/* * Copyright © 2019 Alexey Dobriyan * * Permission to use, copy, modify, and distribute this software for any * purpose with or without fee is hereby granted, provided that the above * copyright notice and this permission notice appear in all copies. * * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. */ /* * Test that setns(CLONE_NEWNET) points to new /proc/net content even * if old one is in dcache. * * FIXME /proc/net/unix is under CONFIG_UNIX which can be disabled. */ #undef NDEBUG #include #include #include #include #include #include #include #include #include #include #include #include static pid_t pid = -1; static void f(void) { if (pid > 0) { kill(pid, SIGTERM); } } int main(void) { int fd[2]; char _ = 0; int nsfd; atexit(f); /* Check for priviledges and syscall availability straight away. */ if (unshare(CLONE_NEWNET) == -1) { if (errno == ENOSYS || errno == EPERM) { return 4; } return 1; } /* Distinguisher between two otherwise empty net namespaces. */ if (socket(AF_UNIX, SOCK_STREAM, 0) == -1) { return 1; } if (pipe(fd) == -1) { return 1; } pid = fork(); if (pid == -1) { return 1; } if (pid == 0) { if (unshare(CLONE_NEWNET) == -1) { return 1; } if (write(fd[1], &_, 1) != 1) { return 1; } pause(); return 0; } if (read(fd[0], &_, 1) != 1) { return 1; } { char buf[64]; snprintf(buf, sizeof(buf), "/proc/%u/ns/net", pid); nsfd = open(buf, O_RDONLY); if (nsfd == -1) { return 1; } } /* Reliably pin dentry into dcache. */ (void)open("/proc/net/unix", O_RDONLY); if (setns(nsfd, CLONE_NEWNET) == -1) { return 1; } kill(pid, SIGTERM); pid = 0; { char buf[4096]; ssize_t rv; int fd; fd = open("/proc/net/unix", O_RDONLY); if (fd == -1) { return 1; } #define S "Num RefCount Protocol Flags Type St Inode Path\n" rv = read(fd, buf, sizeof(buf)); assert(rv == strlen(S)); assert(memcmp(buf, S, strlen(S)) == 0); } return 0; }