From d6c44c3d0ca4b8b639803ddccb83b9b8722f45c1 Mon Sep 17 00:00:00 2001 From: Florian Weimer Date: Tue, 28 Aug 2018 14:02:47 +0200 Subject: [PATCH] test-container: EPERM from unshare is UNSUPPORTED For example, the security policy on the Fedora build daemons results in this EPERM error. --- ChangeLog | 5 +++++ support/test-container.c | 5 +++-- 2 files changed, 8 insertions(+), 2 deletions(-) diff --git a/ChangeLog b/ChangeLog index 3995e4b536..61b12adb9e 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,3 +1,8 @@ +2018-08-28 Florian Weimer + + * support/test-container.c (main): Treat unshare failure with + EPERM as an unsupported test. + 2018-08-28 Florian Weimer [BZ #23520] diff --git a/support/test-container.c b/support/test-container.c index ce16e061e7..2e91bdf9ec 100644 --- a/support/test-container.c +++ b/support/test-container.c @@ -871,8 +871,9 @@ main (int argc, char **argv) /* The unshare here gives us our own spaces and capabilities. */ if (unshare (CLONE_NEWUSER | CLONE_NEWPID | CLONE_NEWNS) < 0) { - /* Older kernels may not support all the options. */ - if (errno == EINVAL) + /* Older kernels may not support all the options, or security + policy may block this call. */ + if (errno == EINVAL || errno == EPERM) FAIL_UNSUPPORTED ("unable to unshare user/fs: %s", strerror (errno)); else FAIL_EXIT1 ("unable to unshare user/fs: %s", strerror (errno));