hidepid part 5

Makefile.in

@@ -251,3 +251,4 @@ test-root:
 test-overlay:
 	cd test/overlay; ./overlay.sh | grep TESTING
 
+# mount -o remount,rw,hidepid=2 /proc

test/apps-x11-xorg/firefox.exp

@@ -44,6 +44,7 @@ spawn $env(SHELL)
 send -- "firemon --seccomp\r"
 expect {
 	timeout {puts "TESTING ERROR 5\n";exit}
+	"need to be root" {puts "/proc mounted as hidepid, exiting...\n"; exit}
 	" firefox" {puts "firefox detected\n";}
 	" iceweasel" {puts "iceweasel detected\n";}
 }

test/apps-x11-xorg/icedove.exp

@@ -41,6 +41,7 @@ spawn $env(SHELL)
 send -- "firemon --seccomp\r"
 expect {
 	timeout {puts "TESTING ERROR 5\n";exit}
+	"need to be root" {puts "/proc mounted as hidepid, exiting...\n"; exit}
 	":firejail"
 }
 expect {

test/apps-x11-xorg/transmission-gtk.exp

@@ -41,6 +41,7 @@ spawn $env(SHELL)
 send -- "firemon --seccomp\r"
 expect {
 	timeout {puts "TESTING ERROR 5\n";exit}
+	"need to be root" {puts "/proc mounted as hidepid, exiting...\n"; exit}
 	":firejail"
 }
 expect {

test/apps-x11/chromium.exp

@@ -40,6 +40,7 @@ spawn $env(SHELL)
 send -- "firemon --seccomp\r"
 expect {
 	timeout {puts "TESTING ERROR 5\n";exit}
+	"need to be root" {puts "/proc mounted as hidepid, exiting...\n"; exit}
 	":firejail"
 }
 expect {

test/apps-x11/firefox.exp

@@ -44,6 +44,7 @@ spawn $env(SHELL)
 send -- "firemon --seccomp\r"
 expect {
 	timeout {puts "TESTING ERROR 5\n";exit}
+	"need to be root" {puts "/proc mounted as hidepid, exiting...\n"; exit}
 	" firefox" {puts "firefox detected\n";}
 	" iceweasel" {puts "iceweasel detected\n";}
 }

test/apps-x11/icedove.exp

@@ -41,6 +41,7 @@ spawn $env(SHELL)
 send -- "firemon --seccomp\r"
 expect {
 	timeout {puts "TESTING ERROR 5\n";exit}
+	"need to be root" {puts "/proc mounted as hidepid, exiting...\n"; exit}
 	":firejail"
 }
 expect {

test/apps-x11/transmission-gtk.exp

@@ -41,6 +41,7 @@ spawn $env(SHELL)
 send -- "firemon --seccomp\r"
 expect {
 	timeout {puts "TESTING ERROR 5\n";exit}
+	"need to be root" {puts "/proc mounted as hidepid, exiting...\n"; exit}
 	":firejail"
 }
 expect {

test/apps-x11/xterm.exp

@@ -41,6 +41,7 @@ spawn $env(SHELL)
 send -- "firemon --seccomp\r"
 expect {
 	timeout {puts "TESTING ERROR 5\n";exit}
+	"need to be root" {puts "/proc mounted as hidepid, exiting...\n"; exit}
 	":firejail"
 }
 expect {

test/apps/chromium.exp

@@ -49,6 +49,7 @@ spawn $env(SHELL)
 send -- "firemon --seccomp\r"
 expect {
 	timeout {puts "TESTING ERROR 5\n";exit}
+	"need to be root" {puts "/proc mounted as hidepid, exiting...\n"; exit}
 	":firejail chromium"
 }
 expect {

test/apps/deluge.exp

@@ -49,6 +49,7 @@ spawn $env(SHELL)
 send -- "firemon --seccomp\r"
 expect {
 	timeout {puts "TESTING ERROR 5\n";exit}
+	"need to be root" {puts "/proc mounted as hidepid, exiting...\n"; exit}
 	":firejail deluge"
 }
 expect {

test/apps/evince.exp

@@ -49,6 +49,7 @@ spawn $env(SHELL)
 send -- "firemon --seccomp\r"
 expect {
 	timeout {puts "TESTING ERROR 5\n";exit}
+	"need to be root" {puts "/proc mounted as hidepid, exiting...\n"; exit}
 	":firejail evince"
 }
 expect {

test/apps/fbreader.exp

@@ -49,6 +49,7 @@ spawn $env(SHELL)
 send -- "firemon --seccomp\r"
 expect {
 	timeout {puts "TESTING ERROR 5\n";exit}
+	"need to be root" {puts "/proc mounted as hidepid, exiting...\n"; exit}
 	":firejail fbreader"
 }
 expect {

test/apps/filezilla.exp

@@ -49,6 +49,7 @@ spawn $env(SHELL)
 send -- "firemon --seccomp\r"
 expect {
 	timeout {puts "TESTING ERROR 5\n";exit}
+	"need to be root" {puts "/proc mounted as hidepid, exiting...\n"; exit}
 	":firejail filezilla"
 }
 expect {

test/apps/firefox.exp

@@ -55,6 +55,7 @@ spawn $env(SHELL)
 send -- "firemon --seccomp\r"
 expect {
 	timeout {puts "TESTING ERROR 5\n";exit}
+	"need to be root" {puts "/proc mounted as hidepid, exiting...\n"; exit}
 	" firefox" {puts "firefox detected\n";}
 	" iceweasel" {puts "iceweasel detected\n";}
 }

test/apps/gnome-mplayer.exp

@@ -49,6 +49,7 @@ spawn $env(SHELL)
 send -- "firemon --seccomp\r"
 expect {
 	timeout {puts "TESTING ERROR 5\n";exit}
+	"need to be root" {puts "/proc mounted as hidepid, exiting...\n"; exit}
 	":firejail gnome-mplayer"
 }
 expect {

test/apps/gthumb.exp

@@ -49,6 +49,7 @@ spawn $env(SHELL)
 send -- "firemon --seccomp\r"
 expect {
 	timeout {puts "TESTING ERROR 5\n";exit}
+	"need to be root" {puts "/proc mounted as hidepid, exiting...\n"; exit}
 	":firejail gthumb"
 }
 expect {

test/apps/hexchat.exp

@@ -49,6 +49,7 @@ spawn $env(SHELL)
 send -- "firemon --seccomp\r"
 expect {
 	timeout {puts "TESTING ERROR 5\n";exit}
+	"need to be root" {puts "/proc mounted as hidepid, exiting...\n"; exit}
 	"hexchat"
 }
 expect {

test/apps/icedove.exp

@@ -49,6 +49,7 @@ spawn $env(SHELL)
 send -- "firemon --seccomp\r"
 expect {
 	timeout {puts "TESTING ERROR 5\n";exit}
+	"need to be root" {puts "/proc mounted as hidepid, exiting...\n"; exit}
 	":firejail icedove"
 }
 expect {

test/apps/midori.exp

@@ -49,6 +49,7 @@ spawn $env(SHELL)
 send -- "firemon --seccomp\r"
 expect {
 	timeout {puts "TESTING ERROR 5\n";exit}
+	"need to be root" {puts "/proc mounted as hidepid, exiting...\n"; exit}
 	":firejail midori"
 }
 expect {

test/apps/opera.exp

@@ -49,6 +49,7 @@ spawn $env(SHELL)
 send -- "firemon --seccomp\r"
 expect {
 	timeout {puts "TESTING ERROR 5\n";exit}
+	"need to be root" {puts "/proc mounted as hidepid, exiting...\n"; exit}
 	":firejail opera"
 }
 expect {

test/apps/qbittorrent.exp

@@ -49,6 +49,7 @@ spawn $env(SHELL)
 send -- "firemon --seccomp\r"
 expect {
 	timeout {puts "TESTING ERROR 5\n";exit}
+	"need to be root" {puts "/proc mounted as hidepid, exiting...\n"; exit}
 	":firejail qbittorrent"
 }
 expect {

test/apps/transmission-gtk.exp

@@ -44,6 +44,7 @@ spawn $env(SHELL)
 send -- "firemon --seccomp\r"
 expect {
 	timeout {puts "TESTING ERROR 5\n";exit}
+	"need to be root" {puts "/proc mounted as hidepid, exiting...\n"; exit}
 	":firejail transmission-gtk"
 }
 expect {

test/apps/transmission-qt.exp

@@ -49,6 +49,7 @@ spawn $env(SHELL)
 send -- "firemon --seccomp\r"
 expect {
 	timeout {puts "TESTING ERROR 5\n";exit}
+	"need to be root" {puts "/proc mounted as hidepid, exiting...\n"; exit}
 	":firejail transmission-qt"
 }
 expect {

test/apps/uget-gtk.exp

@@ -49,6 +49,7 @@ spawn $env(SHELL)
 send -- "firemon --seccomp\r"
 expect {
 	timeout {puts "TESTING ERROR 5\n";exit}
+	"need to be root" {puts "/proc mounted as hidepid, exiting...\n"; exit}
 	":firejail uget-gtk"
 }
 expect {

test/apps/vlc.exp

@@ -49,6 +49,7 @@ spawn $env(SHELL)
 send -- "firemon --seccomp\r"
 expect {
 	timeout {puts "TESTING ERROR 5\n";exit}
+	"need to be root" {puts "/proc mounted as hidepid, exiting...\n"; exit}
 	":firejail vlc"
 }
 expect {

test/apps/xchat.exp

@@ -49,6 +49,7 @@ spawn $env(SHELL)
 send -- "firemon --seccomp\r"
 expect {
 	timeout {puts "TESTING ERROR 5\n";exit}
+	"need to be root" {puts "/proc mounted as hidepid, exiting...\n"; exit}
 	" xchat"
 }
 expect {

test/utils/firemon-caps.exp

@@ -66,6 +66,7 @@ spawn $env(SHELL)
 send -- "firemon --caps\r"
 expect {
 	timeout {puts "TESTING ERROR 8.1\n";exit}
+	"need to be root" {puts "TESTING SKIP: /proc mounted as hidepid\n"; exit}
 	"bingo1"
 }
 expect {

test/utils/firemon-cgroup.exp

@@ -27,6 +27,7 @@ send --  "firemon --cgroup\r"
 sleep 4
 expect {
 	timeout {puts "TESTING ERROR 2\n";exit}
+	"need to be root" {puts "TESTING SKIP: /proc mounted as hidepid\n"; exit}
 	"name=test1"
 }
 expect {

test/utils/firemon-cpu.exp

@@ -27,6 +27,7 @@ send --  "firemon --cpu\r"
 sleep 4
 expect {
 	timeout {puts "TESTING ERROR 2\n";exit}
+	"need to be root" {puts "TESTING SKIP: /proc mounted as hidepid\n"; exit}
 	"name=test1"
 }
 expect {

test/utils/firemon-seccomp.exp

@@ -29,6 +29,7 @@ spawn $env(SHELL)
 send -- "firemon --seccomp\r"
 expect {
 	timeout {puts "TESTING ERROR 1\n";exit}
+	"need to be root" {puts "TESTING SKIP: /proc mounted as hidepid\n"; exit}
 	"bingo1"
 }
 expect {

test/utils/utils.sh

@@ -82,18 +82,18 @@ rm -f index.html*
 ./trace.exp
 rm -f index.html*
 
-echo "TESTING: firemon --seccomp (test/utils/seccomp.exp)"
-./seccomp.exp
-
-echo "TESTING: firemon --caps (test/utils/caps.exp)"
-./caps.exp
-
 echo "TESTING: top (test/utils/top.exp)"
 ./top.exp
 
 echo "TESTING: file transfer (test/utils/ls.exp)"
 ./ls.exp
 
+echo "TESTING: firemon --seccomp (test/utils/firemon-seccomp.exp)"
+./firemon-seccomp.exp
+
+echo "TESTING: firemon --caps (test/utils/firemon-caps.exp)"
+./firemon-caps.exp
+
 echo "TESTING: firemon cpu (test/utils/firemon-cpu.exp)"
 ./firemon-cpu.exp
 

todo

@@ -284,5 +284,6 @@ removable media, partitions, software RAID volumes, logical volumes, and files.
     free(dbus_path);
 }
 
+29. grsecurity - move test after "firejail --name=blablabla" in /test/apps*