/
githubmirror
/
swtpm
Обзор
Документация
Войти
/
githubmirror
/
swtpm
Код
Запросы
0
Пакеты
0
Релизы
0
Аналитика
Безопасность
master
tests/test_tpm2_chroot_socket
76 строк
2 KB
Stefan Berger
swtpm: Check for good entropy source in chroot environment
19 сен 2024, 23:54
19 сен 2024, 23:54
6b1112a
Код
Авторство
О чём код?
#!/usr/bin/env bash # For the license, see the LICENSE file in the root directory. if [ "$(id -u)" -ne 0 ]; then echo "Need to be root to run this test." exit 77 fi if [ "$(uname -s)" != "Linux" ]; then # Due to using /proc/<pid>/root echo "This test only runs only Linux." exit 77 fi ROOT=${abs_top_builddir:-$(dirname "$0")/..} TESTDIR=${abs_top_testdir:=$(dirname "$0")} PID_FILE=/swtpm.pid source "${TESTDIR}/common" source "${TESTDIR}/test_common" skip_test_no_chardev "${SWTPM_EXE}" skip_test_no_tpm20 "${SWTPM_EXE}" trap "cleanup" SIGTERM EXIT function cleanup() { rm -rf "$TPMDIR" if [ -n "$PID" ]; then kill_quiet -SIGTERM "$PID" 2>/dev/null fi } PORT=65468 export TCSD_TCP_DEVICE_HOSTNAME=localhost export TCSD_TCP_DEVICE_PORT=$PORT export TCSD_USE_TCP_DEVICE=1 for OPTION in --chroot -R; do TPMDIR="$(mktemp -d)" || exit 1 mkdir "$TPMDIR/dev" mknod -m 0666 "$TPMDIR/dev/urandom" c 1 9 $SWTPM_EXE socket \ -p $PORT \ "$OPTION" "$TPMDIR" \ --tpmstate dir=/ \ --pid "file=$PID_FILE" \ --tpm2 \ --flags not-need-init \ ${SWTPM_TEST_SECCOMP_OPT:+${SWTPM_TEST_SECCOMP_OPT}} & PID=$! if wait_for_file "$TPMDIR/$PID_FILE" 3; then echo "Error: socket TPM did not write pidfile." exit 1 fi validate_pidfile "$PID" "$TPMDIR/$PID_FILE" if [ "$(readlink /proc/$PID/root)" != "$TPMDIR" ]; then echo "Test 1 failed: Unexpected chroot dir" exit 1 fi if [ ! -f "${TPMDIR}/tpm2-00.permall" ]; then echo "Missing state file" exit 1 fi echo "Test $OPTION passed" cleanup done