mirror of
https://github.com/token2/snapd.git
synced 2026-03-13 11:15:47 -07:00
48276ac105
* interfaces/apparmor/apparmor.go: add note about inverse functionality Signed-off-by: Ian Johnson <ian.johnson@canonical.com> * interfaces/shared-memory: support single wild-cards in the read/write paths This is needed for many real-world use cases of shared memory where a constant prefix is used but a random number is appended as a suffix to the actual shared memory object opened for each invocation. Also add to the spread test cases for this new feature. Signed-off-by: Ian Johnson <ian.johnson@canonical.com> * interfaces/shared-memory: adjust comment Thanks to Samuele for pointing out the confusion. Signed-off-by: Ian Johnson <ian.johnson@canonical.com>
95 lines
3.7 KiB
YAML
95 lines
3.7 KiB
YAML
summary: Ensure that the shared-memory interface works.
|
|
|
|
details: |
|
|
The shared-memory interface allows two snaps to share a POSIX shared memory
|
|
object declared in the slot of the provider snap.
|
|
|
|
prepare: |
|
|
"$TESTSTOOLS"/snaps-state install-local shm-slot
|
|
"$TESTSTOOLS"/snaps-state install-local shm-plug
|
|
|
|
execute: |
|
|
echo "When the interface is connected"
|
|
snap connect shm-plug:shmem shm-slot:shmem
|
|
snap connect shm-plug:shmem-wildcard shm-slot:shmem-wildcard
|
|
|
|
# Test writable SHM areas
|
|
|
|
echo "Verify that the slot snap can create a writable SHM, and plug can read it"
|
|
shm-slot.cmd sh -c 'echo "writable area" > /dev/shm/writable-bar'
|
|
shm-plug.cmd cat /dev/shm/writable-bar | MATCH "writable area"
|
|
|
|
shm-slot.cmd sh -c 'echo "writable area" > /dev/shm/any-writable-ANYTHING'
|
|
shm-plug.cmd cat /dev/shm/any-writable-ANYTHING | MATCH "writable area"
|
|
|
|
echo "Plug can also write to it"
|
|
shm-plug.cmd sh -c 'echo "client can also write" > /dev/shm/writable-bar'
|
|
shm-slot.cmd cat /dev/shm/writable-bar | MATCH "client can also write"
|
|
|
|
shm-plug.cmd sh -c 'echo "client can also write" > /dev/shm/any-writable-ANYTHING'
|
|
shm-slot.cmd cat /dev/shm/any-writable-ANYTHING | MATCH "client can also write"
|
|
|
|
echo "And vice-versa: plug creates, slot reads"
|
|
shm-slot.cmd rm /dev/shm/writable-bar
|
|
shm-slot.cmd rm /dev/shm/any-writable-ANYTHING
|
|
shm-plug.cmd sh -c 'echo "another test" > /dev/shm/writable-bar'
|
|
shm-slot.cmd cat /dev/shm/writable-bar | MATCH "another test"
|
|
shm-plug.cmd sh -c 'echo "another test" > /dev/shm/any-writable-OTHER-THING'
|
|
shm-slot.cmd cat /dev/shm/any-writable-OTHER-THING | MATCH "another test"
|
|
|
|
# Test read-only SHM areas
|
|
|
|
echo "Verify that the slot snap can create a readable SHM, and plug can read it"
|
|
shm-slot.cmd sh -c 'echo "read-only area" > /dev/shm/readable-foo'
|
|
shm-plug.cmd cat /dev/shm/readable-foo | MATCH "read-only area"
|
|
|
|
shm-slot.cmd sh -c 'echo "read-only area" > /dev/shm/any-readable-FOO'
|
|
shm-plug.cmd cat /dev/shm/any-readable-FOO | MATCH "read-only area"
|
|
|
|
if [ "$(snap debug confinement)" = strict ] ; then
|
|
echo "Plug cannot write to it"
|
|
if shm-plug.cmd sh -c 'echo "I cannot write this" > /dev/shm/readable-foo'; then
|
|
echo "Plug snap should not be able to write to read-only SHM area"
|
|
exit 1
|
|
fi
|
|
if shm-plug.cmd sh -c 'echo "I cannot write this" > /dev/shm/any-readable-FOO'; then
|
|
echo "Plug snap should not be able to write to read-only SHM area"
|
|
exit 1
|
|
fi
|
|
|
|
echo "Double-check that the data was not changed"
|
|
shm-slot.cmd cat /dev/shm/readable-foo | MATCH "read-only area"
|
|
shm-slot.cmd cat /dev/shm/any-readable-FOO | MATCH "read-only area"
|
|
else
|
|
echo "Skipping check on disallowed write, because of partial confinement"
|
|
fi
|
|
|
|
# cleanup
|
|
shm-slot.cmd rm /dev/shm/writable-bar /dev/shm/readable-foo /dev/shm/any-writable-OTHER-THING /dev/shm/any-readable-FOO
|
|
|
|
echo "Disconnect the interface"
|
|
snap disconnect shm-plug:shmem
|
|
snap disconnect shm-plug:shmem-wildcard
|
|
|
|
if [ "$(snap debug confinement)" = partial ] ; then
|
|
echo "Do not execute checks with disconnected plug on systems where confinement doesn't work"
|
|
exit 0
|
|
fi
|
|
|
|
echo "Neither snap should be able to access the SHM now"
|
|
if shm-slot.cmd sh -c 'echo "test1" > /dev/shm/writable-bar'; then
|
|
exit 1
|
|
fi
|
|
if shm-plug.cmd sh -c 'echo "test2" > /dev/shm/writable-bar'; then
|
|
exit 1
|
|
fi
|
|
if shm-plug.cmd cat /dev/shm/writable-bar; then
|
|
exit 1
|
|
fi
|
|
if shm-slot.cmd sh -c 'echo "test3" > /dev/shm/readable-bar'; then
|
|
exit 1
|
|
fi
|
|
if shm-plug.cmd cat /dev/shm/readable-bar; then
|
|
exit 1
|
|
fi
|