Linux Test Project
 help / color / mirror / Atom feed
From: Andrea Cervesato <andrea.cervesato@suse.de>
To: Linux Test Project <ltp@lists.linux.it>
Subject: [LTP] [PATCH STAGING v3 05/15] fchroot02: test fchroot() invalid arguments
Date: Fri, 28 Aug 2026 16:11:39 +0200	[thread overview]
Message-ID: <20260828-fchroot-v3-5-656a2b515726@suse.com> (raw)
In-Reply-To: <20260828-fchroot-v3-0-656a2b515726@suse.com>

From: Andrea Cervesato <andrea.cervesato@suse.com>

Verify the fchroot() error paths: a non-zero flags argument fails with
EINVAL before anything else, an invalid fd fails with EBADF, including
the FD_PIDFS_ROOT and FD_NSFS_ROOT sentinels, and a fd referring to a
regular file fails with ENOTDIR. All these checks happen before the
CAP_SYS_CHROOT check, so no privileges are needed.

Signed-off-by: Andrea Cervesato <andrea.cervesato@suse.com>
---
 runtest/staging                               |  1 +
 testcases/kernel/syscalls/fchroot/.gitignore  |  1 +
 testcases/kernel/syscalls/fchroot/fchroot02.c | 75 +++++++++++++++++++++++++++
 3 files changed, 77 insertions(+)

diff --git a/runtest/staging b/runtest/staging
index 733d5609a..e12230218 100644
--- a/runtest/staging
+++ b/runtest/staging
@@ -1,3 +1,4 @@
 # Tests for features that are not yet in the stable kernel ABI
 
 fchroot01 fchroot01
+fchroot02 fchroot02
diff --git a/testcases/kernel/syscalls/fchroot/.gitignore b/testcases/kernel/syscalls/fchroot/.gitignore
index 03ebdbe7a..fb3287612 100644
--- a/testcases/kernel/syscalls/fchroot/.gitignore
+++ b/testcases/kernel/syscalls/fchroot/.gitignore
@@ -1 +1,2 @@
 fchroot01
+fchroot02
diff --git a/testcases/kernel/syscalls/fchroot/fchroot02.c b/testcases/kernel/syscalls/fchroot/fchroot02.c
new file mode 100644
index 000000000..cf5bca874
--- /dev/null
+++ b/testcases/kernel/syscalls/fchroot/fchroot02.c
@@ -0,0 +1,75 @@
+// SPDX-License-Identifier: GPL-2.0-or-later
+/*
+ * Copyright (C) 2026 SUSE LLC Andrea Cervesato <andrea.cervesato@suse.com>
+ */
+
+/*\
+ * Test the :manpage:`fchroot(2)` error paths for invalid arguments:
+ *
+ * - a non-zero flags argument fails with ``EINVAL``
+ * - an invalid fd fails with ``EBADF``, including the ``FD_PIDFS_ROOT`` and
+ *   ``FD_NSFS_ROOT`` sentinels which :manpage:`fchroot(2)` does not accept
+ * - a fd referring to a regular file fails with ``ENOTDIR``
+ *
+ * All these checks happen before the ``CAP_SYS_CHROOT`` check, so the test
+ * needs no privileges.
+ */
+
+#include <fcntl.h>
+#include "tst_test.h"
+#include "lapi/fcntl.h"
+#include "lapi/syscalls.h"
+
+#define FILENAME "file.txt"
+
+static int dir_fd = -1;
+static int file_fd = -1;
+static int bad_fd = -1;
+static int failfs_root = FD_FAILFS_ROOT;
+static int pidfs_root = FD_PIDFS_ROOT;
+static int nsfs_root = FD_NSFS_ROOT;
+
+static struct tcase {
+	int *fd;
+	unsigned int flags;
+	int exp_errno;
+	const char *desc;
+} tcases[] = {
+	{&dir_fd, 1, EINVAL, "non-zero flags with a directory fd"},
+	{&failfs_root, 1, EINVAL, "non-zero flags with FD_FAILFS_ROOT"},
+	{&bad_fd, 0, EBADF, "invalid fd"},
+	{&pidfs_root, 0, EBADF, "FD_PIDFS_ROOT sentinel"},
+	{&nsfs_root, 0, EBADF, "FD_NSFS_ROOT sentinel"},
+	{&file_fd, 0, ENOTDIR, "fd referring to a regular file"},
+};
+
+static void run(unsigned int i)
+{
+	struct tcase *tc = &tcases[i];
+
+	TST_EXP_FAIL(tst_syscall(__NR_fchroot, *tc->fd, tc->flags),
+		tc->exp_errno, "fchroot() with %s", tc->desc);
+}
+
+static void setup(void)
+{
+	dir_fd = SAFE_OPEN(".", O_PATH | O_DIRECTORY);
+	file_fd = SAFE_OPEN(FILENAME, O_CREAT | O_EXCL | O_WRONLY, 0644);
+}
+
+static void cleanup(void)
+{
+	if (dir_fd != -1)
+		SAFE_CLOSE(dir_fd);
+
+	if (file_fd != -1)
+		SAFE_CLOSE(file_fd);
+}
+
+static struct tst_test test = {
+	.test = run,
+	.tcnt = ARRAY_SIZE(tcases),
+	.setup = setup,
+	.cleanup = cleanup,
+	.needs_tmpdir = 1,
+};

-- 
2.51.0


-- 
Mailing list info: https://lists.linux.it/listinfo/ltp

  parent reply	other threads:[~2026-08-28 14:13 UTC|newest]

Thread overview: 17+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2026-08-28 14:11 [LTP] [PATCH v3 00/15] fchroot: add fchroot() testing suite Andrea Cervesato
2026-08-28 14:11 ` [LTP] [PATCH v3 01/15] syscalls: add v7.3 syscall numbers Andrea Cervesato
2026-08-28 14:11 ` [LTP] [PATCH v3 02/15] syscalls: update outdated syscall entries Andrea Cervesato
2026-08-28 21:14   ` [LTP] syscalls: add v7.3 syscall numbers linuxtestproject.agent
2026-08-28 14:11 ` [LTP] [PATCH STAGING v3 03/15] lapi: fallback fchroot() parameters Andrea Cervesato
2026-08-28 14:11 ` [LTP] [PATCH STAGING v3 04/15] fchroot01: test fchroot() with a directory fd Andrea Cervesato
2026-08-28 14:11 ` Andrea Cervesato [this message]
2026-08-28 14:11 ` [LTP] [PATCH STAGING v3 06/15] fchroot03: test fchroot() permission checks Andrea Cervesato
2026-08-28 14:11 ` [LTP] [PATCH STAGING v3 07/15] fchroot04: test fchroot() into failfs as root Andrea Cervesato
2026-08-28 14:11 ` [LTP] [PATCH STAGING v3 08/15] fchroot05: test failfs root can not be referenced Andrea Cervesato
2026-08-28 14:11 ` [LTP] [PATCH STAGING v3 09/15] fchroot06: test path walks under failfs root Andrea Cervesato
2026-08-28 14:11 ` [LTP] [PATCH STAGING v3 10/15] fchroot07: test execve blocked by " Andrea Cervesato
2026-08-28 14:11 ` [LTP] [PATCH STAGING v3 11/15] fchroot09: test setns escape from " Andrea Cervesato
2026-08-28 14:11 ` [LTP] [PATCH STAGING v3 12/15] fchroot10: test failfs entry without no_new_privs Andrea Cervesato
2026-08-28 14:11 ` [LTP] [PATCH STAGING v3 13/15] fchroot11: test failfs entry with no_new_privs Andrea Cervesato
2026-08-28 14:11 ` [LTP] [PATCH STAGING v3 14/15] fchroot12: test failfs entry with shared fs_struct Andrea Cervesato
2026-08-28 14:11 ` [LTP] [PATCH STAGING v3 15/15] fchroot13: test failfs entry when chrooted Andrea Cervesato

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20260828-fchroot-v3-5-656a2b515726@suse.com \
    --to=andrea.cervesato@suse.de \
    --cc=ltp@lists.linux.it \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox