Backport Bind mount malicious library to test unauthorized access

Bind mount the malicious library in a place accessible by the loader and not blocked by AppArmor, i.e. in place of an existing library, allowing test that AppArmor will block the malicious behavior.

https://phabricator.apertis.org/T7333

Signed-off-by: Frédéric Danis frederic.danis@collabora.com

common/common-subtree.sh

@@ -8,7 +8,16 @@ usage () {
 }
 
 branch="$(git symbolic-ref --short HEAD)"
-test -z "$branch" && branch="master"
+case "$branch" in
+	apertis/*)
+		;;
+	*)
+        # take the default remote branch if we're not on a apertis/* branch
+		branch=$(git ls-remote --symref git@gitlab.apertis.org:tests/common.git HEAD \
+		         | grep ^ref: \
+		         | sed 's,ref: refs/heads/\(.*\)\s\+HEAD,\1,')
+		;;
+esac
 
 case $1 in
 pull)