selftests/bpf: Fix cgroup_xattr/read_cgroupfs_xattr
cgroup_xattr/read_cgroupfs_xattr has two issues:
1. cgroup_xattr/read_cgroupfs_xattr messes up lo without creating a netns
first. This causes issue with other tests.
Fix this by using a different hook (lsm.s/file_open) and not messing
with lo.
2. cgroup_xattr/read_cgroupfs_xattr sets up cgroups without proper
mount namespaces.
Fix this by using the existing cgroup helpers. A new helper
set_cgroup_xattr() is added to set xattr on cgroup files.
Fixes: f4fba2d6d2 ("selftests/bpf: Add tests for bpf_cgroup_read_xattr")
Reported-by: Alexei Starovoitov <ast@kernel.org>
Closes: https://lore.kernel.org/bpf/CAADnVQ+iqMi2HEj_iH7hsx+XJAsqaMWqSDe4tzcGAnehFWA9Sw@mail.gmail.com/
Signed-off-by: Song Liu <song@kernel.org>
Tested-by: Eduard Zingerman <eddyz87@gmail.com>
Tested-by: Ihor Solodrai <ihor.solodrai@linux.dev>
Link: https://lore.kernel.org/r/20250627191221.765921-1-song@kernel.org
Signed-off-by: Alexei Starovoitov <ast@kernel.org>
This commit is contained in:
committed by
Alexei Starovoitov
parent
a5a7b25d75
commit
bacdf5a0e6
@@ -4,6 +4,7 @@
|
||||
#include <sys/mount.h>
|
||||
#include <sys/stat.h>
|
||||
#include <sys/types.h>
|
||||
#include <sys/xattr.h>
|
||||
#include <linux/limits.h>
|
||||
#include <stdio.h>
|
||||
#include <stdlib.h>
|
||||
@@ -318,6 +319,26 @@ int join_parent_cgroup(const char *relative_path)
|
||||
return join_cgroup_from_top(cgroup_path);
|
||||
}
|
||||
|
||||
/**
|
||||
* set_cgroup_xattr() - Set xattr on a cgroup dir
|
||||
* @relative_path: The cgroup path, relative to the workdir, to set xattr
|
||||
* @name: xattr name
|
||||
* @value: xattr value
|
||||
*
|
||||
* This function set xattr on cgroup dir.
|
||||
*
|
||||
* On success, it returns 0, otherwise on failure it returns -1.
|
||||
*/
|
||||
int set_cgroup_xattr(const char *relative_path,
|
||||
const char *name,
|
||||
const char *value)
|
||||
{
|
||||
char cgroup_path[PATH_MAX + 1];
|
||||
|
||||
format_cgroup_path(cgroup_path, relative_path);
|
||||
return setxattr(cgroup_path, name, value, strlen(value) + 1, 0);
|
||||
}
|
||||
|
||||
/**
|
||||
* __cleanup_cgroup_environment() - Delete temporary cgroups
|
||||
*
|
||||
|
||||
@@ -26,6 +26,10 @@ int join_cgroup(const char *relative_path);
|
||||
int join_root_cgroup(void);
|
||||
int join_parent_cgroup(const char *relative_path);
|
||||
|
||||
int set_cgroup_xattr(const char *relative_path,
|
||||
const char *name,
|
||||
const char *value);
|
||||
|
||||
int setup_cgroup_environment(void);
|
||||
void cleanup_cgroup_environment(void);
|
||||
|
||||
|
||||
@@ -7,133 +7,60 @@
|
||||
#include <string.h>
|
||||
#include <unistd.h>
|
||||
#include <sys/socket.h>
|
||||
#include <sys/xattr.h>
|
||||
|
||||
#include <test_progs.h>
|
||||
#include "cgroup_helpers.h"
|
||||
|
||||
#include "read_cgroupfs_xattr.skel.h"
|
||||
#include "cgroup_read_xattr.skel.h"
|
||||
|
||||
#define CGROUP_FS_ROOT "/sys/fs/cgroup/"
|
||||
#define CGROUP_FS_PARENT CGROUP_FS_ROOT "foo/"
|
||||
#define CGROUP_FS_PARENT "foo/"
|
||||
#define CGROUP_FS_CHILD CGROUP_FS_PARENT "bar/"
|
||||
|
||||
static int move_pid_to_cgroup(const char *cgroup_folder, pid_t pid)
|
||||
{
|
||||
char filename[128];
|
||||
char pid_str[64];
|
||||
int procs_fd;
|
||||
int ret;
|
||||
|
||||
snprintf(filename, sizeof(filename), "%scgroup.procs", cgroup_folder);
|
||||
snprintf(pid_str, sizeof(pid_str), "%d", pid);
|
||||
|
||||
procs_fd = open(filename, O_WRONLY | O_APPEND);
|
||||
if (!ASSERT_OK_FD(procs_fd, "open"))
|
||||
return -1;
|
||||
|
||||
ret = write(procs_fd, pid_str, strlen(pid_str));
|
||||
close(procs_fd);
|
||||
if (!ASSERT_GT(ret, 0, "write cgroup.procs"))
|
||||
return -1;
|
||||
return 0;
|
||||
}
|
||||
|
||||
static void reset_cgroups_and_lo(void)
|
||||
{
|
||||
rmdir(CGROUP_FS_CHILD);
|
||||
rmdir(CGROUP_FS_PARENT);
|
||||
system("ip addr del 1.1.1.1/32 dev lo");
|
||||
system("ip link set dev lo down");
|
||||
}
|
||||
#define TMP_FILE "/tmp/selftests_cgroup_xattr"
|
||||
|
||||
static const char xattr_value_a[] = "bpf_selftest_value_a";
|
||||
static const char xattr_value_b[] = "bpf_selftest_value_b";
|
||||
static const char xattr_name[] = "user.bpf_test";
|
||||
|
||||
static int setup_cgroups_and_lo(void)
|
||||
{
|
||||
int err;
|
||||
|
||||
err = mkdir(CGROUP_FS_PARENT, 0755);
|
||||
if (!ASSERT_OK(err, "mkdir 1"))
|
||||
goto error;
|
||||
err = mkdir(CGROUP_FS_CHILD, 0755);
|
||||
if (!ASSERT_OK(err, "mkdir 2"))
|
||||
goto error;
|
||||
|
||||
err = setxattr(CGROUP_FS_PARENT, xattr_name, xattr_value_a,
|
||||
strlen(xattr_value_a) + 1, 0);
|
||||
if (!ASSERT_OK(err, "setxattr 1"))
|
||||
goto error;
|
||||
|
||||
err = setxattr(CGROUP_FS_CHILD, xattr_name, xattr_value_b,
|
||||
strlen(xattr_value_b) + 1, 0);
|
||||
if (!ASSERT_OK(err, "setxattr 2"))
|
||||
goto error;
|
||||
|
||||
err = system("ip link set dev lo up");
|
||||
if (!ASSERT_OK(err, "lo up"))
|
||||
goto error;
|
||||
|
||||
err = system("ip addr add 1.1.1.1 dev lo");
|
||||
if (!ASSERT_OK(err, "lo addr v4"))
|
||||
goto error;
|
||||
|
||||
err = write_sysctl("/proc/sys/net/ipv4/ping_group_range", "0 0");
|
||||
if (!ASSERT_OK(err, "write_sysctl"))
|
||||
goto error;
|
||||
|
||||
return 0;
|
||||
error:
|
||||
reset_cgroups_and_lo();
|
||||
return err;
|
||||
}
|
||||
|
||||
static void test_read_cgroup_xattr(void)
|
||||
{
|
||||
struct sockaddr_in sa4 = {
|
||||
.sin_family = AF_INET,
|
||||
.sin_addr.s_addr = htonl(INADDR_LOOPBACK),
|
||||
};
|
||||
int tmp_fd, parent_cgroup_fd = -1, child_cgroup_fd = -1;
|
||||
struct read_cgroupfs_xattr *skel = NULL;
|
||||
pid_t pid = gettid();
|
||||
int sock_fd = -1;
|
||||
int connect_fd = -1;
|
||||
|
||||
if (!ASSERT_OK(setup_cgroups_and_lo(), "setup_cgroups_and_lo"))
|
||||
parent_cgroup_fd = test__join_cgroup(CGROUP_FS_PARENT);
|
||||
if (!ASSERT_OK_FD(parent_cgroup_fd, "create parent cgroup"))
|
||||
return;
|
||||
if (!ASSERT_OK(move_pid_to_cgroup(CGROUP_FS_CHILD, pid),
|
||||
"move_pid_to_cgroup"))
|
||||
if (!ASSERT_OK(set_cgroup_xattr(CGROUP_FS_PARENT, xattr_name, xattr_value_a),
|
||||
"set parent xattr"))
|
||||
goto out;
|
||||
|
||||
child_cgroup_fd = test__join_cgroup(CGROUP_FS_CHILD);
|
||||
if (!ASSERT_OK_FD(child_cgroup_fd, "create child cgroup"))
|
||||
goto out;
|
||||
if (!ASSERT_OK(set_cgroup_xattr(CGROUP_FS_CHILD, xattr_name, xattr_value_b),
|
||||
"set child xattr"))
|
||||
goto out;
|
||||
|
||||
skel = read_cgroupfs_xattr__open_and_load();
|
||||
if (!ASSERT_OK_PTR(skel, "read_cgroupfs_xattr__open_and_load"))
|
||||
goto out;
|
||||
|
||||
skel->bss->target_pid = pid;
|
||||
skel->bss->target_pid = gettid();
|
||||
|
||||
if (!ASSERT_OK(read_cgroupfs_xattr__attach(skel), "read_cgroupfs_xattr__attach"))
|
||||
goto out;
|
||||
|
||||
sock_fd = socket(AF_INET, SOCK_DGRAM, IPPROTO_ICMP);
|
||||
if (!ASSERT_OK_FD(sock_fd, "sock create"))
|
||||
goto out;
|
||||
|
||||
connect_fd = connect(sock_fd, &sa4, sizeof(sa4));
|
||||
if (!ASSERT_OK_FD(connect_fd, "connect 1"))
|
||||
goto out;
|
||||
close(connect_fd);
|
||||
tmp_fd = open(TMP_FILE, O_RDONLY | O_CREAT);
|
||||
ASSERT_OK_FD(tmp_fd, "open tmp file");
|
||||
close(tmp_fd);
|
||||
|
||||
ASSERT_TRUE(skel->bss->found_value_a, "found_value_a");
|
||||
ASSERT_TRUE(skel->bss->found_value_b, "found_value_b");
|
||||
|
||||
out:
|
||||
close(connect_fd);
|
||||
close(sock_fd);
|
||||
close(child_cgroup_fd);
|
||||
close(parent_cgroup_fd);
|
||||
read_cgroupfs_xattr__destroy(skel);
|
||||
move_pid_to_cgroup(CGROUP_FS_ROOT, pid);
|
||||
reset_cgroups_and_lo();
|
||||
unlink(TMP_FILE);
|
||||
}
|
||||
|
||||
void test_cgroup_xattr(void)
|
||||
|
||||
@@ -17,8 +17,8 @@ static const char expected_value_b[] = "bpf_selftest_value_b";
|
||||
bool found_value_a;
|
||||
bool found_value_b;
|
||||
|
||||
SEC("lsm.s/socket_connect")
|
||||
int BPF_PROG(test_socket_connect)
|
||||
SEC("lsm.s/file_open")
|
||||
int BPF_PROG(test_file_open)
|
||||
{
|
||||
u64 cgrp_id = bpf_get_current_cgroup_id();
|
||||
struct cgroup_subsys_state *css, *tmp;
|
||||
|
||||
Reference in New Issue
Block a user