Paul Meyer
f2e5962fe8
Now that run_subtests() understands 77 as skipped, make the subtests that bail out early on a missing capability or precondition exit 77 instead of exit 0. Partial skips that run after real assertions, and exits from inside subshells, are deliberately left untouched. Signed-off-by: Paul Meyer <katexochen0@gmail.com>
58 lines
1.6 KiB
Bash
Executable File
58 lines
1.6 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
# SPDX-License-Identifier: LGPL-2.1-or-later
|
|
set -eux
|
|
set -o pipefail
|
|
|
|
# Verify PrivateIPC= works and creates a separate IPC namespace even if POSIX
|
|
# message queues are not supported.
|
|
host_ipcns=$(readlink /proc/self/ns/ipc)
|
|
private_ipcns=$(systemd-run --quiet --wait --pipe -p PrivateIPC=yes readlink /proc/self/ns/ipc)
|
|
[[ "$private_ipcns" != "$host_ipcns" ]]
|
|
|
|
if [[ ! -d /proc/sys/fs/mqueue ]]; then
|
|
echo "POSIX message queues are not supported, skipping ownership checks"
|
|
exit 77
|
|
fi
|
|
|
|
# Verify ownership attributes are applied to message queues
|
|
|
|
# Select arbitrary non-default attributes to apply to the queue.
|
|
queue=/attr_q # Pick any unused queue name.
|
|
user=nobody # Choose a core system user.
|
|
group=adm # Choose a core system group.
|
|
mode=0420 # Allow the owner to read messages and anyone in the group to write.
|
|
|
|
at_exit() {
|
|
set +e
|
|
systemctl stop mqueue-ownership.{service,socket}
|
|
rm -f /run/systemd/system/mqueue-ownership.{service,socket}
|
|
systemctl daemon-reload
|
|
}
|
|
trap at_exit EXIT
|
|
|
|
cat <<EOF >/run/systemd/system/mqueue-ownership.socket
|
|
[Unit]
|
|
Description=Create a message queue with customized ownership
|
|
[Socket]
|
|
ListenMessageQueue=/${queue#/}
|
|
RemoveOnStop=true
|
|
SocketUser=$user
|
|
SocketGroup=$group
|
|
SocketMode=$mode
|
|
EOF
|
|
|
|
cat <<EOF >/run/systemd/system/mqueue-ownership.service
|
|
[Unit]
|
|
Description=Dummy service for the socket unit
|
|
Requires=%N.socket
|
|
[Service]
|
|
ExecStart=true
|
|
Type=oneshot
|
|
EOF
|
|
|
|
systemctl daemon-reload
|
|
systemctl start mqueue-ownership.socket
|
|
|
|
systemctl start dev-mqueue.mount # Ensure this file path interface is mounted.
|
|
[[ $(stat -c '%04a %U %G' "/dev/mqueue/${queue#/}") == "$mode $user $group" ]]
|