/*
* Copyright (c) Huawei Technologies Co., Ltd., 2015
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation; either version 2 of the License, or
* (at your option) any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See
* the GNU General Public License for more details.
*/
/*
* Verify that:
* The kernel imposes a limit of at least 32 nested levels on user namespaces.
*/
#define _GNU_SOURCE
#include <sys/wait.h>
#include <assert.h>
#include <stdio.h>
#include <stdlib.h>
#include <unistd.h>
#include <string.h>
#include <errno.h>
#include "userns_helper.h"
#include "test.h"
#define MAXNEST 32
char *TCID = "userns07";
int TST_TOTAL = 1;
static void setup(void)
{
check_newuser();
tst_tmpdir();
TST_CHECKPOINT_INIT(NULL);
}
static void cleanup(void)
{
tst_rmdir();
}
static int child_fn1(void *arg)
{
pid_t cpid1;
long level = (long)arg;
int status;
int parentuid;
int parentgid;
TST_SAFE_CHECKPOINT_WAIT(NULL, 0);
if (level == MAXNEST)
return 0;
cpid1 = ltp_clone_quick(CLONE_NEWUSER | SIGCHLD,
(void *)child_fn1, (void *)(level + 1));
if (cpid1 < 0) {
printf("level %ld:unexpected error: (%d) %s\n",
level, errno, strerror(errno));
return 1;
}
parentuid = geteuid();
parentgid = getegid();
updatemap(cpid1, UID_MAP, 0, parentuid, NULL);
updatemap(cpid1, GID_MAP, 0, parentgid, NULL);
TST_SAFE_CHECKPOINT_WAKE(cleanup, 0);
if (waitpid(cpid1, &status, 0) == -1)
return 1;
if (WIFEXITED(status) && WEXITSTATUS(status) != 0) {
printf("child exited abnormally\n");
return 1;
} else if (WIFSIGNALED(status)) {
printf("child was killed with signal = %d", WTERMSIG(status));
return 1;
}
return 0;
}
static void test_max_nest(void)
{
pid_t cpid1;
int parentuid;
int parentgid;
int fd;
char path[BUFSIZ];
cpid1 = ltp_clone_quick(CLONE_NEWUSER | SIGCHLD,
(void *)child_fn1, (void *)0);
if (cpid1 < 0)
tst_brkm(TBROK | TERRNO, cleanup, "clone failed");
parentuid = geteuid();
parentgid = getegid();
if (access("/proc/self/setgroups", F_OK) == 0) {
sprintf(path, "/proc/%d/setgroups", cpid1);
fd = SAFE_OPEN(cleanup, path, O_WRONLY, 0644);
SAFE_WRITE(cleanup, 1, fd, "deny", 4);
SAFE_CLOSE(cleanup, fd);
}
updatemap(cpid1, UID_MAP, 0, parentuid, cleanup);
updatemap(cpid1, GID_MAP, 0, parentgid, cleanup);
TST_SAFE_CHECKPOINT_WAKE(cleanup, 0);
tst_record_childstatus(cleanup, cpid1);
}
int main(int argc, char *argv[])
{
int lc;
setup();
tst_parse_opts(argc, argv, NULL, NULL);
for (lc = 0; TEST_LOOPING(lc); lc++) {
tst_count = 0;
test_max_nest();
}
cleanup();
tst_exit();
}