mirror of
https://github.com/troglobit/finit.git
synced 2026-10-15 10:29:35 +00:00
Joachim Wiberg
127049d925
The other dbus-*.sh tests drive libink's own client, so the wire format was only ever checked against the implementation that wrote it, and the broker path had no coverage at all. Every bug found in it so far was found by hand on a target. Let the dbus plugin bring up a real dbus-daemon, wait for Finit to claim org.finit, then talk to Finit with dbus-send, which shares no code with us. The privileged call is the interesting one: it can only be answered by parking the call and asking the broker who sent it. The bus reads the policy Finit installs, so a malformed org.finit.conf fails here rather than on a target. Tests no longer build --with-libsystemd. Our replacement carries the real soname but only the sd_notify() symbols, so in the test root it shadowed the libsystemd the host's libdbus-1 wants and dbus-daemon died on a missing sd_is_socket. Nothing under test needs the shared library: serv is the only consumer and it compiles sd-daemon.c straight in, which it now does regardless of the flag so notify.sh keeps testing notify:systemd either way. Staged from the host by lib/sysroot.mk like any other binary, and skipped when the host has neither program. Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
37 lines
1.3 KiB
XML
37 lines
1.3 KiB
XML
<?xml version="1.0" encoding="UTF-8"?>
|
|
<!DOCTYPE busconfig PUBLIC
|
|
"-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
|
|
"http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
|
|
<!--
|
|
The system bus configuration for the test namespace, deliberately
|
|
permissive. It lives where a stock system bus daemon looks for its
|
|
configuration, so the dbus plugin's own invocation finds it.
|
|
|
|
What is under test is Finit attaching to a broker and serving calls
|
|
routed through it, not dbus policy, so nothing here should be able
|
|
to refuse a message and make a Finit bug look like a policy denial.
|
|
Everything runs as root inside the namespace, hence no <user>.
|
|
-->
|
|
<busconfig>
|
|
<type>system</type>
|
|
|
|
<!-- Pick up the policy Finit itself ships, so a malformed
|
|
org.finit.conf fails the test rather than a target. -->
|
|
<includedir>/etc/dbus-1/system.d</includedir>
|
|
<listen>unix:path=/var/run/dbus/system_bus_socket</listen>
|
|
<auth>EXTERNAL</auth>
|
|
|
|
<policy context="default">
|
|
<allow user="*"/>
|
|
<allow own="*"/>
|
|
<allow send_type="method_call"/>
|
|
<allow send_type="signal"/>
|
|
<allow send_type="method_return"/>
|
|
<allow send_type="error"/>
|
|
<allow receive_type="method_call"/>
|
|
<allow receive_type="signal"/>
|
|
<allow receive_type="method_return"/>
|
|
<allow receive_type="error"/>
|
|
</policy>
|
|
</busconfig>
|