1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
|
//go:build testsuite || tester
package testdata
import (
"os"
"hakurei.app/fhs"
"hakurei.app/hst"
"hakurei.app/test/internal/mountinfo"
"hakurei.app/test/internal/testsuite"
)
var _ = TestCase{
Hakurei: hst.Config{
ID: "app.hakurei.sample.tty",
Enablements: new(hst.EWayland | hst.EPipeWire | hst.EDBus | hst.EX11),
Identity: 2,
Container: &hst.ContainerConfig{
Hostname: "hakurei-sample-tty",
Filesystem: []hst.FilesystemConfigJSON{
fcLinker,
fcLib,
fcTestHelper,
},
Username: "u0_a2",
Shell: fhs.AbsUsrBin.Append("bash"),
Home: hst.AbsPrivateTmp,
Path: absTestHelper,
Args: []string{"tester", "tty"},
Flags: hst.FHostNet | hst.FHostAbstract |
hst.FTty | hst.FShareRuntime,
},
},
// 0, PresetExt | PresetDenyNS | PresetDenyDevel
Sum: sumTTY,
Env: []string{
"DBUS_SESSION_BUS_ADDRESS=unix:path=/run/user/65534/bus",
"DISPLAY=:0",
"HOME=/.hakurei",
"SHELL=/usr/bin/bash",
"TERM=xterm",
"USER=u0_a2",
"WAYLAND_DISPLAY=wayland-0",
"XDG_RUNTIME_DIR=/run/user/65534",
"XDG_SESSION_CLASS=user",
"XDG_SESSION_TYPE=wayland",
"PULSE_SERVER=unix:/run/user/65534/pulse/native",
},
FS: &testsuite.FS{Dir: dir{
".hakurei": {Mode: os.ModeDir | 0755, Dir: dir{
"test-helper": {Mode: 0755},
}},
"dev": {Mode: os.ModeDir | 0755, Dir: dir{
"core": {Mode: os.ModeSymlink | 0777},
"fd": {Mode: os.ModeSymlink | 0777},
"full": {Mode: os.ModeDevice | os.ModeCharDevice | 0666},
"mqueue": {Mode: os.ModeDir | os.ModeSticky | 0777, Dir: dir{}},
"null": {Mode: os.ModeDevice | os.ModeCharDevice | 0666, Data: new("")},
"ptmx": {Mode: os.ModeSymlink | 0777},
"pts": {Mode: os.ModeDir | 0755, Dir: dir{
"ptmx": {Mode: os.ModeDevice | os.ModeCharDevice | 0666},
}},
"random": {Mode: os.ModeDevice | os.ModeCharDevice | 0666},
"shm": {Mode: os.ModeDir | os.ModeSticky | 0777, Dir: dir{}},
"stderr": {Mode: os.ModeSymlink | 0777},
"stdin": {Mode: os.ModeSymlink | 0777},
"stdout": {Mode: os.ModeSymlink | 0777},
"tty": {Mode: os.ModeDevice | os.ModeCharDevice | 0666},
"urandom": {Mode: os.ModeDevice | os.ModeCharDevice | 0444},
"zero": {Mode: os.ModeDevice | os.ModeCharDevice | 0666},
}},
"etc": {Mode: os.ModeDir | 0755, Dir: dir{
"passwd": {Mode: 0600,
Data: new("u0_a2:x:65534:65534:Hakurei:/.hakurei:/usr/bin/bash\n")},
"group": {Mode: 0600,
Data: new("hakurei:x:65534:\n")},
}},
"lib64": {Mode: os.ModeDir | 0755, Dir: dir{
"ld-linux-x86-64.so.2": {Mode: os.ModeSymlink | 0777},
}},
"run": {Mode: os.ModeDir | 0755, Dir: dir{
"user": {Mode: os.ModeDir | 0755, Dir: dir{
"65534": {Mode: os.ModeDir | 0770, Dir: dir{
"bus": {Mode: os.ModeSocket | 0775},
"wayland-0": {Mode: os.ModeSocket | 070},
"pulse": {Mode: os.ModeDir | 0700, Dir: dir{
"native": {Mode: os.ModeSocket | 0777},
}},
}},
}},
}},
"tmp": {Mode: os.ModeDir | os.ModeSticky | 0777, Dir: dir{
".X11-unix": {Mode: os.ModeDir | 0755, Dir: dir{
"X0": {Mode: os.ModeSocket | 0775},
}},
}},
"lib": {Mode: os.ModeDir | 0755},
"proc": {Mode: os.ModeDir | 0555},
}},
Mount: []*mountinfo.Entry{
r("/sysroot", "/", "ro,nosuid,nodev,relatime", "tmpfs", "rootfs", "rw,uid=110001,gid=110001,inode64"),
r("/", "/proc", "rw,nosuid,nodev,noexec,relatime", "proc", "proc", "rw"),
r("/", "/.hakurei", "rw,nosuid,nodev,relatime", "tmpfs", "ephemeral", "rw,size=4k,mode=755,uid=110001,gid=110001,inode64"),
r("/", "/dev", "ro,nosuid,nodev,relatime", "tmpfs", "devtmpfs", "rw,mode=755,uid=110001,gid=110001,inode64"),
r("/null", "/dev/null", "rw,nosuid,noexec,relatime", "devtmpfs", "devtmpfs", ignore),
r("/zero", "/dev/zero", "rw,nosuid,noexec,relatime", "devtmpfs", "devtmpfs", ignore),
r("/full", "/dev/full", "rw,nosuid,noexec,relatime", "devtmpfs", "devtmpfs", ignore),
r("/random", "/dev/random", "rw,nosuid,noexec,relatime", "devtmpfs", "devtmpfs", ignore),
r("/urandom", "/dev/urandom", "rw,nosuid,noexec,relatime", "devtmpfs", "devtmpfs", ignore),
r("/tty", "/dev/tty", "rw,nosuid,noexec,relatime", "devtmpfs", "devtmpfs", ignore),
r("/", "/dev/pts", "rw,nosuid,noexec,relatime", "devpts", "devpts", "rw,mode=620,ptmxmode=666"),
r("/", "/dev/mqueue", "rw,nosuid,nodev,noexec,relatime", "mqueue", "mqueue", "rw"),
r("/", "/dev/shm", "rw,nosuid,nodev,relatime", "tmpfs", "ephemeral", "rw,uid=110001,gid=110001,inode64"),
r("/", "/run/user", "rw,nosuid,nodev,relatime", "tmpfs", "ephemeral", "rw,size=16384k,mode=755,uid=110001,gid=110001,inode64"),
r("/tmp/hakurei.0/runtime/2", "/run/user/65534", "rw,nosuid,nodev,relatime", "overlay", "overlay", ignore),
r("/", "/tmp", "rw,nosuid,nodev,relatime", "tmpfs", "ephemeral", "rw,uid=110001,gid=110001,inode64"),
r(ignore, "/etc/passwd", "ro,nosuid,nodev,relatime", "tmpfs", "rootfs", "rw,uid=110001,gid=110001,inode64"),
r(ignore, "/etc/group", "ro,nosuid,nodev,relatime", "tmpfs", "rootfs", "rw,uid=110001,gid=110001,inode64"),
r(ignore, "/run/user/65534/wayland-0", "ro,nosuid,nodev,relatime", "overlay", "overlay", ignore),
r("/tmp/.X11-unix", "/tmp/.X11-unix", "ro,nosuid,nodev,relatime", "overlay", "overlay", ignore),
r(ignore, "/run/user/65534/bus", "ro,nosuid,nodev,relatime", "overlay", "overlay", ignore),
r("/usr/lib", "/lib", "ro,nosuid,nodev,relatime", "overlay", "overlay", ignore),
r("/opt/test-helper/bin/tester", "/.hakurei/test-helper", "ro,nosuid,nodev,relatime", "overlay", "overlay", ignore),
r(ignore, "/run/user/65534/pulse/native", "ro,nosuid,nodev,relatime", "overlay", "overlay", ignore),
},
Seccomp: true,
TrySocket: "/tmp/.X11-unix/X0",
}.register("tty")
|
