OpenZFS 7290 - ZFS test suite needs to control what utilities it can run

Authored by: John Wren Kennedy <john.kennedy@delphix.com>
Reviewed by: Dan Kimmel <dan.kimmel@delphix.com>
Reviewed by: Matthew Ahrens <mahrens@delphix.com>
Reviewed by: Dan McDonald <danmcd@omniti.com>
Approved by: Gordon Ross <gordon.w.ross@gmail.com>
Ported-by: Brian Behlendorf <behlendorf1@llnl.gov>
Ported-by: George Melikov <mail@gmelikov.ru>

Porting Notes:
- Utilities which aren't available under Linux have been removed.
- Because of sudo's default secure path behavior PATH must be
  explicitly reset at the top of libtest.shlib.  This avoids the
  need for all users to customize secure path on their system.
- Updated ZoL infrastructure to manage constrained path
- Updated all test cases
- Check permissions for usergroup tests
- When testing in-tree create links under bin/
- Update fault cleanup such that missing files during
  cleanup aren't fatal.
- Configure su environment with constrained path

OpenZFS-issue: https://www.illumos.org/issues/7290
OpenZFS-commit: https://github.com/openzfs/openzfs/commit/1d32ba6
Closes #5903
This commit is contained in:
John Wren Kennedy
2017-04-05 20:18:22 -04:00
committed by Brian Behlendorf
parent 7a4500a101
commit c1d9abf905
797 changed files with 8038 additions and 7458 deletions
@@ -26,7 +26,7 @@
#
#
# Copyright (c) 2013 by Delphix. All rights reserved.
# Copyright (c) 2013, 2016 by Delphix. All rights reserved.
#
. $STF_SUITE/include/libtest.shlib
@@ -38,9 +38,9 @@
#
# STRATEGY:
# 1. Create pool and file system.
# 2. Copy '/usr/bin/ls' to the ZFS file system.
# 2. Copy '$STF_PATH/ls' to the ZFS file system.
# 3. Setting exec=on on this file system.
# 4. Make sure '/usr/bin/ls' can work in this ZFS file system.
# 4. Make sure '$STF_PATH/ls' can work in this ZFS file system.
# 5. Make sure mmap which is using the PROT_EXEC calls succeed.
#
@@ -48,15 +48,15 @@ verify_runnable "both"
function cleanup
{
log_must $RM $TESTDIR/myls
log_must rm $TESTDIR/myls
}
log_assert "Setting exec=on on a filesystem, processes can be executed from " \
"this file system."
log_onexit cleanup
log_must $CP $LS $TESTDIR/myls
log_must $ZFS set exec=on $TESTPOOL/$TESTFS
log_must cp $STF_PATH/ls $TESTDIR/myls
log_must zfs set exec=on $TESTPOOL/$TESTFS
log_must $TESTDIR/myls
log_must $MMAP_EXEC $TESTDIR/myls
@@ -26,7 +26,7 @@
#
#
# Copyright (c) 2013 by Delphix. All rights reserved.
# Copyright (c) 2013, 2016 by Delphix. All rights reserved.
#
. $STF_SUITE/include/libtest.shlib
@@ -48,7 +48,7 @@ verify_runnable "both"
function cleanup
{
log_must $RM $TESTDIR/myls
log_must rm $TESTDIR/myls
}
#
@@ -75,8 +75,8 @@ log_assert "Setting exec=off on a filesystem, processes can not be executed " \
"from this file system."
log_onexit cleanup
log_must $CP $LS $TESTDIR/myls
log_must $ZFS set exec=off $TESTPOOL/$TESTFS
log_must cp /usr/bin/ls $TESTDIR/myls
log_must zfs set exec=off $TESTPOOL/$TESTFS
log_must exec_n_check 126 $TESTDIR/myls
log_must exec_n_check 13 $MMAP_EXEC $TESTDIR/myls