1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
|
package open
import (
"io"
"os"
"path/filepath"
"strings"
"testing"
"github.com/containers/storage/pkg/reexec"
"github.com/stretchr/testify/require"
"golang.org/x/sys/unix"
)
func TestMain(m *testing.M) {
if reexec.Init() {
return
}
os.Exit(m.Run())
}
func TestOpenInChroot(t *testing.T) {
tmpdir := t.TempDir()
firstContents := []byte{0, 1, 2, 3}
secondContents := []byte{4, 5, 6, 7}
require.NoErrorf(t, os.WriteFile(filepath.Join(tmpdir, "a"), firstContents, 0o644), "creating first test file")
require.NoErrorf(t, os.MkdirAll(filepath.Join(tmpdir, tmpdir), 0o755), "creating test subdirectory")
require.NoErrorf(t, os.WriteFile(filepath.Join(tmpdir, tmpdir, "a"), secondContents, 0o644), "creating second test file")
result := inChroot(requests{
Open: []request{
{
Path: filepath.Join(tmpdir, "a"),
Mode: unix.O_RDONLY,
},
},
})
require.Empty(t, result.Err, "result from first client")
require.Equal(t, 1, len(result.Open), "results from first client")
require.Empty(t, result.Open[0].Err, "first (only) result from first client")
f := os.NewFile(result.Open[0].Fd, "file from first subprocess")
contents, err := io.ReadAll(f)
require.NoErrorf(t, err, "reading from file from first subprocess")
require.Equalf(t, firstContents, contents, "contents of file from first subprocess")
f.Close()
result = inChroot(requests{
Root: tmpdir,
Open: []request{
{
Path: filepath.Join(tmpdir, "a"),
Mode: unix.O_RDONLY,
},
},
})
if strings.Contains(result.Err, "operation not permitted") {
t.Skipf("Skipping test: %v", result.Err)
}
require.Empty(t, result.Err, "result from second client")
require.Equal(t, 1, len(result.Open), "results from second client")
require.Empty(t, result.Open[0].Err, "first (only) result from second client")
f = os.NewFile(result.Open[0].Fd, "file from second subprocess")
contents, err = io.ReadAll(f)
require.NoErrorf(t, err, "reading from file from second subprocess")
require.Equalf(t, secondContents, contents, "contents of file from second subprocess")
f.Close()
fd, errno, err := InChroot(tmpdir, "", filepath.Join(tmpdir, "a"), unix.O_RDONLY, 0)
require.NoErrorf(t, err, "wrapper for opening just one item")
require.Zero(t, errno, "errno from open file")
f = os.NewFile(uintptr(fd), "file from third subprocess")
require.NoErrorf(t, err, "reading from file from third subprocess")
require.Equalf(t, secondContents, contents, "contents of file from third subprocess")
f.Close()
fd, errno, err = InChroot(tmpdir, "", filepath.Join(tmpdir, "b"), unix.O_RDONLY, 0)
require.Errorf(t, err, "attempting to open a non-existent file")
require.NotZero(t, errno, "attempting to open a non-existent file")
require.Equal(t, -1, fd, "returned descriptor when open fails")
f.Close()
}
|
