From: Luca Boccassi <luca.boccassi@gmail.com>
Date: Wed, 11 Dec 2024 12:01:18 +0000 (+0000)
Subject: test-fd-util: skip test when lacking privileges to create a new namespace
X-Git-Tag: v256.10~39
X-Git-Url: http://git.ipfire.org/gitweb/?a=commitdiff_plain;h=b8c85564906a7808bebc04a95be08c9a0635f2f5;p=thirdparty%2Fsystemd.git

test-fd-util: skip test when lacking privileges to create a new namespace

To reproduce, as an unprivileged user start a docker container and build
and run the unit tests inside it:

$ docker run --rm -ti debian:bookworm bash
...
/* test_close_all_fds */
Successfully forked off '(caf-plain)' as PID 10496.
Skipping PR_SET_MM, as we don't have privileges.
(caf-plain) succeeded.
Failed to fork off '(caf-noproc)': Operation not permitted
Assertion 'r >= 0' failed at src/test/test-fd-util.c:392, function test_close_all_fds(). Aborting.

Partially fixes #35552

(cherry picked from commit 630a2e7ee195ca96e102acac8df67a278a879124)
(cherry picked from commit 5573ac7d9c52bed8d38480788b02639ede3881fc)
---

diff --git a/src/test/test-fd-util.c b/src/test/test-fd-util.c
index f2b65d492a6..409433a529b 100644
--- a/src/test/test-fd-util.c
+++ b/src/test/test-fd-util.c
@@ -360,6 +360,8 @@ TEST(close_all_fds) {
                         test_close_all_fds_inner();
                 _exit(EXIT_SUCCESS);
         }
+        if (ERRNO_IS_NEG_PRIVILEGE(r))
+                return (void) log_tests_skipped("Lacking privileges for test in namespace with /proc/ overmounted");
         assert_se(r >= 0);
 
         if (!is_seccomp_available())