t_unpriv.c revision 1.10 1 1.10 jmmv /* $NetBSD: t_unpriv.c,v 1.10 2013/03/16 05:45:37 jmmv Exp $ */
2 1.1 njoly
3 1.1 njoly /*-
4 1.1 njoly * Copyright (c) 2011 The NetBSD Foundation, Inc.
5 1.1 njoly * All rights reserved.
6 1.1 njoly *
7 1.1 njoly * Redistribution and use in source and binary forms, with or without
8 1.1 njoly * modification, are permitted provided that the following conditions
9 1.1 njoly * are met:
10 1.1 njoly * 1. Redistributions of source code must retain the above copyright
11 1.1 njoly * notice, this list of conditions and the following disclaimer.
12 1.1 njoly * 2. Redistributions in binary form must reproduce the above copyright
13 1.1 njoly * notice, this list of conditions and the following disclaimer in the
14 1.1 njoly * documentation and/or other materials provided with the distribution.
15 1.1 njoly *
16 1.1 njoly * THIS SOFTWARE IS PROVIDED BY THE NETBSD FOUNDATION, INC. AND CONTRIBUTORS
17 1.1 njoly * ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
18 1.1 njoly * TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
19 1.1 njoly * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE FOUNDATION OR CONTRIBUTORS
20 1.1 njoly * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
21 1.1 njoly * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
22 1.1 njoly * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
23 1.1 njoly * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
24 1.1 njoly * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
25 1.1 njoly * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
26 1.1 njoly * POSSIBILITY OF SUCH DAMAGE.
27 1.1 njoly */
28 1.1 njoly
29 1.9 njoly #include <sys/stat.h>
30 1.6 njoly #include <sys/time.h>
31 1.6 njoly
32 1.1 njoly #include <atf-c.h>
33 1.5 njoly #include <libgen.h>
34 1.1 njoly #include <unistd.h>
35 1.1 njoly
36 1.1 njoly #include <rump/rump_syscalls.h>
37 1.1 njoly #include <rump/rump.h>
38 1.1 njoly
39 1.1 njoly #include "../common/h_fsmacros.h"
40 1.1 njoly #include "../../h_macros.h"
41 1.1 njoly
42 1.2 njoly #define USES_OWNER \
43 1.4 njoly if (FSTYPE_MSDOS(tc)) \
44 1.1 njoly atf_tc_skip("owner not supported by file system")
45 1.1 njoly
46 1.1 njoly static void
47 1.1 njoly owner(const atf_tc_t *tc, const char *mp)
48 1.1 njoly {
49 1.1 njoly
50 1.2 njoly USES_OWNER;
51 1.1 njoly
52 1.1 njoly FSTEST_ENTER();
53 1.1 njoly
54 1.1 njoly rump_pub_lwproc_rfork(RUMP_RFCFDG);
55 1.1 njoly if (rump_sys_setuid(1) == -1)
56 1.1 njoly atf_tc_fail_errno("setuid");
57 1.10 jmmv if (FSTYPE_ZFS(tc))
58 1.10 jmmv atf_tc_expect_fail("PR kern/47656: Test known to be broken");
59 1.1 njoly if (rump_sys_chown(".", 1, -1) != -1 || errno != EPERM)
60 1.1 njoly atf_tc_fail_errno("chown");
61 1.1 njoly if (rump_sys_chmod(".", 0000) != -1 || errno != EPERM)
62 1.1 njoly atf_tc_fail_errno("chmod");
63 1.1 njoly rump_pub_lwproc_releaselwp();
64 1.1 njoly
65 1.1 njoly if (rump_sys_chown(".", 1, -1) == -1)
66 1.1 njoly atf_tc_fail_errno("chown");
67 1.1 njoly
68 1.1 njoly rump_pub_lwproc_rfork(RUMP_RFCFDG);
69 1.1 njoly if (rump_sys_setuid(1) == -1)
70 1.1 njoly atf_tc_fail_errno("setuid");
71 1.1 njoly if (rump_sys_chown(".", 1, -1) == -1)
72 1.1 njoly atf_tc_fail_errno("chown");
73 1.1 njoly if (rump_sys_chmod(".", 0000) == -1)
74 1.1 njoly atf_tc_fail_errno("chmod");
75 1.1 njoly rump_pub_lwproc_releaselwp();
76 1.1 njoly
77 1.1 njoly FSTEST_EXIT();
78 1.1 njoly }
79 1.1 njoly
80 1.5 njoly static void
81 1.5 njoly dirperms(const atf_tc_t *tc, const char *mp)
82 1.5 njoly {
83 1.5 njoly char name[] = "dir.test/file.test";
84 1.5 njoly char *dir = dirname(name);
85 1.5 njoly int fd;
86 1.5 njoly
87 1.5 njoly if (FSTYPE_SYSVBFS(tc))
88 1.5 njoly atf_tc_skip("directories not supported by file system");
89 1.5 njoly
90 1.5 njoly FSTEST_ENTER();
91 1.5 njoly
92 1.5 njoly if (rump_sys_mkdir(dir, 0777) == -1)
93 1.5 njoly atf_tc_fail_errno("mkdir");
94 1.5 njoly
95 1.5 njoly rump_pub_lwproc_rfork(RUMP_RFCFDG);
96 1.5 njoly if (rump_sys_setuid(1) == -1)
97 1.5 njoly atf_tc_fail_errno("setuid");
98 1.10 jmmv if (FSTYPE_ZFS(tc))
99 1.10 jmmv atf_tc_expect_fail("PR kern/47656: Test known to be broken");
100 1.5 njoly if (rump_sys_open(name, O_RDWR|O_CREAT, 0666) != -1 || errno != EACCES)
101 1.5 njoly atf_tc_fail_errno("open");
102 1.5 njoly rump_pub_lwproc_releaselwp();
103 1.5 njoly
104 1.5 njoly if ((fd = rump_sys_open(name, O_RDWR|O_CREAT, 0666)) == -1)
105 1.5 njoly atf_tc_fail_errno("open");
106 1.5 njoly if (rump_sys_close(fd) == -1)
107 1.5 njoly atf_tc_fail_errno("close");
108 1.5 njoly
109 1.5 njoly rump_pub_lwproc_rfork(RUMP_RFCFDG);
110 1.5 njoly if (rump_sys_setuid(1) == -1)
111 1.5 njoly atf_tc_fail_errno("setuid");
112 1.5 njoly if (rump_sys_unlink(name) != -1 || errno != EACCES)
113 1.5 njoly atf_tc_fail_errno("unlink");
114 1.5 njoly rump_pub_lwproc_releaselwp();
115 1.5 njoly
116 1.5 njoly if (rump_sys_unlink(name) == -1)
117 1.5 njoly atf_tc_fail_errno("unlink");
118 1.5 njoly
119 1.5 njoly if (rump_sys_rmdir(dir) == -1)
120 1.5 njoly atf_tc_fail_errno("rmdir");
121 1.5 njoly
122 1.5 njoly FSTEST_EXIT();
123 1.5 njoly }
124 1.1 njoly
125 1.6 njoly static void
126 1.6 njoly times(const atf_tc_t *tc, const char *mp)
127 1.6 njoly {
128 1.6 njoly const char *name = "file.test";
129 1.8 njoly int fd;
130 1.7 njoly struct timeval tmv[2];
131 1.6 njoly
132 1.6 njoly FSTEST_ENTER();
133 1.6 njoly
134 1.6 njoly if ((fd = rump_sys_open(name, O_RDWR|O_CREAT, 0666)) == -1)
135 1.6 njoly atf_tc_fail_errno("open");
136 1.6 njoly if (rump_sys_close(fd) == -1)
137 1.6 njoly atf_tc_fail_errno("close");
138 1.6 njoly
139 1.6 njoly rump_pub_lwproc_rfork(RUMP_RFCFDG);
140 1.6 njoly if (rump_sys_setuid(1) == -1)
141 1.6 njoly atf_tc_fail_errno("setuid");
142 1.10 jmmv if (FSTYPE_ZFS(tc))
143 1.10 jmmv atf_tc_expect_fail("PR kern/47656: Test known to be broken");
144 1.6 njoly if (rump_sys_utimes(name, NULL) != -1 || errno != EACCES)
145 1.6 njoly atf_tc_fail_errno("utimes");
146 1.6 njoly rump_pub_lwproc_releaselwp();
147 1.6 njoly
148 1.6 njoly if (rump_sys_utimes(name, NULL) == -1)
149 1.6 njoly atf_tc_fail_errno("utimes");
150 1.6 njoly
151 1.7 njoly rump_pub_lwproc_rfork(RUMP_RFCFDG);
152 1.7 njoly if (rump_sys_setuid(1) == -1)
153 1.7 njoly atf_tc_fail_errno("setuid");
154 1.8 njoly if (rump_sys_utimes(name, tmv) != -1 || errno != EPERM)
155 1.7 njoly atf_tc_fail_errno("utimes");
156 1.7 njoly rump_pub_lwproc_releaselwp();
157 1.7 njoly
158 1.7 njoly if (rump_sys_utimes(name, tmv) == -1)
159 1.7 njoly atf_tc_fail_errno("utimes");
160 1.7 njoly
161 1.6 njoly if (rump_sys_unlink(name) == -1)
162 1.6 njoly atf_tc_fail_errno("unlink");
163 1.6 njoly
164 1.6 njoly FSTEST_EXIT();
165 1.6 njoly }
166 1.6 njoly
167 1.9 njoly static void
168 1.9 njoly flags(const atf_tc_t *tc, const char *mp)
169 1.9 njoly {
170 1.9 njoly const char *name = "file.test";
171 1.9 njoly int fd, fflags;
172 1.9 njoly struct stat st;
173 1.9 njoly
174 1.9 njoly FSTEST_ENTER();
175 1.9 njoly
176 1.9 njoly if ((fd = rump_sys_open(name, O_RDWR|O_CREAT, 0666)) == -1)
177 1.9 njoly atf_tc_fail_errno("open");
178 1.9 njoly if (rump_sys_close(fd) == -1)
179 1.9 njoly atf_tc_fail_errno("close");
180 1.9 njoly
181 1.9 njoly if (rump_sys_stat(name, &st) == -1)
182 1.9 njoly atf_tc_fail_errno("stat");
183 1.10 jmmv if (FSTYPE_ZFS(tc))
184 1.10 jmmv atf_tc_expect_fail("PR kern/47656: Test known to be broken");
185 1.9 njoly if (rump_sys_chflags(name, st.st_flags) == -1) {
186 1.9 njoly if (errno == EOPNOTSUPP)
187 1.9 njoly atf_tc_skip("file flags not supported by file system");
188 1.9 njoly atf_tc_fail_errno("chflags");
189 1.9 njoly }
190 1.9 njoly
191 1.9 njoly fflags = st.st_flags | UF_IMMUTABLE;
192 1.9 njoly
193 1.9 njoly rump_pub_lwproc_rfork(RUMP_RFCFDG);
194 1.9 njoly if (rump_sys_setuid(1) == -1)
195 1.9 njoly atf_tc_fail_errno("setuid");
196 1.9 njoly fflags |= UF_IMMUTABLE;
197 1.9 njoly if (rump_sys_chflags(name, fflags) != -1 || errno != EPERM)
198 1.9 njoly atf_tc_fail_errno("chflags");
199 1.9 njoly rump_pub_lwproc_releaselwp();
200 1.9 njoly
201 1.9 njoly if (rump_sys_chflags(name, fflags) == -1)
202 1.9 njoly atf_tc_fail_errno("chflags");
203 1.9 njoly
204 1.9 njoly fflags &= ~UF_IMMUTABLE;
205 1.9 njoly if (rump_sys_chflags(name, fflags) == -1)
206 1.9 njoly atf_tc_fail_errno("chflags");
207 1.9 njoly
208 1.9 njoly if (rump_sys_unlink(name) == -1)
209 1.9 njoly atf_tc_fail_errno("unlink");
210 1.9 njoly
211 1.9 njoly FSTEST_EXIT();
212 1.9 njoly }
213 1.9 njoly
214 1.1 njoly ATF_TC_FSAPPLY(owner, "owner unprivileged checks");
215 1.5 njoly ATF_TC_FSAPPLY(dirperms, "directory permission checks");
216 1.6 njoly ATF_TC_FSAPPLY(times, "time set checks");
217 1.9 njoly ATF_TC_FSAPPLY(flags, "file flags checks");
218 1.1 njoly
219 1.1 njoly ATF_TP_ADD_TCS(tp)
220 1.1 njoly {
221 1.1 njoly
222 1.1 njoly ATF_TP_FSAPPLY(owner);
223 1.5 njoly ATF_TP_FSAPPLY(dirperms);
224 1.6 njoly ATF_TP_FSAPPLY(times);
225 1.9 njoly ATF_TP_FSAPPLY(flags);
226 1.1 njoly
227 1.1 njoly return atf_no_error();
228 1.1 njoly }
229