OLD | NEW |
1 // Copyright 2015 The Chromium Authors. All rights reserved. | 1 // Copyright 2015 The Chromium Authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
4 | 4 |
5 #include "sandbox/linux/services/namespace_utils.h" | 5 #include "sandbox/linux/services/namespace_utils.h" |
6 | 6 |
7 #include <errno.h> | 7 #include <errno.h> |
8 #include <sched.h> | 8 #include <sched.h> |
9 #include <sys/types.h> | 9 #include <sys/types.h> |
10 #include <sys/wait.h> | 10 #include <sys/wait.h> |
(...skipping 27 matching lines...) Expand all Loading... |
38 } | 38 } |
39 | 39 |
40 const uid_t uid = getuid(); | 40 const uid_t uid = getuid(); |
41 const gid_t gid = getgid(); | 41 const gid_t gid = getgid(); |
42 | 42 |
43 const pid_t pid = | 43 const pid_t pid = |
44 base::ForkWithFlags(CLONE_NEWUSER | SIGCHLD, nullptr, nullptr); | 44 base::ForkWithFlags(CLONE_NEWUSER | SIGCHLD, nullptr, nullptr); |
45 ASSERT_NE(-1, pid); | 45 ASSERT_NE(-1, pid); |
46 if (pid == 0) { | 46 if (pid == 0) { |
47 RAW_CHECK(getuid() != uid); | 47 RAW_CHECK(getuid() != uid); |
48 NamespaceUtils::WriteToIdMapFile("/proc/self/uid_map", uid); | 48 RAW_CHECK(NamespaceUtils::WriteToIdMapFile("/proc/self/uid_map", uid)); |
49 RAW_CHECK(getuid() == uid); | 49 RAW_CHECK(getuid() == uid); |
50 | 50 |
51 RAW_CHECK(getgid() != gid); | 51 RAW_CHECK(getgid() != gid); |
52 NamespaceUtils::WriteToIdMapFile("/proc/self/gid_map", gid); | 52 RAW_CHECK(NamespaceUtils::WriteToIdMapFile("/proc/self/gid_map", gid)); |
53 RAW_CHECK(getgid() == gid); | 53 RAW_CHECK(getgid() == gid); |
54 | 54 |
55 _exit(0); | 55 _exit(0); |
56 } | 56 } |
57 | 57 |
58 int status = 42; | 58 int status = 42; |
59 SANDBOX_ASSERT_EQ(pid, HANDLE_EINTR(waitpid(pid, &status, 0))); | 59 SANDBOX_ASSERT_EQ(pid, HANDLE_EINTR(waitpid(pid, &status, 0))); |
60 SANDBOX_ASSERT_EQ(0, status); | 60 SANDBOX_ASSERT_EQ(0, status); |
61 } | 61 } |
62 | 62 |
63 } // namespace. | 63 } // namespace. |
64 | 64 |
65 } // namespace sandbox. | 65 } // namespace sandbox. |
OLD | NEW |