blob: c5ba030a8e6a4e874dec08fa338c6134bedf4649 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
|
#include <stdio.h>
#include <stdlib.h>
#include <cap-ng.h>
#include <pthread.h>
//#define DEBUG 1
pthread_t thread1, thread2;
void *thread1_main(void *arg)
{
capng_fill(CAPNG_SELECT_BOTH);
#ifdef DEBUG
printf("thread1 filled capabilities\n");
#endif
sleep(2);
if (capng_have_capabilities(CAPNG_SELECT_CAPS) < CAPNG_FULL) {
printf("Capabilities missing when there should be some\n");
exit(1);
}
#ifdef DEBUG
printf("SUCCESS: Full capabilities reported\n");
#endif
return NULL;
}
void *thread2_main(void *arg)
{
sleep(1);
#ifdef DEBUG
printf("thread2 getting capabilities\n");
#endif
capng_get_caps_process();
if (capng_have_capabilities(CAPNG_SELECT_CAPS) != CAPNG_NONE) {
printf("Detected capabilities when there should not be any\n");
exit(1);
}
capng_clear(CAPNG_SELECT_BOTH);
#ifdef DEBUG
printf("SUCCESS: No capabilities reported\n");
#endif
return NULL;
}
int main(void)
{
printf("Testing thread separation of capabilities\n");
pthread_create(&thread1, NULL, thread1_main, NULL);
pthread_create(&thread2, NULL, thread2_main, NULL);
sleep(3);
return 0;
}
|
