dbus/test
Simon McVittie 6537b583f6 test/containers: Check that containers can't make new containers
We should prevent containers from trying to put a container in our
container so we can sandbox while we sandbox. The implementation doesn't
actually have any concept of nesting or layering, so that would potentially
be privilege escalation.

At the moment, this is just prevented by METHOD_FLAG_PRIVILEGED. When we
remove that flag (after we've introduced better resource limits), we can
specifically restrict this method to not be called by containers
instead. This test will make sure we do.

Signed-off-by: Simon McVittie <smcv@collabora.com>
Reviewed-by: Philip Withnall <withnall@endlessm.com>
Bug: https://bugs.freedesktop.org/show_bug.cgi?id=101354
2017-12-12 16:22:34 +00:00
..
data Remove test data in the "message builder" domain-specific language 2017-11-15 13:59:05 +00:00
integration transient-services integration test: Create the right directory 2017-04-18 12:46:18 +01:00
internals tests: Add the ability to multiply up test timeouts 2017-12-04 11:52:55 +00:00
name-test test-utils: Separate failable and non-failable functions 2017-12-04 11:52:52 +00:00
.gitignore Update .gitignore files 2015-02-03 15:40:01 +00:00
containers.c test/containers: Check that containers can't make new containers 2017-12-12 16:22:34 +00:00
corrupt.c test: Fix a couple of memory leaks in test-corrupt 2017-04-05 16:22:52 +01:00
dbus-daemon-eavesdrop.c tests: Consistently don't try to kill pid 0 2017-02-21 11:56:56 +00:00
dbus-daemon.c tests: Add the ability to multiply up test timeouts 2017-12-04 11:52:55 +00:00
dbus-test-runner Add support for installing most of the modular tests 2011-06-10 18:32:35 +01:00
fdpass.c various tests: produce better diagnostics on error 2016-08-12 10:25:06 +01:00
glib-tap-test.sh When running TAP tests, filter out trailing \r from Windows .exe 2015-10-29 05:50:27 +01:00
loopback.c tests: Use dbus_clear_connection etc. in a couple of tests 2017-07-30 08:49:22 +01:00
Makefile.am test/containers: New test 2017-12-11 15:50:31 +00:00
manual-authz.c tests: reassure clang that oom() does in fact not return 2015-02-24 11:14:02 +00:00
manual-backtrace.c manual-backtrace: use proper prototypes, and make functions static 2015-11-17 15:32:43 +00:00
manual-dir-iter.c test: Add a missing OOM path in manual-dir-iter test 2017-02-14 17:45:08 +00:00
manual-paths.c Fix function declarations 2016-10-10 15:09:28 +01:00
manual-tcp.c Add manual tcp test case. 2015-01-30 09:33:40 +01:00
marshal.c Add a common test_init() for GLib tests which prevents hanging forever 2015-02-04 17:15:36 +00:00
message.c bus: Silence most log messages when testing OOM handling 2017-11-15 12:12:23 +00:00
monitor.c tests: Use test_main_context_call_and_wait 2017-11-24 12:19:16 +00:00
relay.c tests: Add the ability to multiply up test timeouts 2017-12-04 11:52:55 +00:00
sd-activation.c tests: Use test_main_context_call_and_wait 2017-11-24 12:19:16 +00:00
shell-test.c shell-test: Don't use _dbus_get_tmpdir() 2017-02-16 16:00:14 +00:00
spawn-test.c Only redirect child processes to systemd Journal if using syslog 2016-09-30 19:36:50 +01:00
syntax.c Add a common test_init() for GLib tests which prevents hanging forever 2015-02-04 17:15:36 +00:00
tap-test.sh.in Run most tests under the TAP driver, with a simple adaptor for non-TAP tests 2015-04-16 13:06:29 +01:00
test-apparmor-activation.sh Add an integration test for AppArmor mediating activation 2016-11-28 12:11:52 +00:00
test-dbus-daemon-fork.sh test-dbus-daemon-fork: exercise closed stdin, stdout, stderr 2016-08-12 18:21:36 +01:00
test-dbus-launch-eval.sh tests: Don't exercise GetMachineId() or autolaunch if no machine ID 2017-06-08 18:30:39 +01:00
test-dbus-launch-x11.sh tests: Don't exercise GetMachineId() or autolaunch if no machine ID 2017-06-08 18:30:39 +01:00
test-exit.c Include config.h as the first thing in every .c file 2013-02-22 13:08:27 +00:00
test-names.c test-utils: Separate failable and non-failable functions 2017-12-04 11:52:52 +00:00
test-segfault.c test-segfault: mark exception_handler as NORETURN 2016-10-13 22:44:13 +01:00
test-service.c test-utils: Separate failable and non-failable functions 2017-12-04 11:52:52 +00:00
test-shell-service.c test-utils: Separate failable and non-failable functions 2017-12-04 11:52:52 +00:00
test-sleep-forever.c fix warning, use Sleep, not _sleep on windows (cherry picked from commit ea36c743ad60a2dd5c6286571d1a475903519809) 2009-11-30 12:00:14 +01:00
test-utils-glib.c tests: Add the ability to multiply up test timeouts 2017-12-04 11:52:55 +00:00
test-utils-glib.h tests: Add the ability to multiply up test timeouts 2017-12-04 11:52:55 +00:00
test-utils.c test-utils: Separate failable and non-failable functions 2017-12-04 11:52:52 +00:00
test-utils.h test-utils: Separate failable and non-failable functions 2017-12-04 11:52:52 +00:00
uid-permissions.c test/uid-permissions: Assert that AddServer is privileged 2017-12-11 15:50:31 +00:00