7 //     https://www.apache.org/licenses/LICENSE-2.0
15 #include "sandboxed_api/sandbox2/sanitizer.h"
81 // Test that marking file descriptors as close-on-exec works.
82 TEST(SanitizerTest, TestMarkFDsAsCOE) {  in TEST()  function
83   // Open a few file descriptors in non-close-on-exec mode.  in TEST()
85   ASSERT_THAT(socketpair(AF_UNIX, SOCK_STREAM, 0, sock_fd), Ne(-1));  in TEST()
86   ASSERT_THAT(open("/dev/full", O_RDONLY), Ne(-1));  in TEST()
88   ASSERT_THAT(null_fd, Ne(-1));  in TEST()
92   ASSERT_THAT(sanitizer::MarkAllFDsAsCOEExcept(keep), sapi::IsOk());  in TEST()
94   const std::string path = GetTestSourcePath("sandbox2/testcases/sanitizer");  in TEST()
102 // Test that default sanitizer leaves only 0/1/2 and 1023 (client comms FD)
104 TEST(SanitizerTest, TestSandboxedBinary) {  in TEST()  function
105   // Open a few file descriptors in non-close-on-exec mode.  in TEST()
107   ASSERT_THAT(socketpair(AF_UNIX, SOCK_STREAM, 0, sock_fd), Ne(-1));  in TEST()
108   ASSERT_THAT(open("/dev/full", O_RDONLY), Ne(-1));  in TEST()
109   ASSERT_THAT(open("/dev/null", O_RDWR), Ne(-1));  in TEST()
111   const std::string path = GetTestSourcePath("sandbox2/testcases/sanitizer");  in TEST()
130 // Test that sanitizer::CloseAllFDsExcept() closes all file descriptors except
132 TEST(SanitizerTest, TestCloseFDs) {  in TEST()  function
133   // Open a few file descriptors in non-close-on-exec mode.  in TEST()
135   ASSERT_THAT(socketpair(AF_UNIX, SOCK_STREAM, 0, sock_fd), Ne(-1));  in TEST()
136   ASSERT_THAT(open("/dev/full", O_RDONLY), Ne(-1));  in TEST()
138   ASSERT_THAT(null_fd, Ne(-1));  in TEST()
150 TEST(SanitizerTest, TestGetProcStatusLine) {  in TEST()  function
151   // Test indirectly, GetNumberOfThreads() looks for the "Threads" value.  in TEST()
152   EXPECT_THAT(sanitizer::GetNumberOfThreads(getpid()), Gt(0));  in TEST()