selftests/seccomp/seccomp_bpf.c

341 	ASSERT_EQ(0, ret) {
352 	ASSERT_EQ(0, ret) {
379 	ASSERT_EQ(0, ret) {
438 	ASSERT_EQ(0, ret);
452 	ASSERT_EQ(0, ret) {
475 	ASSERT_EQ(0, ret);
481 	ASSERT_EQ(0, ret);
509 	ASSERT_EQ(0, ret);
512 	ASSERT_EQ(0, ret);
532 	ASSERT_EQ(0, ret);
538 	ASSERT_EQ(0, ret);
557 	ASSERT_EQ(0, ret);
560 	ASSERT_EQ(0, ret);
574 	ASSERT_EQ(0, ret);
594 	ASSERT_EQ(0, ret);
597 	ASSERT_EQ(0, ret);
615 	ASSERT_EQ(0, ret);
618 	ASSERT_EQ(0, ret);
637 	ASSERT_EQ(0, ret);
640 	ASSERT_EQ(0, ret);
658 	ASSERT_EQ(0, ret);
661 	ASSERT_EQ(0, ret);
681 	ASSERT_EQ(0, ret);
684 	ASSERT_EQ(0, ret);
716 	ASSERT_EQ(0, ret);
719 	ASSERT_EQ(0, ret);
758 	ASSERT_EQ(0, ret);
761 	ASSERT_EQ(0, ret);
831 	ASSERT_EQ(0, prctl(PR_SET_NO_NEW_PRIVS, 1, 0, 0, 0)) {
835 	ASSERT_EQ(0, seccomp(SECCOMP_SET_MODE_FILTER, 0,
844 		ASSERT_EQ(0, seccomp(SECCOMP_SET_MODE_FILTER, 0, &prog_thread));
847 	ASSERT_EQ(0, pthread_create(&thread, NULL, kill_thread, (void *)false));
848 	ASSERT_EQ(0, pthread_join(thread, &status));
849 	ASSERT_EQ(SIBLING_EXIT_UNKILLED, (unsigned long)status);
852 	ASSERT_EQ(0, pthread_create(&thread, NULL, kill_thread, (void *)true));
853 	ASSERT_EQ(0, pthread_join(thread, &status));
876 	ASSERT_EQ(child_pid, waitpid(child_pid, &status, 0));
880 	ASSERT_EQ(42, WEXITSTATUS(status));
895 	ASSERT_EQ(child_pid, waitpid(child_pid, &status, 0));
899 	ASSERT_EQ(SIGSYS, WTERMSIG(status));
914 	ASSERT_EQ(child_pid, waitpid(child_pid, &status, 0));
920 	ASSERT_EQ(SIGSYS, WTERMSIG(status));
937 	ASSERT_EQ(0, ret);
965 	ASSERT_EQ(0, ret);
968 	ASSERT_EQ(0, ret);
983 	ASSERT_EQ(0, ret);
986 	ASSERT_EQ(0, ret);
1005 	ASSERT_EQ(0, ret);
1008 	ASSERT_EQ(0, ret);
1030 	ASSERT_EQ(0, ret);
1033 	ASSERT_EQ(0, ret);
1036 	ASSERT_EQ(0, ret);
1039 	ASSERT_EQ(0, ret);
1078 	ASSERT_EQ(0, ret);
1081 	ASSERT_EQ(0, ret);
1091 	ASSERT_EQ(0, ret);
1096 	ASSERT_EQ(0, ret);
1121 	ASSERT_EQ(0, ret) {
1125 	ASSERT_EQ(0, ret) {
1130 	ASSERT_EQ(0, ret);
1132 	ASSERT_EQ(0, ret);
1239 	ASSERT_EQ(0, ret);
1242 	ASSERT_EQ(0, ret);
1244 	ASSERT_EQ(0, ret);
1246 	ASSERT_EQ(0, ret);
1248 	ASSERT_EQ(0, ret);
1250 	ASSERT_EQ(0, ret);
1252 	ASSERT_EQ(0, ret);
1265 	ASSERT_EQ(0, ret);
1268 	ASSERT_EQ(0, ret);
1270 	ASSERT_EQ(0, ret);
1272 	ASSERT_EQ(0, ret);
1274 	ASSERT_EQ(0, ret);
1276 	ASSERT_EQ(0, ret);
1278 	ASSERT_EQ(0, ret);
1294 	ASSERT_EQ(0, ret);
1297 	ASSERT_EQ(0, ret);
1299 	ASSERT_EQ(0, ret);
1301 	ASSERT_EQ(0, ret);
1303 	ASSERT_EQ(0, ret);
1305 	ASSERT_EQ(0, ret);
1307 	ASSERT_EQ(0, ret);
1321 	ASSERT_EQ(0, ret);
1324 	ASSERT_EQ(0, ret);
1326 	ASSERT_EQ(0, ret);
1328 	ASSERT_EQ(0, ret);
1330 	ASSERT_EQ(0, ret);
1332 	ASSERT_EQ(0, ret);
1346 	ASSERT_EQ(0, ret);
1349 	ASSERT_EQ(0, ret);
1351 	ASSERT_EQ(0, ret);
1353 	ASSERT_EQ(0, ret);
1355 	ASSERT_EQ(0, ret);
1357 	ASSERT_EQ(0, ret);
1371 	ASSERT_EQ(0, ret);
1374 	ASSERT_EQ(0, ret);
1376 	ASSERT_EQ(0, ret);
1378 	ASSERT_EQ(0, ret);
1380 	ASSERT_EQ(0, ret);
1393 	ASSERT_EQ(0, ret);
1396 	ASSERT_EQ(0, ret);
1398 	ASSERT_EQ(0, ret);
1400 	ASSERT_EQ(0, ret);
1402 	ASSERT_EQ(0, ret);
1415 	ASSERT_EQ(0, ret);
1418 	ASSERT_EQ(0, ret);
1420 	ASSERT_EQ(0, ret);
1422 	ASSERT_EQ(0, ret);
1436 	ASSERT_EQ(0, ret);
1439 	ASSERT_EQ(0, ret);
1441 	ASSERT_EQ(0, ret);
1443 	ASSERT_EQ(0, ret);
1458 	ASSERT_EQ(0, ret);
1461 	ASSERT_EQ(0, ret);
1463 	ASSERT_EQ(0, ret);
1478 	ASSERT_EQ(0, ret);
1481 	ASSERT_EQ(0, ret);
1483 	ASSERT_EQ(0, ret);
1523 	ASSERT_EQ(0, sigaction(SIGUSR1, &action, NULL));
1528 	ASSERT_EQ(0, ret) {
1537 	ASSERT_EQ(0, ret) {
1543 	ASSERT_EQ(0, ret);
1546 	ASSERT_EQ(1, write(fd, "A", 1));
1547 	ASSERT_EQ(0, close(fd));
1566 		ASSERT_EQ(WIFCONTINUED(status), false);
1567 		ASSERT_EQ(WIFSTOPPED(status), true);
1568 		ASSERT_EQ(WSTOPSIG(status) & SIGTRAP, SIGTRAP) {
1576 		ASSERT_EQ(0, ret);
1594 	ASSERT_EQ(0, pipe(pipefd));
1623 		ASSERT_EQ(0, kill(tracer, SIGUSR1));
1624 		ASSERT_EQ(tracer, waitpid(tracer, &status, 0));
1645 	ASSERT_EQ(0x1001, msg) {
1701 	ASSERT_EQ(0, ret);
1704 	ASSERT_EQ(0, ret);
1717 	ASSERT_EQ(0, ret);
1720 	ASSERT_EQ(0, ret);
2157 	ASSERT_EQ(self->mytid, self->mypid);
2170 	ASSERT_EQ(0, ret);
2177 	ASSERT_EQ(0, ret);
2251 	ASSERT_EQ(0, ret);
2274 	ASSERT_EQ(0, ret);
2299 	ASSERT_EQ(0, ret);
2317 	ASSERT_EQ(0, ret) {
2369 	ASSERT_EQ(0, ret) {
2425 		ASSERT_EQ(1, bits);
2496 	ASSERT_EQ(0, ret) {
2675 	ASSERT_EQ(0, prctl(PR_SET_NO_NEW_PRIVS, 1, 0, 0, 0)) {
2684 	ASSERT_EQ(0, ret) {
2699 	ASSERT_EQ(0, pthread_cond_broadcast(&self->cond)) {
2716 	ASSERT_EQ(0, prctl(PR_SET_NO_NEW_PRIVS, 1, 0, 0, 0)) {
2724 	ASSERT_EQ(0, ret) {
2737 	ASSERT_EQ(0, ret) {
2742 	ASSERT_EQ(0, pthread_cond_broadcast(&self->cond)) {
2767 	ASSERT_EQ(0, pthread_cond_broadcast(&self->cond)) {
2792 	ASSERT_EQ(0, prctl(PR_SET_NO_NEW_PRIVS, 1, 0, 0, 0)) {
2801 	ASSERT_EQ(0, ret) {
2807 	ASSERT_EQ(0, pthread_cond_broadcast(&self->cond)) {
2824 	ASSERT_EQ(0, prctl(PR_SET_NO_NEW_PRIVS, 1, 0, 0, 0)) {
2832 	ASSERT_EQ(0, ret) {
2846 	ASSERT_EQ(self->sibling[0].system_tid, ret) {
2852 	ASSERT_EQ(0, pthread_cond_broadcast(&self->cond)) {
2869 	ASSERT_EQ(0, prctl(PR_SET_NO_NEW_PRIVS, 1, 0, 0, 0)) {
2877 	ASSERT_EQ(0, ret) {
2892 	ASSERT_EQ(ESRCH, errno) {
2895 	ASSERT_EQ(-1, ret) {
2901 	ASSERT_EQ(0, pthread_cond_broadcast(&self->cond)) {
2919 	ASSERT_EQ(0, prctl(PR_SET_NO_NEW_PRIVS, 1, 0, 0, 0)) {
2942 	ASSERT_EQ(0, ret) {
2948 	ASSERT_EQ(ret, self->sibling[0].system_tid) {
2963 	ASSERT_EQ(0, pthread_cond_broadcast(&self->cond)) {
2977 	ASSERT_EQ(0, ret) {
2988 	ASSERT_EQ(0, pthread_cond_broadcast(&self->cond)) {
3000 	ASSERT_EQ(0, ret);  /* just us chickens */
3043 	ASSERT_EQ(0, pipe(pipefd));
3096 	ASSERT_EQ(child_pid, waitpid(child_pid, &status, 0));
3097 	ASSERT_EQ(true, WIFSTOPPED(status));
3098 	ASSERT_EQ(0, ptrace(PTRACE_SETOPTIONS, child_pid, NULL,
3100 	ASSERT_EQ(0, ptrace(PTRACE_CONT, child_pid, NULL, 0));
3101 	ASSERT_EQ(1, write(pipefd[1], ".", 1));
3104 	ASSERT_EQ(child_pid, waitpid(child_pid, &status, 0));
3105 	ASSERT_EQ(true, WIFSTOPPED(status));
3106 	ASSERT_EQ(SIGTRAP, WSTOPSIG(status));
3107 	ASSERT_EQ(PTRACE_EVENT_SECCOMP, (status >> 16));
3108 	ASSERT_EQ(0, ptrace(PTRACE_GETEVENTMSG, child_pid, NULL, &msg));
3109 	ASSERT_EQ(0x100, msg);
3114 	ASSERT_EQ(0, ptrace(PTRACE_GETSIGINFO, child_pid, NULL, &info));
3115 	ASSERT_EQ(SIGTRAP, info.si_signo);
3116 	ASSERT_EQ(SIGTRAP | (PTRACE_EVENT_SECCOMP << 8), info.si_code);
3123 	ASSERT_EQ(0, kill(child_pid, SIGSTOP));
3124 	ASSERT_EQ(0, ptrace(PTRACE_CONT, child_pid, NULL, 0));
3125 	ASSERT_EQ(child_pid, waitpid(child_pid, &status, 0));
3126 	ASSERT_EQ(true, WIFSTOPPED(status));
3127 	ASSERT_EQ(SIGSTOP, WSTOPSIG(status));
3128 	ASSERT_EQ(0, ptrace(PTRACE_GETSIGINFO, child_pid, NULL, &info));
3138 	ASSERT_EQ(0, kill(child_pid, SIGCONT));
3139 	ASSERT_EQ(0, ptrace(PTRACE_CONT, child_pid, NULL, 0));
3140 	ASSERT_EQ(child_pid, waitpid(child_pid, &status, 0));
3141 	ASSERT_EQ(true, WIFSTOPPED(status));
3142 	ASSERT_EQ(SIGCONT, WSTOPSIG(status));
3143 	ASSERT_EQ(0, ptrace(PTRACE_CONT, child_pid, NULL, 0));
3146 	ASSERT_EQ(child_pid, waitpid(child_pid, &status, 0));
3147 	ASSERT_EQ(true, WIFSTOPPED(status));
3148 	ASSERT_EQ(SIGTRAP, WSTOPSIG(status));
3149 	ASSERT_EQ(PTRACE_EVENT_SECCOMP, (status >> 16));
3150 	ASSERT_EQ(0, ptrace(PTRACE_GETEVENTMSG, child_pid, NULL, &msg));
3152 	ASSERT_EQ(0x200, msg);
3160 	ASSERT_EQ(0, uname(&utsbuf));
3170 	ASSERT_EQ(0, ptrace(PTRACE_CONT, child_pid, NULL, 0));
3171 	ASSERT_EQ(1, write(pipefd[1], "!", 1));
3174 	ASSERT_EQ(child_pid, waitpid(child_pid, &status, 0));
3203 	ASSERT_EQ(0, ret);
3286 	ASSERT_EQ(0, pipe(pipefd));
3305 		ASSERT_EQ(1, write(pipefd[1], "1", 1));
3306 		ASSERT_EQ(0, close(pipefd[1]));
3312 	ASSERT_EQ(0, close(pipefd[1]));
3313 	ASSERT_EQ(1, read(pipefd[0], &buf, 1));
3315 	ASSERT_EQ(0, ptrace(PTRACE_ATTACH, pid));
3316 	ASSERT_EQ(pid, waitpid(pid, NULL, 0));
3338 	ASSERT_EQ(0, kill(pid, SIGKILL));
3378 	ASSERT_EQ(0, ret) {
3472 	ASSERT_EQ(0, ret) {
3479 	ASSERT_EQ(-1, user_notif_syscall(__NR_getppid, flags));
3480 	ASSERT_EQ(EINVAL, errno);
3498 	ASSERT_EQ(0, ret) {
3550 	ASSERT_EQ(0, ret) {
3554 	ASSERT_EQ(socketpair(PF_LOCAL, SOCK_SEQPACKET, 0, sk_pair), 0);
3622 	ASSERT_EQ(0, ret) {
3658 	ASSERT_EQ(unshare(CLONE_NEWUSER | CLONE_NEWPID), 0) {
3699 	ASSERT_EQ(prctl(PR_SET_NO_NEW_PRIVS, 1, 0, 0, 0), 0) {
3711 		ASSERT_EQ(unshare(CLONE_NEWPID), 0) {
3731 	ASSERT_EQ(unshare(CLONE_NEWPID), 0) {
3737 	ASSERT_EQ(errno, 0);
3743 		ASSERT_EQ(ioctl(listener, SECCOMP_IOCTL_NOTIF_RECV, &req), 0);
3754 		ASSERT_EQ(ioctl(listener, SECCOMP_IOCTL_NOTIF_SEND, &resp), 0);
3776 	ASSERT_EQ(unshare(CLONE_NEWUSER), 0) {
3814 	ASSERT_EQ(seccomp(SECCOMP_GET_NOTIF_SIZES, 0, &sizes), 0);
3829 	ASSERT_EQ(0, ret) {
3850 		ASSERT_EQ(filecmp(self, self, pipe_fds[0], dup_fd), 0);
3917 	ASSERT_EQ(0, ret) {
3974 	ASSERT_EQ(0, ret) {
4075 	ASSERT_EQ(0, ret) {
4083 	ASSERT_EQ(listener, nextfd);
4101 	ASSERT_EQ(ioctl(listener, SECCOMP_IOCTL_NOTIF_RECV, &req), 0);
4175 	ASSERT_EQ(ioctl(listener, SECCOMP_IOCTL_NOTIF_RECV, &req), 0);
4176 	ASSERT_EQ(addfd.id, req.id);
4188 	ASSERT_EQ(filecmp(getpid(), pid, memfd, fd), 0);
4202 	ASSERT_EQ(ioctl(listener, SECCOMP_IOCTL_NOTIF_RECV, &req), 0);
4203 	ASSERT_EQ(addfd.id, req.id);
4235 	ASSERT_EQ(0, ret) {
4251 	ASSERT_EQ(ioctl(listener, SECCOMP_IOCTL_NOTIF_RECV, &req), 0);
4253 	ASSERT_EQ(prlimit(pid, RLIMIT_NOFILE, &lim, NULL), 0);
4302 	ASSERT_EQ(0, ret) {
4314 	ASSERT_EQ(ioctl(listener, SECCOMP_IOCTL_NOTIF_SET_FLAGS,
4321 		ASSERT_EQ(ret, USER_NOTIF_MAGIC) {
4328 	ASSERT_EQ(ioctl(listener, SECCOMP_IOCTL_NOTIF_RECV, &req), 0);
4330 	ASSERT_EQ(req.data.nr,  __NR_getppid);
4336 	ASSERT_EQ(ioctl(listener, SECCOMP_IOCTL_NOTIF_SEND, &resp), 0);
4338 	ASSERT_EQ(waitpid(pid, &status, 0), pid);
4339 	ASSERT_EQ(status, 0);
4359 	ASSERT_EQ(0, cap_set_flag(caps, CAP_EFFECTIVE, 1, cap_list, CAP_CLEAR));
4360 	ASSERT_EQ(0, cap_set_proc(caps));
4363 	ASSERT_EQ(0, prctl(PR_SET_NO_NEW_PRIVS, 1, 0, 0, 0));
4364 	ASSERT_EQ(0, prctl(PR_SET_SECCOMP, SECCOMP_MODE_FILTER, &prog_block_read));
4386 	ASSERT_EQ(0, ptrace(PTRACE_ATTACH, self->pid, NULL, 0));
4387 	ASSERT_EQ(self->pid, wait(&wstatus));
4388 	ASSERT_EQ(-1, ptrace(PTRACE_SETOPTIONS, self->pid, NULL, PTRACE_O_SUSPEND_SECCOMP));
4391 	ASSERT_EQ(EPERM, errno);
4399 	ASSERT_EQ(-1, ret);
4402 	ASSERT_EQ(EPERM, errno);
4449 	ASSERT_EQ(get_nth(_metadata, proc_path, 3, &line), 1);
4469 	ASSERT_EQ(0, ret) {
4572 	ASSERT_EQ(sigemptyset(&new_action.sa_mask), 0);
4575 	ASSERT_EQ(0, ret)
4580 	ASSERT_EQ(socketpair(PF_LOCAL, SOCK_SEQPACKET, 0, sk_pair), 0);
4644 	ASSERT_EQ(sigemptyset(&new_action.sa_mask), 0);
4647 	ASSERT_EQ(0, ret)
4652 	ASSERT_EQ(socketpair(PF_LOCAL, SOCK_SEQPACKET, 0, sk_pair), 0);
4719 	ASSERT_EQ(0, ret)