Index: sandbox/linux/services/namespace_sandbox_unittest.cc |
diff --git a/sandbox/linux/services/namespace_sandbox_unittest.cc b/sandbox/linux/services/namespace_sandbox_unittest.cc |
index 8bb0bff83b7027d86d8b8e08ae82e0ea7ddd8c5a..af934a6db7417299087258f640ac82cf9fb36046 100644 |
--- a/sandbox/linux/services/namespace_sandbox_unittest.cc |
+++ b/sandbox/linux/services/namespace_sandbox_unittest.cc |
@@ -118,6 +118,51 @@ TEST_F(NamespaceSandboxTest, NestedNamespaceSandbox) { |
TestProc("NestedNamespaceSandbox"); |
} |
+const int kNormalExitCode = 0; |
+const int kSignalTerminationExitCode = 255; |
+ |
+SANDBOX_TEST(ForkInNewPidNamespace, BasicUsage) { |
+ if (!Credentials::CanCreateProcessInNewUserNS()) { |
+ return; |
+ } |
+ |
+ CHECK(sandbox::Credentials::MoveToNewUserNS()); |
+ const pid_t pid = NamespaceSandbox::ForkInNewPidNamespace(); |
+ CHECK_GE(pid, 0); |
+ |
+ if (pid == 0) { |
jln (very slow on Chromium)
2015/03/25 02:09:13
We should also check that getpid() == 1
rickyz (no longer on Chrome)
2015/03/25 22:47:46
Done.
|
+ _exit(kNormalExitCode); |
+ } |
+ |
+ int status; |
+ PCHECK(waitpid(pid, &status, 0) == pid); |
+ CHECK(WIFEXITED(status)); |
+ CHECK_EQ(kNormalExitCode, WEXITSTATUS(status)); |
+} |
+ |
+SANDBOX_TEST(ForkInNewPidNamespace, ExitWithSignal) { |
+ if (!Credentials::CanCreateProcessInNewUserNS()) { |
+ return; |
+ } |
+ |
+ CHECK(sandbox::Credentials::MoveToNewUserNS()); |
+ const pid_t pid = NamespaceSandbox::ForkInNewPidNamespace(); |
+ CHECK_GE(pid, 0); |
+ |
+ if (pid == 0) { |
+ NamespaceSandbox::InstallTerminationSignalHandler( |
+ SIGTERM, kSignalTerminationExitCode); |
+ while (true) { |
+ raise(SIGTERM); |
+ } |
+ } |
+ |
+ int status; |
+ PCHECK(waitpid(pid, &status, 0) == pid); |
+ CHECK(WIFEXITED(status)); |
+ CHECK_EQ(kSignalTerminationExitCode, WEXITSTATUS(status)); |
+} |
+ |
} // namespace |
} // namespace sandbox |