1*053f45beSAndroid Build Coastguard Worker // SPDX-License-Identifier: GPL-2.0
2*053f45beSAndroid Build Coastguard Worker #define _GNU_SOURCE
3*053f45beSAndroid Build Coastguard Worker #include <sched.h>
4*053f45beSAndroid Build Coastguard Worker #include <unistd.h>
5*053f45beSAndroid Build Coastguard Worker #include <stdio.h>
6*053f45beSAndroid Build Coastguard Worker #include <stdlib.h>
7*053f45beSAndroid Build Coastguard Worker #include <signal.h>
8*053f45beSAndroid Build Coastguard Worker #include <errno.h>
9*053f45beSAndroid Build Coastguard Worker #include <sys/types.h>
10*053f45beSAndroid Build Coastguard Worker #include <sys/stat.h>
11*053f45beSAndroid Build Coastguard Worker #include <fcntl.h>
12*053f45beSAndroid Build Coastguard Worker #include <sys/ioctl.h>
13*053f45beSAndroid Build Coastguard Worker #include <sys/prctl.h>
14*053f45beSAndroid Build Coastguard Worker #include <sys/wait.h>
15*053f45beSAndroid Build Coastguard Worker
16*053f45beSAndroid Build Coastguard Worker #define pr_err(fmt, ...) \
17*053f45beSAndroid Build Coastguard Worker ({ \
18*053f45beSAndroid Build Coastguard Worker fprintf(stderr, "%s:%d:" fmt ": %m\n", \
19*053f45beSAndroid Build Coastguard Worker __func__, __LINE__, ##__VA_ARGS__); \
20*053f45beSAndroid Build Coastguard Worker 1; \
21*053f45beSAndroid Build Coastguard Worker })
22*053f45beSAndroid Build Coastguard Worker
23*053f45beSAndroid Build Coastguard Worker #define NSIO 0xb7
24*053f45beSAndroid Build Coastguard Worker #define NS_GET_USERNS _IO(NSIO, 0x1)
25*053f45beSAndroid Build Coastguard Worker #define NS_GET_PARENT _IO(NSIO, 0x2)
26*053f45beSAndroid Build Coastguard Worker
27*053f45beSAndroid Build Coastguard Worker #define __stack_aligned__ __attribute__((aligned(16)))
28*053f45beSAndroid Build Coastguard Worker struct cr_clone_arg {
29*053f45beSAndroid Build Coastguard Worker char stack[128] __stack_aligned__;
30*053f45beSAndroid Build Coastguard Worker char stack_ptr[];
31*053f45beSAndroid Build Coastguard Worker };
32*053f45beSAndroid Build Coastguard Worker
child(void * args)33*053f45beSAndroid Build Coastguard Worker static int child(void *args)
34*053f45beSAndroid Build Coastguard Worker {
35*053f45beSAndroid Build Coastguard Worker prctl(PR_SET_PDEATHSIG, SIGKILL);
36*053f45beSAndroid Build Coastguard Worker while (1)
37*053f45beSAndroid Build Coastguard Worker sleep(1);
38*053f45beSAndroid Build Coastguard Worker exit(0);
39*053f45beSAndroid Build Coastguard Worker }
40*053f45beSAndroid Build Coastguard Worker
main(int argc,char * argv[])41*053f45beSAndroid Build Coastguard Worker int main(int argc, char *argv[])
42*053f45beSAndroid Build Coastguard Worker {
43*053f45beSAndroid Build Coastguard Worker char *ns_strs[] = {"pid", "user"};
44*053f45beSAndroid Build Coastguard Worker char path[] = "/proc/0123456789/ns/pid";
45*053f45beSAndroid Build Coastguard Worker struct cr_clone_arg ca;
46*053f45beSAndroid Build Coastguard Worker struct stat st1, st2;
47*053f45beSAndroid Build Coastguard Worker int ns, pns, i;
48*053f45beSAndroid Build Coastguard Worker pid_t pid;
49*053f45beSAndroid Build Coastguard Worker
50*053f45beSAndroid Build Coastguard Worker pid = clone(child, ca.stack_ptr, CLONE_NEWUSER | CLONE_NEWPID | SIGCHLD, NULL);
51*053f45beSAndroid Build Coastguard Worker if (pid < 0)
52*053f45beSAndroid Build Coastguard Worker return pr_err("clone");
53*053f45beSAndroid Build Coastguard Worker
54*053f45beSAndroid Build Coastguard Worker for (i = 0; i < 2; i++) {
55*053f45beSAndroid Build Coastguard Worker snprintf(path, sizeof(path), "/proc/%d/ns/%s", pid, ns_strs[i]);
56*053f45beSAndroid Build Coastguard Worker ns = open(path, O_RDONLY);
57*053f45beSAndroid Build Coastguard Worker if (ns < 0)
58*053f45beSAndroid Build Coastguard Worker return pr_err("Unable to open %s", path);
59*053f45beSAndroid Build Coastguard Worker
60*053f45beSAndroid Build Coastguard Worker pns = ioctl(ns, NS_GET_PARENT);
61*053f45beSAndroid Build Coastguard Worker if (pns < 0)
62*053f45beSAndroid Build Coastguard Worker return pr_err("Unable to get a parent pidns");
63*053f45beSAndroid Build Coastguard Worker
64*053f45beSAndroid Build Coastguard Worker snprintf(path, sizeof(path), "/proc/self/ns/%s", ns_strs[i]);
65*053f45beSAndroid Build Coastguard Worker if (stat(path, &st2))
66*053f45beSAndroid Build Coastguard Worker return pr_err("Unable to stat %s", path);
67*053f45beSAndroid Build Coastguard Worker if (fstat(pns, &st1))
68*053f45beSAndroid Build Coastguard Worker return pr_err("Unable to stat the parent pidns");
69*053f45beSAndroid Build Coastguard Worker if (st1.st_ino != st2.st_ino)
70*053f45beSAndroid Build Coastguard Worker return pr_err("NS_GET_PARENT returned a wrong namespace");
71*053f45beSAndroid Build Coastguard Worker
72*053f45beSAndroid Build Coastguard Worker if (ioctl(pns, NS_GET_PARENT) >= 0 || errno != EPERM)
73*053f45beSAndroid Build Coastguard Worker return pr_err("Don't get EPERM");
74*053f45beSAndroid Build Coastguard Worker }
75*053f45beSAndroid Build Coastguard Worker
76*053f45beSAndroid Build Coastguard Worker kill(pid, SIGKILL);
77*053f45beSAndroid Build Coastguard Worker wait(NULL);
78*053f45beSAndroid Build Coastguard Worker return 0;
79*053f45beSAndroid Build Coastguard Worker }
80