1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
|
#[test]
fn test_bounding_has_cap() {
caps::has_cap(
None,
caps::CapSet::Bounding,
caps::Capability::CAP_SYS_CHROOT,
)
.unwrap();
}
#[test]
fn test_bounding_read() {
caps::read(None, caps::CapSet::Bounding).unwrap();
}
#[test]
fn test_bounding_clear() {
let ret = caps::clear(None, caps::CapSet::Bounding);
if caps::has_cap(None, caps::CapSet::Effective, caps::Capability::CAP_SETPCAP).unwrap() {
ret.unwrap();
let empty = caps::read(None, caps::CapSet::Bounding).unwrap();
assert_eq!(empty.len(), 0);
} else {
assert!(ret.is_err());
};
}
#[test]
fn test_bounding_drop() {
let ret = caps::drop(
None,
caps::CapSet::Bounding,
caps::Capability::CAP_SYS_CHROOT,
);
if caps::has_cap(None, caps::CapSet::Effective, caps::Capability::CAP_SETPCAP).unwrap() {
ret.unwrap();
let set = caps::read(None, caps::CapSet::Bounding).unwrap();
assert!(!set.contains(&caps::Capability::CAP_SYS_CHROOT));
} else {
assert!(ret.is_err());
}
}
#[test]
fn test_bounding_drop_other() {
assert!(caps::drop(Some(1), caps::CapSet::Bounding, caps::Capability::CAP_CHOWN).is_err());
}
#[test]
fn test_bounding_raise() {
assert!(caps::raise(None, caps::CapSet::Bounding, caps::Capability::CAP_CHOWN).is_err());
}
#[test]
fn test_bounding_set() {
let v = caps::CapsHashSet::new();
assert!(caps::set(None, caps::CapSet::Bounding, &v).is_err());
}
|
