Merge pull request #591 from q384566678/process-error

Implement PosixProcRlimitsTypeGenError and LinuxProcCapError

Author: liangchenye

validation/process_capabilities_fail.go

@@ -0,0 +1,25 @@
+package main
+
+import (
+	"fmt"
+	"os"
+	"runtime"
+
+	rspecs "github.com/opencontainers/runtime-spec/specs-go"
+	"github.com/opencontainers/runtime-tools/specerror"
+	"github.com/opencontainers/runtime-tools/validation/util"
+)
+
+func main() {
+	if "linux" != runtime.GOOS {
+		util.Skip("linux-specific process.capabilities test", map[string]string{"OS": runtime.GOOS})
+		os.Exit(0)
+	}
+
+	g := util.GetDefaultGenerator()
+	g.AddProcessCapabilityBounding("CAP_TEST")
+	err := util.RuntimeInsideValidate(g, nil)
+	if err == nil {
+		util.Fatal(specerror.NewError(specerror.LinuxProcCapError, fmt.Errorf("Any value which cannot be mapped to a relevant kernel interface MUST cause an error"), rspecs.Version))
+	}
+}

validation/process_rlimits_fail.go

@@ -0,0 +1,18 @@
+package main
+
+import (
+	"fmt"
+
+	rspecs "github.com/opencontainers/runtime-spec/specs-go"
+	"github.com/opencontainers/runtime-tools/specerror"
+	"github.com/opencontainers/runtime-tools/validation/util"
+)
+
+func main() {
+	g := util.GetDefaultGenerator()
+	g.AddProcessRlimits("RLIMIT_TEST", 1024, 1024)
+	err := util.RuntimeInsideValidate(g, nil)
+	if err == nil {
+		util.Fatal(specerror.NewError(specerror.PosixProcRlimitsTypeGenError, fmt.Errorf("The runtime MUST generate an error for any values which cannot be mapped to a relevant kernel interface"), rspecs.Version))
+	}
+}