selftests/seccomp: Handle EINVAL on unshare(CLONE_NEWPID)
BugLink: https://bugs.launchpad.net/bugs/2070337 commit ecaaa55c9fa5e8058445a8b891070b12208cdb6d upstream. unshare(CLONE_NEWPID) can return EINVAL if the kernel does not have the CONFIG_PID_NS option enabled. Add a check on these calls to skip the test if we receive EINVAL. Signed-off-by: Terry Tritton <terry.tritton@linaro.org> Link: https://lore.kernel.org/r/20240124141357.1243457-2-terry.tritton@linaro.org Signed-off-by: Kees Cook <keescook@chromium.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Signed-off-by: Manuel Diewald <manuel.diewald@canonical.com> Signed-off-by: Stefan Bader <stefan.bader@canonical.com>
This commit is contained in:
committed by
Stefan Bader
parent
c66c588beb
commit
3d3eba0eac
@@ -3709,7 +3709,12 @@ TEST(user_notification_sibling_pid_ns)
|
||||
ASSERT_GE(pid, 0);
|
||||
|
||||
if (pid == 0) {
|
||||
ASSERT_EQ(unshare(CLONE_NEWPID), 0);
|
||||
ASSERT_EQ(unshare(CLONE_NEWPID), 0) {
|
||||
if (errno == EPERM)
|
||||
SKIP(return, "CLONE_NEWPID requires CAP_SYS_ADMIN");
|
||||
else if (errno == EINVAL)
|
||||
SKIP(return, "CLONE_NEWPID is invalid (missing CONFIG_PID_NS?)");
|
||||
}
|
||||
|
||||
pid2 = fork();
|
||||
ASSERT_GE(pid2, 0);
|
||||
@@ -3727,6 +3732,8 @@ TEST(user_notification_sibling_pid_ns)
|
||||
ASSERT_EQ(unshare(CLONE_NEWPID), 0) {
|
||||
if (errno == EPERM)
|
||||
SKIP(return, "CLONE_NEWPID requires CAP_SYS_ADMIN");
|
||||
else if (errno == EINVAL)
|
||||
SKIP(return, "CLONE_NEWPID is invalid (missing CONFIG_PID_NS?)");
|
||||
}
|
||||
ASSERT_EQ(errno, 0);
|
||||
|
||||
|
||||
Reference in New Issue
Block a user