123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152 |
- // SPDX-License-Identifier: GPL-2.0
- /* Test triggering of loading of firmware from different mount
- * namespaces. Expect firmware to be always loaded from the mount
- * namespace of PID 1. */
- #define _GNU_SOURCE
- #include <errno.h>
- #include <fcntl.h>
- #include <sched.h>
- #include <stdarg.h>
- #include <stdbool.h>
- #include <stdio.h>
- #include <stdlib.h>
- #include <string.h>
- #include <sys/mount.h>
- #include <sys/stat.h>
- #include <sys/types.h>
- #include <sys/wait.h>
- #include <unistd.h>
- #ifndef CLONE_NEWNS
- # define CLONE_NEWNS 0x00020000
- #endif
- static char *fw_path = NULL;
- static void die(char *fmt, ...)
- {
- va_list ap;
- va_start(ap, fmt);
- vfprintf(stderr, fmt, ap);
- va_end(ap);
- if (fw_path)
- unlink(fw_path);
- umount("/lib/firmware");
- exit(EXIT_FAILURE);
- }
- static void trigger_fw(const char *fw_name, const char *sys_path)
- {
- int fd;
- fd = open(sys_path, O_WRONLY);
- if (fd < 0)
- die("open failed: %s\n",
- strerror(errno));
- if (write(fd, fw_name, strlen(fw_name)) != strlen(fw_name))
- exit(EXIT_FAILURE);
- close(fd);
- }
- static void setup_fw(const char *fw_path)
- {
- int fd;
- const char fw[] = "ABCD0123";
- fd = open(fw_path, O_WRONLY | O_CREAT, 0600);
- if (fd < 0)
- die("open failed: %s\n",
- strerror(errno));
- if (write(fd, fw, sizeof(fw) -1) != sizeof(fw) -1)
- die("write failed: %s\n",
- strerror(errno));
- close(fd);
- }
- static bool test_fw_in_ns(const char *fw_name, const char *sys_path, bool block_fw_in_parent_ns)
- {
- pid_t child;
- if (block_fw_in_parent_ns)
- if (mount("test", "/lib/firmware", "tmpfs", MS_RDONLY, NULL) == -1)
- die("blocking firmware in parent ns failed\n");
- child = fork();
- if (child == -1) {
- die("fork failed: %s\n",
- strerror(errno));
- }
- if (child != 0) { /* parent */
- pid_t pid;
- int status;
- pid = waitpid(child, &status, 0);
- if (pid == -1) {
- die("waitpid failed: %s\n",
- strerror(errno));
- }
- if (pid != child) {
- die("waited for %d got %d\n",
- child, pid);
- }
- if (!WIFEXITED(status)) {
- die("child did not terminate cleanly\n");
- }
- if (block_fw_in_parent_ns)
- umount("/lib/firmware");
- return WEXITSTATUS(status) == EXIT_SUCCESS;
- }
- if (unshare(CLONE_NEWNS) != 0) {
- die("unshare(CLONE_NEWNS) failed: %s\n",
- strerror(errno));
- }
- if (mount(NULL, "/", NULL, MS_SLAVE|MS_REC, NULL) == -1)
- die("remount root in child ns failed\n");
- if (!block_fw_in_parent_ns) {
- if (mount("test", "/lib/firmware", "tmpfs", MS_RDONLY, NULL) == -1)
- die("blocking firmware in child ns failed\n");
- } else
- umount("/lib/firmware");
- trigger_fw(fw_name, sys_path);
- exit(EXIT_SUCCESS);
- }
- int main(int argc, char **argv)
- {
- const char *fw_name = "test-firmware.bin";
- char *sys_path;
- if (argc != 2)
- die("usage: %s sys_path\n", argv[0]);
- /* Mount tmpfs to /lib/firmware so we don't have to assume
- that it is writable for us.*/
- if (mount("test", "/lib/firmware", "tmpfs", 0, NULL) == -1)
- die("mounting tmpfs to /lib/firmware failed\n");
- sys_path = argv[1];
- if (asprintf(&fw_path, "/lib/firmware/%s", fw_name) < 0)
- die("error: failed to build full fw_path\n");
- setup_fw(fw_path);
- setvbuf(stdout, NULL, _IONBF, 0);
- /* Positive case: firmware in PID1 mount namespace */
- printf("Testing with firmware in parent namespace (assumed to be same file system as PID1)\n");
- if (!test_fw_in_ns(fw_name, sys_path, false))
- die("error: failed to access firmware\n");
- /* Negative case: firmware in child mount namespace, expected to fail */
- printf("Testing with firmware in child namespace\n");
- if (test_fw_in_ns(fw_name, sys_path, true))
- die("error: firmware access did not fail\n");
- unlink(fw_path);
- free(fw_path);
- umount("/lib/firmware");
- exit(EXIT_SUCCESS);
- }
|