(-1, mknod(file1_s1d1, S_IFREG | 0700, 0));
1348 	ASSERT_EQ(EACCES, test_open(file1_s1d1, O_WRONLY));
1382 	ASSERT_EQ(EACCES, test_open(file1_s1d1, O_WRONLY));
1403 	ASSERT_EQ(EACCES, test_open(file1_s1d1, O_WRONLY));
1433 	ASSERT_EQ(EACCES, test_open(file1_s1d1, O_WRONLY));
1528 	ASSERT_EQ(EACCES, test_open(file1_s1d1, O_RDONLY));
1537 	ASSERT_EQ(EACCES, test_open(file1_s1d1, O_RDONLY));
1829 	ASSERT_EQ(0, test_open(file1_s1d1, O_RDONLY));
2097 	copy_file(_metadata, bin_true, file1_s1d1);
2101 	/* Checks before file1_s1d1 being denied. */
2102 	test_execute(_metadata, 0, file1_s1d1);
2103 	test_check_exec(_metadata, 0, file1_s1d1);
2109 	ASSERT_EQ(0, test_open(file1_s1d1, O_RDONLY));
2110 	test_execute(_metadata, EACCES, file1_s1d1);
2111 	test_check_exec(_metadata, EACCES, file1_s1d1);
2221 	ASSERT_EQ(0, unlink(file1_s1d1));
2228 	ASSERT_EQ(-1, link(file2_s1d1, file1_s1d1));
2329 	/* Checks that file1_s1d1 cannot be removed (instead of EISDIR). */
2330 	ASSERT_EQ(-1, rename(file1_s1d1, dir_s1d2));
2395 	ASSERT_EQ(-1, rename(dir_s1d2, file1_s1d1));
2397 	ASSERT_EQ(-1, renameat2(AT_FDCWD, file1_s1d1, AT_FDCWD, dir_s1d2,
2401 	ASSERT_EQ(-1, rename(file1_s1d1, dir_s1d2));
2477 	ASSERT_EQ(layer1_err, test_rename(file1_s1d1, file1_s1d2));
2479 		ASSERT_EQ(layer1_err, test_rename(file1_s1d2, file1_s1d1));
2494 	ASSERT_EQ(EXDEV, test_rename(file1_s1d1, file1_s1d2));
2671 	ASSERT_EQ(0, unlink(file1_s1d1));
2676 	ASSERT_EQ(-1, link(file2_s1d1, file1_s1d1));
2686 	ASSERT_EQ(-1, link(file1_s2d2, file1_s1d1));
2753 	ASSERT_EQ(-1, renameat2(AT_FDCWD, file2_s1d1, AT_FDCWD, file1_s1d1,
2756 	ASSERT_EQ(-1, renameat2(AT_FDCWD, file1_s1d1, AT_FDCWD, file2_s1d1,
2759 	ASSERT_EQ(0, unlink(file1_s1d1));
2760 	ASSERT_EQ(-1, rename(file2_s1d1, file1_s1d1));
2790 	ASSERT_EQ(-1, rename(file1_s2d2, file1_s1d1));
2977 	ASSERT_EQ(-1, rename(file1_s1d1, file1_s2d2));
2981 	ASSERT_EQ(-1, rename(file1_s1d1, file1_s2d3));
2995 	ASSERT_EQ(-1, rename(file1_s1d1, file1_s2d2));
3000 	ASSERT_EQ(-1, rename(file1_s1d1, file1_s2d3));
3029 	ASSERT_EQ(-1, renameat2(AT_FDCWD, file1_s1d1, AT_FDCWD, file1_s2d3,
3032 	ASSERT_EQ(-1, renameat2(AT_FDCWD, file1_s2d3, AT_FDCWD, file1_s1d1,
3086 	ASSERT_EQ(-1, renameat2(AT_FDCWD, file1_s1d1, AT_FDCWD, file1_s2d3,
3089 	ASSERT_EQ(-1, renameat2(AT_FDCWD, file1_s2d3, AT_FDCWD, file1_s1d1,
3195 	ASSERT_EQ(-1, rename(file1_s1d1, dir_s2d2));
3197 	ASSERT_EQ(-1, rename(dir_s2d2, file1_s1d1));
3199 	ASSERT_EQ(-1, renameat2(AT_FDCWD, file1_s1d1, AT_FDCWD, dir_s2d2,
3202 	ASSERT_EQ(-1, renameat2(AT_FDCWD, file1_s1d1, AT_FDCWD, dir_s2d3,
3334 	ASSERT_EQ(0, unlink(file1_s1d1));
3373 	ASSERT_EQ(-1, unlink(file1_s1d1));
3375 	ASSERT_EQ(-1, unlinkat(AT_FDCWD, file1_s1d1, 0));
3396 	ASSERT_EQ(0, unlink(file1_s1d1));
3413 	ASSERT_EQ(-1, mknod(file1_s1d1, mode | 0400, dev));
3415 	ASSERT_EQ(-1, link(file2_s1d1, file1_s1d1));
3417 	ASSERT_EQ(-1, rename(file2_s1d1, file1_s1d1));
3485 	ASSERT_EQ(0, unlink(file1_s1d1));
3498 	ASSERT_EQ(-1, symlink("none", file1_s1d1));
3500 	ASSERT_EQ(-1, link(file2_s1d1, file1_s1d1));
3502 	ASSERT_EQ(-1, rename(file2_s1d1, file1_s1d1));
3530 	ASSERT_EQ(0, unlink(file1_s1d1));
3538 	ASSERT_EQ(-1, mkdir(file1_s1d1, 0700));
3619 	ASSERT_EQ(EACCES, test_open(file1_s1d1, O_RDWR));
3689 	const char *const file_r = file1_s1d1;
3746 	const char *const file_rwt = file1_s1d1;
3870 	const char *const path = file1_s1d1;
3945 	create_file(_metadata, file1_s1d1);
3950 	EXPECT_EQ(0, remove_path(file1_s1d1));
4008 	const char *const path = file1_s1d1;
4049 		const char *const path = file1_s1d1;
4309 	const char *const path = file1_s1d1;
4347 	const char *const path = file1_s1d1;
4616 	ASSERT_EQ(0, test_open(file1_s1d1, O_RDONLY));
4693 	ASSERT_EQ(0, test_open(file1_s1d1, O_RDONLY));
4694 	ASSERT_EQ(EACCES, test_open(file1_s1d1, O_WRONLY));
4715 	ASSERT_EQ(EACCES, test_open(file1_s1d1, O_RDONLY));
4716 	ASSERT_EQ(EACCES, test_open(file1_s1d1, O_WRONLY));
4794 	ASSERT_EQ(-1, rename(file1_s1d1, file1_s1d2));
5347 	.file_path = file1_s1d1,
5682 	copy_file(_metadata, bin_true, file1_s1d1);
5683 	test_execute(_metadata, 0, file1_s1d1);
5684 	test_check_exec(_metadata, 0, file1_s1d1);
5692 	test_execute(_metadata, EACCES, file1_s1d1);
5694 				    file1_s1d1));
5695 	test_check_exec(_metadata, EACCES, file1_s1d1);
5697 				    file1_s1d1));
5733 	copy_file(_metadata, bin_true, file1_s1d1);
5734 	test_execute(_metadata, 0, file1_s1d1);
5735 	test_check_exec(_metadata, 0, file1_s1d1);
5745 	test_execute(_metadata, EACCES, file1_s1d1);
5747 				    "fs\\.execute,fs\\.read_file", file1_s1d1));
5748 	test_check_exec(_metadata, EACCES, file1_s1d1);
5750 				    "fs\\.execute,fs\\.read_file", file1_s1d1));
5765 	EXPECT_EQ(EACCES, test_open(file1_s1d1, O_WRONLY));
5767 				    "fs\\.write_file", file1_s1d1));
5782 	EXPECT_EQ(EACCES, test_open(file1_s1d1, O_RDONLY));
5784 				    file1_s1d1));
6003 	EXPECT_EQ(-1, link(file1_s1d1, file1_s1d3));
6030 	EXPECT_EQ(-1, link(file1_s1d1, file1_s1d3));