sandboxed-api/sandboxed_api/sandbox2/testcases/CMakeLists.txt
Christian Blichmann befdb09597 Link more complex test cases dynamically
Linking glibc in fully static mode is mostly unsupported. While such binaries
can easily be produced, conflicting symbols will often make them crash at
runtime. This happens because glibc will always (try to) load some dynamically
linked libraries, even when statically linked. This includes things like the
resolver, unicode/locale handling and others.

Internally at Google, this is not a concern due to the way glibc is being built
there. But in order to make all of our tests run in the open-source version of
this code, we need to change strategy a bit.

As a rule of thumb, glibc can safely be linked statically if a program is
resonably simple and does not use any networking of locale dependent
facilities. Calling syscalls directly instead of the corresponding libc
wrappers works as well, of course.

This change adjusts linker flags and sandbox policies to be more compatible
with regular Linux distributions.

Tested:
- `ctest -R '[A-Z].*'` (all SAPI/Sandbox2 tests)
PiperOrigin-RevId: 429025901
Change-Id: I46b677d9eb61080a8fe868002a34a77de287bf2d
2022-02-16 05:59:13 -08:00

289 lines
7.7 KiB
CMake

# Copyright 2019 Google LLC
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# https://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
# sandboxed_api/sandbox2/testcases:abort
add_executable(sandbox2_testcase_abort
abort.cc
)
set_target_properties(sandbox2_testcase_abort PROPERTIES
OUTPUT_NAME abort)
add_executable(sandbox2::testcase_abort ALIAS sandbox2_testcase_abort)
target_link_libraries(sandbox2_testcase_abort PRIVATE
sapi::base
sapi::raw_logging
)
# sandboxed_api/sandbox2/testcases:add_policy_on_syscalls
add_executable(sandbox2_testcase_add_policy_on_syscalls
add_policy_on_syscalls.cc
)
add_executable(sandbox2::testcase_add_policy_on_syscalls
ALIAS sandbox2_testcase_add_policy_on_syscalls)
set_target_properties(sandbox2_testcase_add_policy_on_syscalls PROPERTIES
OUTPUT_NAME add_policy_on_syscalls
)
target_link_libraries(sandbox2_testcase_add_policy_on_syscalls PRIVATE
-static
sapi::base
)
# sandboxed_api/sandbox2/testcases:buffer
add_executable(sandbox2_testcase_buffer
buffer.cc
)
add_executable(sandbox2::testcase_buffer ALIAS sandbox2_testcase_buffer)
set_target_properties(sandbox2_testcase_buffer PROPERTIES
OUTPUT_NAME buffer
)
target_link_libraries(sandbox2_testcase_buffer PRIVATE
absl::str_format
sandbox2::buffer
sandbox2::comms
sapi::base
)
# sandboxed_api/sandbox2/testcases:ipc
add_executable(sandbox2_testcase_ipc
ipc.cc
)
set_target_properties(sandbox2_testcase_ipc PROPERTIES
OUTPUT_NAME ipc
)
add_executable(sandbox2::testcase_ipc ALIAS sandbox2_testcase_ipc)
target_link_libraries(sandbox2_testcase_ipc PRIVATE
absl::strings
sandbox2::client
sandbox2::comms
sapi::base
sapi::raw_logging
)
# sandboxed_api/sandbox2/testcases:malloc_system
add_executable(sandbox2_testcase_malloc_system
malloc.cc
)
add_executable(sandbox2::testcase_malloc_system ALIAS
sandbox2_testcase_malloc_system)
set_target_properties(sandbox2_testcase_malloc_system PROPERTIES
OUTPUT_NAME malloc_system
)
target_link_libraries(sandbox2_testcase_malloc_system PRIVATE
-static
sapi::base
)
# sandboxed_api/sandbox2/testcases:minimal_dynamic
add_executable(sandbox2_testcase_minimal_dynamic
minimal.cc
)
set_target_properties(sandbox2_testcase_minimal_dynamic PROPERTIES
OUTPUT_NAME minimal_dynamic
)
add_executable(sandbox2::testcase_minimal_dynamic ALIAS
sandbox2_testcase_minimal_dynamic)
target_link_libraries(sandbox2_testcase_minimal_dynamic PRIVATE
sapi::base
)
# sandboxed_api/sandbox2/testcases:minimal
add_executable(sandbox2_testcase_minimal
minimal.cc
)
add_executable(sandbox2::testcase_minimal ALIAS sandbox2_testcase_minimal)
set_target_properties(sandbox2_testcase_minimal PROPERTIES
OUTPUT_NAME minimal
)
target_link_libraries(sandbox2_testcase_minimal PRIVATE
-static
sapi::base
)
# sandboxed_api/sandbox2/testcases:personality
add_executable(sandbox2_testcase_personality
personality.cc
)
add_executable(sandbox2::testcase_personality ALIAS
sandbox2_testcase_personality)
set_target_properties(sandbox2_testcase_personality PROPERTIES
OUTPUT_NAME personality
)
target_link_libraries(sandbox2_testcase_personality PRIVATE
-static
sapi::base
)
# sandboxed_api/sandbox2/testcases:pidcomms
add_executable(sandbox2_testcase_pidcomms
pidcomms.cc
)
add_executable(sandbox2::testcase_pidcomms ALIAS sandbox2_testcase_pidcomms)
set_target_properties(sandbox2_testcase_pidcomms PROPERTIES
OUTPUT_NAME pidcomms
)
target_link_libraries(sandbox2_testcase_pidcomms PRIVATE
sandbox2::client
sandbox2::comms
sapi::base
sapi::raw_logging
)
# sandboxed_api/sandbox2/testcases:policy
add_executable(sandbox2_testcase_policy
policy.cc
)
add_executable(sandbox2::testcase_policy ALIAS sandbox2_testcase_policy)
set_target_properties(sandbox2_testcase_policy PROPERTIES
OUTPUT_NAME policy
)
target_link_libraries(sandbox2_testcase_policy PRIVATE
-static
sapi::base
sapi::config
)
# sandboxed_api/sandbox2/testcases:print_fds
add_executable(sandbox2_testcase_print_fds
print_fds.cc
)
add_executable(sandbox2::testcase_print_fds ALIAS sandbox2_testcase_print_fds)
set_target_properties(sandbox2_testcase_print_fds PROPERTIES
OUTPUT_NAME print_fds
)
target_link_libraries(sandbox2_testcase_print_fds PRIVATE
sapi::base
)
# sandboxed_api/sandbox2/testcases:sanitizer
add_executable(sandbox2_testcase_sanitizer
sanitizer.cc
)
add_executable(sandbox2::testcase_sanitizer ALIAS sandbox2_testcase_sanitizer)
set_target_properties(sandbox2_testcase_sanitizer PROPERTIES
OUTPUT_NAME sanitizer
)
target_link_libraries(sandbox2_testcase_sanitizer PRIVATE
sapi::base
)
# sandboxed_api/sandbox2/testcases:close_fds
add_executable(sandbox2_testcase_close_fds
close_fds.cc
)
add_executable(sandbox2::testcase_close_fds ALIAS sandbox2_testcase_close_fds)
set_target_properties(sandbox2_testcase_close_fds PROPERTIES
OUTPUT_NAME close_fds
)
target_link_libraries(sandbox2_testcase_close_fds PRIVATE
sapi::base
absl::strings
absl::flat_hash_set
glog::glog
sandbox2::sanitizer
)
# sandboxed_api/sandbox2/testcases:sleep
add_executable(sandbox2_testcase_sleep
sleep.cc
)
add_executable(sandbox2::testcase_sleep ALIAS sandbox2_testcase_sleep)
set_target_properties(sandbox2_testcase_sleep PROPERTIES
OUTPUT_NAME sleep
)
target_link_libraries(sandbox2_testcase_sleep PRIVATE
-static
sapi::base
)
# sandboxed_api/sandbox2/testcases:symbolize
add_executable(sandbox2_testcase_symbolize
symbolize.cc
)
add_executable(sandbox2::testcase_symbolize ALIAS sandbox2_testcase_symbolize)
set_target_properties(sandbox2_testcase_symbolize PROPERTIES
OUTPUT_NAME symbolize
)
target_link_libraries(sandbox2_testcase_symbolize PRIVATE
absl::core_headers
absl::strings
sapi::temp_file
sapi::strerror
sapi::base
sapi::raw_logging
)
# sandboxed_api/sandbox2/testcases:starve
add_executable(sandbox2_testcase_starve
starve.cc
)
add_executable(sandbox2::testcase_starve ALIAS sandbox2_testcase_starve)
set_target_properties(sandbox2_testcase_starve PROPERTIES
OUTPUT_NAME starve
)
target_link_libraries(sandbox2_testcase_starve PRIVATE
sapi::base
)
# sandboxed_api/sandbox2/testcases:tsync
add_executable(sandbox2_testcase_tsync
tsync.cc
)
add_executable(sandbox2::testcase_tsync ALIAS sandbox2_testcase_tsync)
set_target_properties(sandbox2_testcase_tsync PROPERTIES
OUTPUT_NAME tsync
)
target_link_libraries(sandbox2_testcase_tsync PRIVATE
sandbox2::client
sandbox2::comms
sapi::base
)
# sandboxed_api/sandbox2/testcases:hostname
add_executable(sandbox2_testcase_hostname
hostname.cc
)
add_executable(sandbox2::testcase_hostname ALIAS sandbox2_testcase_hostname)
set_target_properties(sandbox2_testcase_hostname PROPERTIES
OUTPUT_NAME hostname
)
target_link_libraries(sandbox2_testcase_hostname PRIVATE
-static
sapi::base
)
# sandboxed_api/sandbox2/testcases:limits
add_executable(sandbox2_testcase_limits
limits.cc
)
add_executable(sandbox2::testcase_limits ALIAS sandbox2_testcase_limits)
set_target_properties(sandbox2_testcase_limits PROPERTIES
OUTPUT_NAME limits
)
target_link_libraries(sandbox2_testcase_limits PRIVATE
sapi::base
)
# sandboxed_api/sandbox2/testcases:namespace
add_executable(sandbox2_testcase_namespace
namespace.cc
)
add_executable(sandbox2::testcase_namespace ALIAS sandbox2_testcase_namespace)
set_target_properties(sandbox2_testcase_namespace PROPERTIES
OUTPUT_NAME namespace
)
target_link_libraries(sandbox2_testcase_namespace PRIVATE
-static
sapi::base
)