shaba/systemd-stable
1
1
Fork 0
mirror of https://github.com/systemd/systemd-stable.git synced 2025-02-21 13:58:00 +03:00
Code

test-execute: always use /bin/sh

Browse Source
This commit is contained in:
Yu Watanabe 2017-10-12 13:26:39 +09:00
parent d053b72bdd
commit 038a373651
8 changed files with 17 additions and 17 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
test/test-execute/exec-dynamicuser-state-dir.service
View File

@ -2,14 +2,14 @@
Description=Test DynamicUser= with StateDirectory=
[Service]
ExecStart=/usr/bin/test -w /var/lib/waldo
ExecStart=/usr/bin/test -w /var/lib/quux/pief
ExecStart=/bin/touch /var/lib/waldo/yay
ExecStart=/bin/touch /var/lib/quux/pief/yayyay
ExecStart=/usr/bin/test -f /var/lib/waldo/yay
ExecStart=/usr/bin/test -f /var/lib/quux/pief/yayyay
ExecStart=/usr/bin/test -f /var/lib/private/waldo/yay
ExecStart=/usr/bin/test -f /var/lib/private/quux/pief/yayyay
ExecStart=/bin/sh -c 'test -w /var/lib/waldo'
ExecStart=/bin/sh -c 'test -w /var/lib/quux/pief'
ExecStart=/bin/sh -c 'touch /var/lib/waldo/yay'
ExecStart=/bin/sh -c 'touch /var/lib/quux/pief/yayyay'
ExecStart=/bin/sh -c 'test -f /var/lib/waldo/yay'
ExecStart=/bin/sh -c 'test -f /var/lib/quux/pief/yayyay'
ExecStart=/bin/sh -c 'test -f /var/lib/private/waldo/yay'
ExecStart=/bin/sh -c 'test -f /var/lib/private/quux/pief/yayyay'
# Make sure that /var/lib/private/waldo is really the only writable directory besides the obvious candidates
ExecStart=/bin/sh -x -c 'test $$(find / -type d -writable 2> /dev/null | egrep -v -e \'^(/var/tmp$$|/tmp$$|/proc/|/dev/mqueue$$|/dev/shm$$)\' | sort -u | tr -d '\\\\n') = /var/lib/private/quux/pief/var/lib/private/waldo'

6
test/test-execute/exec-read-only-path-succeed.service
View File

@ -1,8 +1,8 @@
[Service]
Type=oneshot
# This should work, as we explicitly disable the effect of ReadOnlyPaths=
ExecStart=+/bin/touch /tmp/thisisasimpletest
ExecStart=+/bin/sh -c 'touch /tmp/thisisasimpletest'
# This should also work, as we do not disable the effect of ReadOnlyPaths= but invert the exit code
ExecStart=/bin/sh -x -c '! /bin/touch /tmp/thisisasimpletest'
ExecStart=+/bin/rm /tmp/thisisasimpletest
ExecStart=/bin/sh -x -c '! touch /tmp/thisisasimpletest'
ExecStart=+/bin/sh -c 'rm /tmp/thisisasimpletest'
ReadOnlyPaths=/tmp

2
test/test-execute/exec-systemcallfilter-failing.service
View File

@ -2,7 +2,7 @@
Description=Test for SystemCallFilter
[Service]
ExecStart=/bin/echo "This should not be seen"
ExecStart=/bin/sh -c 'echo "This should not be seen"'
Type=oneshot
SystemCallFilter=ioperm
SystemCallFilter=~ioperm

2
test/test-execute/exec-systemcallfilter-failing2.service
View File

@ -2,6 +2,6 @@
Description=Test for SystemCallFilter
[Service]
ExecStart=/bin/echo "This should not be seen"
ExecStart=/bin/sh -c 'echo "This should not be seen"'
Type=oneshot
SystemCallFilter=~write open execve exit_group close mmap munmap fstat DONOTEXIST

2
test/test-execute/exec-systemcallfilter-not-failing.service
View File

@ -2,7 +2,7 @@
Description=Test for SystemCallFilter
[Service]
ExecStart=/bin/echo "Foo bar"
ExecStart=/bin/sh -c 'echo "Foo bar"'
Type=oneshot
SystemCallFilter=~read write open execve ioperm
SystemCallFilter=ioctl

2
test/test-execute/exec-systemcallfilter-not-failing2.service
View File

@ -2,6 +2,6 @@
Description=Test for SystemCallFilter
[Service]
ExecStart=/bin/echo "Foo bar"
ExecStart=/bin/sh -c 'echo "Foo bar"'
Type=oneshot
SystemCallFilter=

2
test/test-execute/exec-systemcallfilter-system-user-nfsnobody.service
View File

@ -2,7 +2,7 @@
Description=Test for SystemCallFilter in system mode with User set
[Service]
ExecStart=/bin/echo "Foo bar"
ExecStart=/bin/sh -c 'echo "Foo bar"'
Type=oneshot
User=nfsnobody
SystemCallFilter=~read write open execve ioperm

2
test/test-execute/exec-systemcallfilter-system-user.service
View File

@ -2,7 +2,7 @@
Description=Test for SystemCallFilter in system mode with User set
[Service]
ExecStart=/bin/echo "Foo bar"
ExecStart=/bin/sh -c 'echo "Foo bar"'
Type=oneshot
User=nobody
SystemCallFilter=~read write open execve ioperm