]>
git.ipfire.org Git - thirdparty/systemd.git/blob - src/test/test-ns.c
1 /* SPDX-License-Identifier: LGPL-2.1+ */
11 int main(int argc
, char *argv
[]) {
12 const char * const writable
[] = {
14 "-/home/lennart/projects/foobar", /* this should be masked automatically */
18 const char * const readonly
[] = {
29 const char *inaccessible
[] = {
30 "/home/lennart/projects",
34 static const NamespaceInfo ns_info
= {
36 .protect_control_groups
= true,
37 .protect_kernel_tunables
= true,
38 .protect_kernel_modules
= true,
42 char *projects_directory
;
44 char tmp_dir
[] = "/tmp/systemd-private-XXXXXX",
45 var_tmp_dir
[] = "/var/tmp/systemd-private-XXXXXX";
47 test_setup_logging(LOG_DEBUG
);
49 assert_se(mkdtemp(tmp_dir
));
50 assert_se(mkdtemp(var_tmp_dir
));
52 root_directory
= getenv("TEST_NS_CHROOT");
53 projects_directory
= getenv("TEST_NS_PROJECTS");
55 if (projects_directory
)
56 inaccessible
[0] = projects_directory
;
58 log_info("Inaccessible directory: '%s'", inaccessible
[0]);
60 log_info("Chroot: '%s'", root_directory
);
62 log_info("Not chrooted");
64 r
= setup_namespace(root_directory
,
69 (char **) inaccessible
,
71 &(BindMount
) { .source
= (char*) "/usr/bin", .destination
= (char*) "/etc/systemd", .read_only
= true }, 1,
72 &(TemporaryFileSystem
) { .path
= (char*) "/var", .options
= (char*) "ro" }, 1,
81 log_error_errno(r
, "Failed to setup namespace: %m");
84 " sudo TEST_NS_PROJECTS=/home/lennart/projects ./test-ns\n"
85 " sudo TEST_NS_CHROOT=/home/alban/debian-tree TEST_NS_PROJECTS=/home/alban/debian-tree/home/alban/Documents ./test-ns");
90 execl("/bin/sh", "/bin/sh", NULL
);
91 log_error_errno(errno
, "execl(): %m");