Merge pull request #455 from pengshanyu/add_deny_sched_setattr

add deny_sched_setattr
containers · Jun 17, 2024 · 6a4c9fd · 6a4c9fd
2 parents 7cad7f8 + 8275fc7
commit 6a4c9fd
Show file tree

Hide file tree

Showing 2 changed files with 30 additions and 0 deletions.
diff --git a/tests/ffi/deny_sched_setattr/main.fmf b/tests/ffi/deny_sched_setattr/main.fmf
@@ -0,0 +1,6 @@
+summary: Test QM not allow SCHED_DEADLINE be set via sched_setattr() syscall
+test: /bin/bash ./test.sh
+duration: 10m
+tag: ffi
+framework: shell
+id: 6e0d8dd9-2106-4f57-be1b-98f443145b36
diff --git a/tests/ffi/deny_sched_setattr/test.sh b/tests/ffi/deny_sched_setattr/test.sh
@@ -0,0 +1,24 @@
+#!/bin/bash -euvx
+
+. ../common/prepare.sh
+
+export QM_HOST_REGISTRY_DIR="/var/qm/lib/containers/registry"
+export QM_REGISTRY_DIR="/var/lib/containers/registry"
+expected_result="sched_setattr failed: Operation not permitted"
+
+disk_cleanup
+prepare_test
+reload_config
+
+prepare_images
+run_container_in_qm "ffi-qm"
+
+return_from_sched_setattr=$(podman exec -it qm /bin/bash -c \
+ 'podman exec -it ffi-qm ./QM/execute_sched_setattr')
+
+if [[ "${return_from_sched_setattr}" =~ "${expected_result}" ]]; then
+ info_message "QM not allow SCHED_DEADLINE be set via sched_setattr() syscall."
+else
+ info_message "Failure: SCHED_DEADLINE can not be set via sched_setattr() syscall in QM."
+ exit 1
+fi