github.com/coreos/rocket@v1.30.1-0.20200224141603-171c416fac02/tests/rkt_root_commands_test.go (about) 1 // Copyright 2016 The rkt Authors 2 // 3 // Licensed under the Apache License, Version 2.0 (the "License"); 4 // you may not use this file except in compliance with the License. 5 // You may obtain a copy of the License at 6 // 7 // http://www.apache.org/licenses/LICENSE-2.0 8 // 9 // Unless required by applicable law or agreed to in writing, software 10 // distributed under the License is distributed on an "AS IS" BASIS, 11 // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 12 // See the License for the specific language governing permissions and 13 // limitations under the License. 14 15 // +build host coreos src kvm 16 17 package main 18 19 import ( 20 "fmt" 21 "testing" 22 23 "github.com/rkt/rkt/tests/testutils" 24 ) 25 26 var rootRequiringCommands = []string{ 27 "enter", 28 "gc", 29 "prepare", 30 "rm", 31 "run", 32 "run-prepared", 33 } 34 35 // TestCommandsNeedRoot tests that an error is immediately returned if 36 // a subcommand that requires superuser privileges is invoked as a 37 // user without them 38 func TestCommandsNeedRoot(t *testing.T) { 39 ctx := testutils.NewRktRunCtx() 40 41 uid, gid := ctx.GetUidGidRktBinOwnerNotRoot() 42 43 defer ctx.Cleanup() 44 for _, sc := range rootRequiringCommands { 45 cmd := fmt.Sprintf("%s %s", ctx.Cmd(), sc) 46 runRktAsUidGidAndCheckOutput(t, cmd, "cannot run as unprivileged user", false, true, uid, gid) 47 } 48 }