summaryrefslogtreecommitdiff
path: root/sandbox/linux/services/namespace_utils_unittest.cc
diff options
context:
space:
mode:
Diffstat (limited to 'sandbox/linux/services/namespace_utils_unittest.cc')
-rw-r--r--sandbox/linux/services/namespace_utils_unittest.cc72
1 files changed, 0 insertions, 72 deletions
diff --git a/sandbox/linux/services/namespace_utils_unittest.cc b/sandbox/linux/services/namespace_utils_unittest.cc
deleted file mode 100644
index 41ed7e89a6..0000000000
--- a/sandbox/linux/services/namespace_utils_unittest.cc
+++ /dev/null
@@ -1,72 +0,0 @@
-// Copyright 2015 The Chromium Authors. All rights reserved.
-// Use of this source code is governed by a BSD-style license that can be
-// found in the LICENSE file.
-
-#include "sandbox/linux/services/namespace_utils.h"
-
-#include <errno.h>
-#include <sched.h>
-#include <sys/types.h>
-#include <sys/wait.h>
-
-#include "base/logging.h"
-#include "base/posix/eintr_wrapper.h"
-#include "base/process/launch.h"
-#include "sandbox/linux/services/credentials.h"
-#include "sandbox/linux/tests/unit_tests.h"
-#include "testing/gtest/include/gtest/gtest.h"
-
-namespace sandbox {
-
-namespace {
-
-SANDBOX_TEST(NamespaceUtils, KernelSupportsUnprivilegedNamespace) {
- const bool can_create_user_ns = Credentials::CanCreateProcessInNewUserNS();
- const bool supports_user_ns =
- NamespaceUtils::KernelSupportsUnprivilegedNamespace(CLONE_NEWUSER);
- // can_create_user_ns implies supports_user_ns, but the converse is not
- // necessarily true, as creating a user namespace can fail for various
- // reasons.
- if (can_create_user_ns) {
- SANDBOX_ASSERT(supports_user_ns);
- }
-}
-
-SANDBOX_TEST(NamespaceUtils, WriteToIdMapFile) {
- if (!Credentials::CanCreateProcessInNewUserNS()) {
- return;
- }
-
- const uid_t uid = getuid();
- const gid_t gid = getgid();
-
- const bool supports_deny_setgroups =
- NamespaceUtils::KernelSupportsDenySetgroups();
-
- const pid_t pid =
- base::ForkWithFlags(CLONE_NEWUSER | SIGCHLD, nullptr, nullptr);
- ASSERT_NE(-1, pid);
- if (pid == 0) {
- if (supports_deny_setgroups) {
- RAW_CHECK(NamespaceUtils::DenySetgroups());
- }
-
- RAW_CHECK(getuid() != uid);
- RAW_CHECK(NamespaceUtils::WriteToIdMapFile("/proc/self/uid_map", uid));
- RAW_CHECK(getuid() == uid);
-
- RAW_CHECK(getgid() != gid);
- RAW_CHECK(NamespaceUtils::WriteToIdMapFile("/proc/self/gid_map", gid));
- RAW_CHECK(getgid() == gid);
-
- _exit(0);
- }
-
- int status = 42;
- SANDBOX_ASSERT_EQ(pid, HANDLE_EINTR(waitpid(pid, &status, 0)));
- SANDBOX_ASSERT_EQ(0, status);
-}
-
-} // namespace.
-
-} // namespace sandbox.