| /*-*- Mode: C; c-basic-offset: 8; indent-tabs-mode: nil -*-*/ |
| |
| /*** |
| This file is part of systemd. |
| |
| Copyright 2010 Lennart Poettering |
| |
| systemd is free software; you can redistribute it and/or modify it |
| under the terms of the GNU Lesser General Public License as published by |
| the Free Software Foundation; either version 2.1 of the License, or |
| (at your option) any later version. |
| |
| systemd is distributed in the hope that it will be useful, but |
| WITHOUT ANY WARRANTY; without even the implied warranty of |
| MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU |
| Lesser General Public License for more details. |
| |
| You should have received a copy of the GNU Lesser General Public License |
| along with systemd; If not, see <http://www.gnu.org/licenses/>. |
| ***/ |
| |
| #include <stdlib.h> |
| #include <string.h> |
| #include <unistd.h> |
| #include <sys/mount.h> |
| #include <linux/fs.h> |
| |
| #include "namespace.h" |
| #include "execute.h" |
| #include "log.h" |
| |
| int main(int argc, char *argv[]) { |
| const char * const writable[] = { |
| "/home", |
| NULL |
| }; |
| |
| const char * const readonly[] = { |
| "/", |
| "/usr", |
| "/boot", |
| NULL |
| }; |
| |
| const char * const inaccessible[] = { |
| "/home/lennart/projects", |
| NULL |
| }; |
| |
| int r; |
| char tmp_dir[] = "/tmp/systemd-private-XXXXXX", |
| var_tmp_dir[] = "/var/tmp/systemd-private-XXXXXX"; |
| |
| assert_se(mkdtemp(tmp_dir)); |
| assert_se(mkdtemp(var_tmp_dir)); |
| |
| r = setup_namespace((char **) writable, |
| (char **) readonly, |
| (char **) inaccessible, |
| tmp_dir, |
| var_tmp_dir, |
| true, |
| 0); |
| if (r < 0) { |
| log_error("Failed to setup namespace: %s", strerror(-r)); |
| return 1; |
| } |
| |
| execl("/bin/sh", "/bin/sh", NULL); |
| log_error("execl(): %m"); |
| |
| return 1; |
| } |