firejail/test/filters/memwrexe.exp
Topi Miettinen 59e30614ad mdwx: block memfd_create
Some profiles may need adjusting if app uses memfd_create(2) and
memory-deny-write-execute was enabled.
2019-03-05 10:14:07 +02:00

46 lines
1.1 KiB
Text
Executable file

#!/usr/bin/expect -f
# This file is part of Firejail project
# Copyright (C) 2014-2019 Firejail Authors
# License GPL v2
set timeout 10
spawn $env(SHELL)
match_max 100000
send -- "firejail --memory-deny-write-execute ./memwrexe mmap\r"
expect {
timeout {puts "TESTING ERROR 0\n";exit}
"Child process initialized"
}
expect {
timeout {puts "TESTING ERROR 1\n";exit}
"mmap successful" {puts "TESTING ERROR 2\n";exit}
"Parent is shutting down"
}
after 100
send -- "firejail --memory-deny-write-execute ./memwrexe mprotect\r"
expect {
timeout {puts "TESTING ERROR 10\n";exit}
"Child process initialized"
}
expect {
timeout {puts "TESTING ERROR 11\n";exit}
"mprotect successful" {puts "TESTING ERROR 12\n";exit}
"Parent is shutting down"
}
after 100
send -- "firejail --memory-deny-write-execute ./memwrexe memfd_create\r"
expect {
timeout {puts "TESTING ERROR 20\n";exit}
"Child process initialized"
}
expect {
timeout {puts "TESTING ERROR 21\n";exit}
"memfd_create successful" {puts "TESTING ERROR 22\n";exit}
"Parent is shutting down"
}
after 100
puts "\nall done\n"