mirror of
https://git.kernel.org/pub/scm/linux/kernel/git/chenhuacai/linux-loongson
synced 2025-09-01 23:46:45 +00:00
2a794ee613
Check that a domain is not tied to the executable file that created it. For instance, that could happen if a Landlock domain took a reference to a struct path. Move global path names to common.h and replace copy_binary() with a more generic copy_file() helper. Test coverage for security/landlock is 92.7% of 1133 lines according to gcc/gcov-14. Cc: Günther Noack <gnoack@google.com> Link: https://lore.kernel.org/r/20250108154338.1129069-23-mic@digikod.net [mic: Update date and add test coverage] Signed-off-by: Mickaël Salaün <mic@digikod.net>
43 lines
861 B
C
43 lines
861 B
C
// SPDX-License-Identifier: GPL-2.0
|
|
/*
|
|
* Write in a pipe and wait.
|
|
*
|
|
* Used by layout1.umount_sandboxer from fs_test.c
|
|
*
|
|
* Copyright © 2024-2025 Microsoft Corporation
|
|
*/
|
|
|
|
#define _GNU_SOURCE
|
|
#include <stdio.h>
|
|
#include <stdlib.h>
|
|
#include <unistd.h>
|
|
|
|
int main(int argc, char *argv[])
|
|
{
|
|
int pipe_child, pipe_parent;
|
|
char buf;
|
|
|
|
/* The first argument must be the file descriptor number of a pipe. */
|
|
if (argc != 3) {
|
|
fprintf(stderr, "Wrong number of arguments (not two)\n");
|
|
return 1;
|
|
}
|
|
|
|
pipe_child = atoi(argv[1]);
|
|
pipe_parent = atoi(argv[2]);
|
|
|
|
/* Signals that we are waiting. */
|
|
if (write(pipe_child, ".", 1) != 1) {
|
|
perror("Failed to write to first argument");
|
|
return 1;
|
|
}
|
|
|
|
/* Waits for the parent do its test. */
|
|
if (read(pipe_parent, &buf, 1) != 1) {
|
|
perror("Failed to write to the second argument");
|
|
return 1;
|
|
}
|
|
|
|
return 0;
|
|
}
|