dumpable_linux_test.go RawHistoryFolder

1//go:build linux
2
3package app
4
5import (
6	"os"
7	"path/filepath"
8	"testing"
9
10	"github.com/stretchr/testify/assert"
11	"github.com/stretchr/testify/require"
12	"golang.org/x/sys/unix"
13)
14
15func TestDisableDumpable(t *testing.T) {
16	t.Cleanup(func() { _ = unix.Prctl(unix.PR_SET_DUMPABLE, 1, 0, 0, 0) })
17
18	require.NoError(t, disableDumpable())
19	got, err := unix.PrctlRetInt(unix.PR_GET_DUMPABLE, 0, 0, 0, 0)
20	require.NoError(t, err)
21	assert.Equal(t, 0, got)
22
23	// readFileBeneath reads secrets through /proc/self/fd/N; it must keep
24	// working once the process is non-dumpable.
25	root := t.TempDir()
26	require.NoError(t, os.WriteFile(filepath.Join(root, "secret"), []byte("value"), 0o600))
27	data, err := readFileBeneath(root, "secret")
28	require.NoError(t, err)
29	assert.Equal(t, "value", string(data))
30}