mirror of
https://github.com/veracrypt/VeraCrypt.git
synced 2026-10-21 22:02:37 +00:00
Mounir IDRASSI
632963cf85
The test compiles the requester helper code into a small harness and runs it as root on an ordinary file owned by an unprivileged user. It checks that the helper runs in a freshly executed process with a reduced environment, descriptors 0-2 on /dev/null and no other inherited descriptor, with and without close_range, including when a library is found only through LD_LIBRARY_PATH, as in the AppImage. It also checks that a failed or incomplete start is reported as a startup failure and never falls back to read-only access, and that invalid requests and a request socket whose peer is not root are refused.