runtimetest: add root filesystem validation

Signed-off-by: Ma Shimiao <mashimiao.fnst@cn.fujitsu.com>
opencontainers · May 26, 2016 · faf90f0 · faf90f0
1 parent 5130deb
commit faf90f0
Showing 1 changed file with 15 additions and 0 deletions.
diff --git a/cmd/runtimetest/main.go b/cmd/runtimetest/main.go
@@ -191,13 +191,28 @@ func validateSysctls(spec *rspec.Spec) error {
 	return nil
 }
 
+func validateRootFS(spec *rspec.Spec) error {
+	fmt.Println("validating root")
+	if spec.Root.Readonly {
+		fi, err := os.Stat("/")
+		if err != nil {
+			return err
+		}
+		if fi.Mode()&0222 != 0 {
+			return fmt.Errorf("Rootfs should be readonly")
+		}
+	}
+	return nil
+}
+
 func main() {
 	spec, err := loadSpecConfig()
 	if err != nil {
 		logrus.Fatalf("Failed to load configuration: %q", err)
 	}
 
 	validations := []validation{
+		validateRootFS,
 		validateProcess,
 		validateCapabilities,
 		validateHostname,