1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
|
#!/usr/bin/env python3
import argparse
import atexit
import os
import subprocess
import sys
import signal
import time
import errno
import dbus
import dbus.mainloop.glib
import dbusmock
def setup_test_namespace(data_dir):
print(f"Test data dir: {data_dir}")
# Setup a new mount & user namespace, so we can use mount() unprivileged (see user_namespaces(7))
euid = os.geteuid()
egid = os.getegid()
try:
os.unshare(os.CLONE_NEWNS|os.CLONE_NEWUSER)
# Map root to the original EUID and EGID, so we can actually call mount() inside our namespace
with open("/proc/self/uid_map", "w") as f:
f.write(f"0 {euid} 1")
with open("/proc/self/setgroups", "w") as f:
f.write("deny")
with open("/proc/self/gid_map", "w") as f:
f.write(f"0 {egid} 1")
# Overmount /etc with our own version
subprocess.check_call(["mount", "--bind", os.path.join(data_dir, "etc"), "/etc"])
except PermissionError:
print("Lacking permissions to set up test harness, skipping")
sys.exit(77)
except AttributeError:
print("Python 3.12 is required for os.unshare(), skipping")
sys.exit(77)
def stop_dbus(pid: int) -> None:
"""Stop a D-Bus daemon
If DBus daemon is not explicitly killed in the testing environment
the test times out and reports as failed.
This is a backport of a function dropped from DBusMock source (99c4800e9eed).
"""
signal.signal(signal.SIGTERM, signal.SIG_IGN)
for _ in range(50):
try:
os.kill(pid, signal.SIGTERM)
os.waitpid(pid, os.WNOHANG)
except ChildProcessError:
break
except OSError as e:
if e.errno == errno.ESRCH:
break
raise
time.sleep(0.1)
else:
sys.stderr.write("ERROR: timed out waiting for bus process to terminate\n")
os.kill(pid, signal.SIGKILL)
try:
os.waitpid(pid, 0)
except ChildProcessError:
pass
signal.signal(signal.SIGTERM, signal.SIG_DFL)
if __name__ == "__main__":
parser = argparse.ArgumentParser()
parser.add_argument("test_executable",
help="test executable to run in our own test namespace")
parser.add_argument("--data-dir", type=str, required=True,
help="path to test data directory (with our own /etc/{passwd,group,...} files)")
parser.add_argument("--mock-dbus", action="store_true",
help="set up a mock system D-Bus using dbusmock")
args = parser.parse_args()
setup_test_namespace(args.data_dir)
if args.mock_dbus:
dbus.mainloop.glib.DBusGMainLoop(set_as_default=True)
dbusmock.DBusTestCase.start_system_bus()
atexit.register(stop_dbus, dbusmock.DBusTestCase.system_bus_pid)
print(f"Executing '{args.test_executable}'")
sys.stdout.flush()
os.environ["POLKIT_TEST_DATA"] = args.data_dir
subprocess.check_call(args.test_executable, shell=True)
|
