[thirdparty/systemd.git] / test / TEST-22-TMPFILES / test-08.sh

#! /bin/bash
#
# Verify tmpfiles can run in a root directory under a path prefix that contains
# directories owned by unprivileged users, for example when a root file system
# is mounted in a regular user's home directory.
#
# https://github.com/systemd/systemd/pull/11820
#

set -e

rm -fr /tmp/root /tmp/user
mkdir -p /tmp/root /tmp/user/root
chown daemon:daemon /tmp/user

# Verify the command works as expected with no prefix or a root-owned prefix.
echo 'd /tmp/root/test1' | systemd-tmpfiles --create -
test -d /tmp/root/test1
echo 'd /test2' | systemd-tmpfiles --root=/tmp/root --create -
test -d /tmp/root/test2

# Verify the command fails to write to a root-owned subdirectory under an
# unprivileged user's directory when it's not part of the prefix, as expected
# by the unsafe_transition function.
! echo 'd /tmp/user/root/test' | systemd-tmpfiles --create -
! test -e /tmp/user/root/test
! echo 'd /user/root/test' | systemd-tmpfiles --root=/tmp --create -
! test -e /tmp/user/root/test

# Verify the above works when all user-owned directories are in the prefix.
echo 'd /test' | systemd-tmpfiles --root=/tmp/user/root --create -
test -d /tmp/user/root/test
Commit	Line	Data
8595c458 DM	1	#! /bin/bash
	2	#
	3	# Verify tmpfiles can run in a root directory under a path prefix that contains
	4	# directories owned by unprivileged users, for example when a root file system
	5	# is mounted in a regular user's home directory.
	6	#
	7	# https://github.com/systemd/systemd/pull/11820
	8	#
	9
	10	set -e
	11
	12	rm -fr /tmp/root /tmp/user
	13	mkdir -p /tmp/root /tmp/user/root
	14	chown daemon:daemon /tmp/user
	15
	16	# Verify the command works as expected with no prefix or a root-owned prefix.
	17	echo 'd /tmp/root/test1' \| systemd-tmpfiles --create -
	18	test -d /tmp/root/test1
	19	echo 'd /test2' \| systemd-tmpfiles --root=/tmp/root --create -
	20	test -d /tmp/root/test2
	21
	22	# Verify the command fails to write to a root-owned subdirectory under an
	23	# unprivileged user's directory when it's not part of the prefix, as expected
	24	# by the unsafe_transition function.
	25	! echo 'd /tmp/user/root/test' \| systemd-tmpfiles --create -
	26	! test -e /tmp/user/root/test
	27	! echo 'd /user/root/test' \| systemd-tmpfiles --root=/tmp --create -
	28	! test -e /tmp/user/root/test
	29
	30	# Verify the above works when all user-owned directories are in the prefix.
	31	echo 'd /test' \| systemd-tmpfiles --root=/tmp/user/root --create -
	32	test -d /tmp/user/root/test