validation: check for masked block, char devices, fifo

Create masked block device, char device, and fifo, to check if
they are masked as expected.

Signed-off-by: Dongsu Park <[email protected]>

Author: Dongsu Park

validation/linux_masked_paths.go

@@ -7,6 +7,7 @@ import (
 	"path/filepath"
 
 	"github.com/opencontainers/runtime-tools/validation/util"
+	"golang.org/x/sys/unix"
 )
 
 func checkMaskedPaths() error {
@@ -120,6 +121,30 @@ func checkMaskedSymlinks() error {
 	return fmt.Errorf("expected: err != nil, actual: err == nil")
 }
 
+func checkMaskedDeviceNodes(mode uint32) error {
+	g, err := util.GetDefaultGenerator()
+	if err != nil {
+		return err
+	}
+
+	maskedDevice := "/masked-device"
+
+	g.AddLinuxMaskedPaths(maskedDevice)
+	return util.RuntimeInsideValidate(g, func(path string) error {
+		testFile := filepath.Join(path, maskedDevice)
+
+		if err := unix.Mknod(testFile, mode, 0); err != nil {
+			return err
+		}
+
+		if _, err := os.Stat(testFile); err != nil && os.IsNotExist(err) {
+			return err
+		}
+
+		return nil
+	})
+}
+
 func main() {
 	if err := checkMaskedPaths(); err != nil {
 		util.Fatal(err)
@@ -132,4 +157,18 @@ func main() {
 	if err := checkMaskedSymlinks(); err != nil {
 		util.Fatal(err)
 	}
+
+	// test creation of different type of devices, i.e. block device,
+	// character device, and FIFO.
+	modes := []uint32{
+		unix.S_IFBLK | 0666,
+		unix.S_IFCHR | 0666,
+		unix.S_IFIFO | 0666,
+	}
+
+	for _, m := range modes {
+		if err := checkMaskedDeviceNodes(m); err != nil {
+			util.Fatal(err)
+		}
+	}
 }