xref: /base/startup/init/test/unittest/seccomp/seccomp_unittest.cpp

164         int ret = unshare(CLONE_NEWPID);

165         if (ret) {

247         int ret = (int)syscall(__NR_mq_open, nullptr, 0);

248         if (ret < 0) {

278         int ret = syscall(__NR_setresuid, 20000, 20000, 20000);

279         if (ret == 0) {

288         int ret = syscall(__NR_setresuid, 800, 800, 800);

289         if (ret == 0) {

308         int ret = syscall(__NR_setuid, 0);

309         if (ret == 0) {

318         int ret = syscall(__NR_setuid, 2);

319         if (ret == 0) {

328         int ret = syscall(__NR_setreuid, 0, 2);

329         if (ret == 0) {

338         int ret = syscall(__NR_setreuid, 2, 0);

339         if (ret == 0) {

348         int ret = syscall(__NR_setreuid, 0, 0);

349         if (ret == 0) {

358         int ret = syscall(__NR_setreuid, 2, 2);

359         if (ret == 0) {

368         int ret = syscall(__NR_setfsuid, 0);

369         if (ret == 0) {

378         int ret = syscall(__NR_setfsuid, 2);

379         if (ret == 0) {

388         int ret = syscall(__NR_setresuid, 0, 0, 0);

389         if (ret == 0) {

398         int ret = syscall(__NR_setresuid, 2, 0, 0);

399         if (ret == 0) {

408         int ret = syscall(__NR_setresuid, 0, 2, 0);

409         if (ret == 0) {

418         int ret = syscall(__NR_setresuid, 0, 0, 2);

419         if (ret == 0) {

428         int ret = syscall(__NR_setresuid, 0, 2, 2);

429         if (ret == 0) {

438         int ret = syscall(__NR_setresuid, 2, 0, 2);

439         if (ret == 0) {

448         int ret = syscall(__NR_setresuid, 2, 2, 0);

449         if (ret == 0) {

458         int ret = syscall(__NR_setresuid, 2, 2, 2);

459         if (ret == 0) {

469         int ret = CheckSyscall(SYSTEM_SA, SYSTEM_NAME, CheckMqOpen, false);

470         EXPECT_EQ(ret, 0);

473         ret = CheckSyscall(SYSTEM_SA, SYSTEM_NAME, CheckGetpid, true);

474         EXPECT_EQ(ret, 0);

480         int ret = CheckSyscall(SYSTEM_SA, SYSTEM_NAME, CheckSetuid64ForUidFilter1, false);

481         EXPECT_EQ(ret, 0);

483         ret = CheckSyscall(SYSTEM_SA, SYSTEM_NAME, CheckSetuid64ForUidFilter2, true);

484         EXPECT_EQ(ret, 0);

486         ret = CheckSyscall(SYSTEM_SA, SYSTEM_NAME, CheckSetreuid64ForUidFilter1, false);

487         EXPECT_EQ(ret, 0);

489         ret = CheckSyscall(SYSTEM_SA, SYSTEM_NAME, CheckSetreuid64ForUidFilter2, false);

490         EXPECT_EQ(ret, 0);

492         ret = CheckSyscall(SYSTEM_SA, SYSTEM_NAME, CheckSetreuid64ForUidFilter3, false);

493         EXPECT_EQ(ret, 0);

495         ret = CheckSyscall(SYSTEM_SA, SYSTEM_NAME, CheckSetreuid64ForUidFilter4, true);

496         EXPECT_EQ(ret, 0);

498         ret = CheckSyscall(SYSTEM_SA, SYSTEM_NAME, CheckSetfsuid64ForUidFilter1, false);

499         EXPECT_EQ(ret, 0);

501         ret = CheckSyscall(SYSTEM_SA, SYSTEM_NAME, CheckSetfsuid64ForUidFilter2, true);

502         EXPECT_EQ(ret, 0);

504         ret = CheckSyscall(SYSTEM_SA, SYSTEM_NAME, CheckSetresuid64ForUidFilter1, false);

505         EXPECT_EQ(ret, 0);

507         ret = CheckSyscall(SYSTEM_SA, SYSTEM_NAME, CheckSetresuid64ForUidFilter2, false);

508         EXPECT_EQ(ret, 0);

510         ret = CheckSyscall(SYSTEM_SA, SYSTEM_NAME, CheckSetresuid64ForUidFilter3, false);

511         EXPECT_EQ(ret, 0);

513         ret = CheckSyscall(SYSTEM_SA, SYSTEM_NAME, CheckSetresuid64ForUidFilter4, false);

514         EXPECT_EQ(ret, 0);

516         ret = CheckSyscall(SYSTEM_SA, SYSTEM_NAME, CheckSetresuid64ForUidFilter5, false);

517         EXPECT_EQ(ret, 0);

519         ret = CheckSyscall(SYSTEM_SA, SYSTEM_NAME, CheckSetresuid64ForUidFilter6, false);

520         EXPECT_EQ(ret, 0);

522         ret = CheckSyscall(SYSTEM_SA, SYSTEM_NAME, CheckSetresuid64ForUidFilter7, false);

523         EXPECT_EQ(ret, 0);

525         ret = CheckSyscall(SYSTEM_SA, SYSTEM_NAME, CheckSetresuid64ForUidFilter8, true);

526         EXPECT_EQ(ret, 0);

532         int ret = CheckSyscall(INDIVIDUAL, APPSPAWN_NAME, CheckSetresuidArgsOutOfRange, false);

533         EXPECT_EQ(ret, 0);

536         ret = CheckSyscall(INDIVIDUAL, APPSPAWN_NAME, CheckSetresuidArgsInRange, true);

537         EXPECT_EQ(ret, 0);

543         int ret = CheckSyscall(APP, APP_NAME, CheckSetuid, false);

544         EXPECT_EQ(ret, 0);

547         ret = CheckSyscall(APP, APP_NAME, CheckGetpid, true);

548         EXPECT_EQ(ret, 0);

553         int ret = CheckSyscall(APP, APP_PRIVILEGE, CheckSetuid64ForUidFilter1, true);

554         EXPECT_EQ(ret, 0);

579         int ret = syscall(__NR_setuid32, 1);

580         if (ret == 0) {

589         int ret = syscall(__NR_setresuid32, 20000, 20000, 20000);

590         if (ret == 0) {

599         int ret = syscall(__NR_setresuid32, 800, 800, 800);

600         if (ret == 0) {

609         int ret = syscall(__NR_setuid32, 0);

610         if (ret == 0) {

619         int ret = syscall(__NR_setuid32, 2);

620         if (ret == 0) {

629         int ret = syscall(__NR_setuid, 0);

630         if (ret == 0) {

639         int ret = syscall(__NR_setuid, 2);

640         if (ret == 0) {

649         int ret = syscall(__NR_setreuid32, 0, 2);

650         if (ret == 0) {

659         int ret = syscall(__NR_setreuid32, 2, 0);

660         if (ret == 0) {

669         int ret = syscall(__NR_setreuid32, 0, 0);

670         if (ret == 0) {

679         int ret = syscall(__NR_setreuid32, 2, 2);

680         if (ret == 0) {

689         int ret = syscall(__NR_setreuid, 0, 2);

690         if (ret == 0) {

699         int ret = syscall(__NR_setreuid, 2, 0);

700         if (ret == 0) {

709         int ret = syscall(__NR_setreuid, 0, 0);

710         if (ret == 0) {

719         int ret = syscall(__NR_setreuid, 2, 2);

720         if (ret == 0) {

729         int ret = syscall(__NR_setfsuid32, 0);

730         if (ret == 0) {

739         int ret = syscall(__NR_setfsuid32, 2);

740         if (ret == 0) {

749         int ret = syscall(__NR_setfsuid, 0);

750         if (ret == 0) {

759         int ret = syscall(__NR_setfsuid, 2);

760         if (ret == 0) {

769         int ret = syscall(__NR_setresuid32, 0, 0, 0);

770         if (ret == 0) {

779         int ret = syscall(__NR_setresuid32, 2, 0, 0);

780         if (ret == 0) {

789         int ret = syscall(__NR_setresuid32, 0, 2, 0);

790         if (ret == 0) {

799         int ret = syscall(__NR_setresuid32, 0, 0, 2);

800         if (ret == 0) {

809         int ret = syscall(__NR_setresuid32, 0, 2, 2);

810         if (ret == 0) {

819         int ret = syscall(__NR_setresuid32, 2, 0, 2);

820         if (ret == 0) {

829         int ret = syscall(__NR_setresuid32, 2, 2, 0);

830         if (ret == 0) {

839         int ret = syscall(__NR_setresuid32, 2, 2, 2);

840         if (ret == 0) {

849         int ret = syscall(__NR_setresuid, 0, 0, 0);

850         if (ret == 0) {

859         int ret = syscall(__NR_setresuid, 2, 0, 0);

860         if (ret == 0) {

869         int ret = syscall(__NR_setresuid, 0, 2, 0);

870         if (ret == 0) {

879         int ret = syscall(__NR_setresuid, 0, 0, 2);

880         if (ret == 0) {

889         int ret = syscall(__NR_setresuid, 0, 2, 2);

890         if (ret == 0) {

899         int ret = syscall(__NR_setresuid, 2, 0, 2);

900         if (ret == 0) {

909         int ret = syscall(__NR_setresuid, 2, 2, 0);

910         if (ret == 0) {

919         int ret = syscall(__NR_setresuid, 2, 2, 2);

920         if (ret == 0) {

930         int ret = CheckSyscall(SYSTEM_SA, SYSTEM_NAME, CheckGetuid, false);

931         EXPECT_EQ(ret, 0);

934         ret = CheckSyscall(SYSTEM_SA, SYSTEM_NAME, CheckGetuid32, true);

935         EXPECT_EQ(ret, 0);

941         int ret = CheckSyscall(SYSTEM_SA, SYSTEM_NAME, CheckSetuid32ForUidFilter1, false);

942         EXPECT_EQ(ret, 0);

944         ret = CheckSyscall(SYSTEM_SA, SYSTEM_NAME, CheckSetuid32ForUidFilter2, true);

945         EXPECT_EQ(ret, 0);

947         ret = CheckSyscall(SYSTEM_SA, SYSTEM_NAME, CheckSetreuid32ForUidFilter1, false);

948         EXPECT_EQ(ret, 0);

950         ret = CheckSyscall(SYSTEM_SA, SYSTEM_NAME, CheckSetreuid32ForUidFilter2, false);

951         EXPECT_EQ(ret, 0);

953         ret = CheckSyscall(SYSTEM_SA, SYSTEM_NAME, CheckSetreuid32ForUidFilter3, false);

954         EXPECT_EQ(ret, 0);

956         ret = CheckSyscall(SYSTEM_SA, SYSTEM_NAME, CheckSetreuid32ForUidFilter4, true);

957         EXPECT_EQ(ret, 0);

959         ret = CheckSyscall(SYSTEM_SA, SYSTEM_NAME, CheckSetfsuid32ForUidFilter1, false);

960         EXPECT_EQ(ret, 0);

962         ret = CheckSyscall(SYSTEM_SA, SYSTEM_NAME, CheckSetfsuid32ForUidFilter2, true);

963         EXPECT_EQ(ret, 0);

965         ret = CheckSyscall(SYSTEM_SA, SYSTEM_NAME, CheckSetresuid32ForUidFilter1, false);

966         EXPECT_EQ(ret, 0);

968         ret = CheckSyscall(SYSTEM_SA, SYSTEM_NAME, CheckSetresuid32ForUidFilter2, false);

969         EXPECT_EQ(ret, 0);

971         ret = CheckSyscall(SYSTEM_SA, SYSTEM_NAME, CheckSetresuid32ForUidFilter3, false);

972         EXPECT_EQ(ret, 0);

974         ret = CheckSyscall(SYSTEM_SA, SYSTEM_NAME, CheckSetresuid32ForUidFilter4, false);

975         EXPECT_EQ(ret, 0);

977         ret = CheckSyscall(SYSTEM_SA, SYSTEM_NAME, CheckSetresuid32ForUidFilter5, false);

978         EXPECT_EQ(ret, 0);

980         ret = CheckSyscall(SYSTEM_SA, SYSTEM_NAME, CheckSetresuid32ForUidFilter6, false);

981         EXPECT_EQ(ret, 0);

983         ret = CheckSyscall(SYSTEM_SA, SYSTEM_NAME, CheckSetresuid32ForUidFilter7, false);

984         EXPECT_EQ(ret, 0);

986         ret = CheckSyscall(SYSTEM_SA, SYSTEM_NAME, CheckSetresuid32ForUidFilter8, true);

987         EXPECT_EQ(ret, 0);

993         int ret = CheckSyscall(SYSTEM_SA, SYSTEM_NAME, CheckSetuid16ForUidFilter1, false);

994         EXPECT_EQ(ret, 0);

996         ret = CheckSyscall(SYSTEM_SA, SYSTEM_NAME, CheckSetuid16ForUidFilter2, true);

997         EXPECT_EQ(ret, 0);

999         ret = CheckSyscall(SYSTEM_SA, SYSTEM_NAME, CheckSetreuid16ForUidFilter1, false);

1000         EXPECT_EQ(ret, 0);

1002         ret = CheckSyscall(SYSTEM_SA, SYSTEM_NAME, CheckSetreuid16ForUidFilter2, false);

1003         EXPECT_EQ(ret, 0);

1005         ret = CheckSyscall(SYSTEM_SA, SYSTEM_NAME, CheckSetreuid16ForUidFilter3, false);

1006         EXPECT_EQ(ret, 0);

1008         ret = CheckSyscall(SYSTEM_SA, SYSTEM_NAME, CheckSetreuid16ForUidFilter4, true);

1009         EXPECT_EQ(ret, 0);

1011         ret = CheckSyscall(SYSTEM_SA, SYSTEM_NAME, CheckSetfsuid16ForUidFilter1, false);

1012         EXPECT_EQ(ret, 0);

1014         ret = CheckSyscall(SYSTEM_SA, SYSTEM_NAME, CheckSetfsuid16ForUidFilter2, true);

1015         EXPECT_EQ(ret, 0);

1017         ret = CheckSyscall(SYSTEM_SA, SYSTEM_NAME, CheckSetresuid16ForUidFilter1, false);

1018         EXPECT_EQ(ret, 0);

1020         ret = CheckSyscall(SYSTEM_SA, SYSTEM_NAME, CheckSetresuid16ForUidFilter2, false);

1021         EXPECT_EQ(ret, 0);

1023         ret = CheckSyscall(SYSTEM_SA, SYSTEM_NAME, CheckSetresuid16ForUidFilter3, false);

1024         EXPECT_EQ(ret, 0);

1026         ret = CheckSyscall(SYSTEM_SA, SYSTEM_NAME, CheckSetresuid16ForUidFilter4, false);

1027         EXPECT_EQ(ret, 0);

1029         ret = CheckSyscall(SYSTEM_SA, SYSTEM_NAME, CheckSetresuid16ForUidFilter5, false);

1030         EXPECT_EQ(ret, 0);

1032         ret = CheckSyscall(SYSTEM_SA, SYSTEM_NAME, CheckSetresuid16ForUidFilter6, false);

1033         EXPECT_EQ(ret, 0);

1035         ret = CheckSyscall(SYSTEM_SA, SYSTEM_NAME, CheckSetresuid16ForUidFilter7, false);

1036         EXPECT_EQ(ret, 0);

1038         ret = CheckSyscall(SYSTEM_SA, SYSTEM_NAME, CheckSetresuid16ForUidFilter8, true);

1039         EXPECT_EQ(ret, 0);

1051         int ret = CheckSyscall(INDIVIDUAL, APPSPAWN_NAME, CheckSetresuid32ArgsOutOfRange, false);

1052         EXPECT_EQ(ret, 0);

1055         ret = CheckSyscall(INDIVIDUAL, APPSPAWN_NAME, CheckSetresuid32ArgsInRange, true);

1056         EXPECT_EQ(ret, 0);

1062         int ret = CheckSyscall(APP, APP_NAME, CheckSetuid32, false);

1063         EXPECT_EQ(ret, 0);

1066         ret = CheckSyscall(APP, APP_NAME, CheckGetuid32, true);

1067         EXPECT_EQ(ret, 0);

1073         int ret = CheckSyscall(APP, APP_PRIVILEGE, CheckSetuid32ForUidFilter1, true);

1074         EXPECT_EQ(ret, 0);

1080         int ret = CheckSyscall(APP, APP_NAME, CheckUnshare, false);

1081         EXPECT_EQ(ret, 0);

1083         ret = CheckSyscall(APP, APP_NAME, CheckSetns, false);

1084         EXPECT_EQ(ret, 0);

1086         ret = CheckSyscall(APP, APP_NAME, CheckClonePidNs, false);

1087         EXPECT_EQ(ret, 0);

1089         ret = CheckSyscall(APP, APP_NAME, CheckCloneMntNs, false);

1090         EXPECT_EQ(ret, 0);

1092         ret = CheckSyscall(APP, APP_NAME, CheckCloneCgroupNs, false);

1093         EXPECT_EQ(ret, 0);

1095         ret = CheckSyscall(APP, APP_NAME, CheckCloneIpcNs, false);

1096         EXPECT_EQ(ret, 0);

1098         ret = CheckSyscall(APP, APP_NAME, CheckCloneUserNs, false);

1099         EXPECT_EQ(ret, 0);

1101         ret = CheckSyscall(APP, APP_NAME, CheckCloneNetNs, false);

1102         EXPECT_EQ(ret, 0);

1104         ret = CheckSyscall(APP, APP_NAME, CheckCloneUtsNs, false);

1105         EXPECT_EQ(ret, 0);

Indexes created Thu Nov 07 10:32:03 CST 2024