tgINITPID, tgINITPID_PID,
tgXID, tgUTS, tgSYSINFO,
tgFEATURE, tgCANONIFY,
- tgVERIFYCAP, tgXIDTYPE,
+ tgVERIFYCAP, tgXIDTYPE, tgVERIFYPROC,
} VserverTag;
static struct {
{ "PXID", tgPXID, "returns the xid of the parent context" },
{ "CANONIFY", tgCANONIFY, "canonifies the vserver-name and removes dangerous characters" },
{ "VERIFYCAP", tgVERIFYCAP, "test if the kernel supports linux capabilities" },
+ { "VERIFYPROC", tgVERIFYPROC, "test if /proc can be read by contexts!=0" },
{ "XIDTYPE", tgXIDTYPE, "returns the type of the given XID" },
};
}
static bool
+verifyProc()
+{
+ char const *errptr;
+
+ if (!switchToWatchXid(&errptr)) {
+ perror(errptr);
+ return false;
+ }
+
+ if (access("/proc/uptime", R_OK)==-1) {
+ if (errno!=ENOENT)
+ perror("access(\"/proc/uptime\")");
+
+ return false;
+ }
+
+ return true;
+}
+
+static bool
verifyCap()
{
struct __user_cap_header_struct header;
case tgSYSINFO : return printSysInfo(buf); break;
case tgFEATURE : return testFeature(argc,argv); break;
case tgVERIFYCAP : return verifyCap() ? 0 : 1; break;
+ case tgVERIFYPROC : return verifyProc() ? 0 : 1; break;
default : {