Home | History | Annotate | Line # | Download | only in vfs
t_unpriv.c revision 1.10
      1  1.10   jmmv /*	$NetBSD: t_unpriv.c,v 1.10 2013/03/16 05:45:37 jmmv Exp $	*/
      2   1.1  njoly 
      3   1.1  njoly /*-
      4   1.1  njoly  * Copyright (c) 2011 The NetBSD Foundation, Inc.
      5   1.1  njoly  * All rights reserved.
      6   1.1  njoly  *
      7   1.1  njoly  * Redistribution and use in source and binary forms, with or without
      8   1.1  njoly  * modification, are permitted provided that the following conditions
      9   1.1  njoly  * are met:
     10   1.1  njoly  * 1. Redistributions of source code must retain the above copyright
     11   1.1  njoly  *    notice, this list of conditions and the following disclaimer.
     12   1.1  njoly  * 2. Redistributions in binary form must reproduce the above copyright
     13   1.1  njoly  *    notice, this list of conditions and the following disclaimer in the
     14   1.1  njoly  *    documentation and/or other materials provided with the distribution.
     15   1.1  njoly  *
     16   1.1  njoly  * THIS SOFTWARE IS PROVIDED BY THE NETBSD FOUNDATION, INC. AND CONTRIBUTORS
     17   1.1  njoly  * ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
     18   1.1  njoly  * TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
     19   1.1  njoly  * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE FOUNDATION OR CONTRIBUTORS
     20   1.1  njoly  * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
     21   1.1  njoly  * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
     22   1.1  njoly  * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
     23   1.1  njoly  * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
     24   1.1  njoly  * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
     25   1.1  njoly  * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
     26   1.1  njoly  * POSSIBILITY OF SUCH DAMAGE.
     27   1.1  njoly  */
     28   1.1  njoly 
     29   1.9  njoly #include <sys/stat.h>
     30   1.6  njoly #include <sys/time.h>
     31   1.6  njoly 
     32   1.1  njoly #include <atf-c.h>
     33   1.5  njoly #include <libgen.h>
     34   1.1  njoly #include <unistd.h>
     35   1.1  njoly 
     36   1.1  njoly #include <rump/rump_syscalls.h>
     37   1.1  njoly #include <rump/rump.h>
     38   1.1  njoly 
     39   1.1  njoly #include "../common/h_fsmacros.h"
     40   1.1  njoly #include "../../h_macros.h"
     41   1.1  njoly 
     42   1.2  njoly #define USES_OWNER							 \
     43   1.4  njoly 	if (FSTYPE_MSDOS(tc))						 \
     44   1.1  njoly 	    atf_tc_skip("owner not supported by file system")
     45   1.1  njoly 
     46   1.1  njoly static void
     47   1.1  njoly owner(const atf_tc_t *tc, const char *mp)
     48   1.1  njoly {
     49   1.1  njoly 
     50   1.2  njoly 	USES_OWNER;
     51   1.1  njoly 
     52   1.1  njoly 	FSTEST_ENTER();
     53   1.1  njoly 
     54   1.1  njoly 	rump_pub_lwproc_rfork(RUMP_RFCFDG);
     55   1.1  njoly 	if (rump_sys_setuid(1) == -1)
     56   1.1  njoly 		atf_tc_fail_errno("setuid");
     57  1.10   jmmv 	if (FSTYPE_ZFS(tc))
     58  1.10   jmmv 		atf_tc_expect_fail("PR kern/47656: Test known to be broken");
     59   1.1  njoly         if (rump_sys_chown(".", 1, -1) != -1 || errno != EPERM)
     60   1.1  njoly 		atf_tc_fail_errno("chown");
     61   1.1  njoly         if (rump_sys_chmod(".", 0000) != -1 || errno != EPERM)
     62   1.1  njoly                 atf_tc_fail_errno("chmod");
     63   1.1  njoly 	rump_pub_lwproc_releaselwp();
     64   1.1  njoly 
     65   1.1  njoly 	if (rump_sys_chown(".", 1, -1) == -1)
     66   1.1  njoly 		atf_tc_fail_errno("chown");
     67   1.1  njoly 
     68   1.1  njoly 	rump_pub_lwproc_rfork(RUMP_RFCFDG);
     69   1.1  njoly 	if (rump_sys_setuid(1) == -1)
     70   1.1  njoly 		atf_tc_fail_errno("setuid");
     71   1.1  njoly         if (rump_sys_chown(".", 1, -1) == -1)
     72   1.1  njoly 		atf_tc_fail_errno("chown");
     73   1.1  njoly         if (rump_sys_chmod(".", 0000) == -1)
     74   1.1  njoly                 atf_tc_fail_errno("chmod");
     75   1.1  njoly 	rump_pub_lwproc_releaselwp();
     76   1.1  njoly 
     77   1.1  njoly 	FSTEST_EXIT();
     78   1.1  njoly }
     79   1.1  njoly 
     80   1.5  njoly static void
     81   1.5  njoly dirperms(const atf_tc_t *tc, const char *mp)
     82   1.5  njoly {
     83   1.5  njoly 	char name[] = "dir.test/file.test";
     84   1.5  njoly 	char *dir = dirname(name);
     85   1.5  njoly 	int fd;
     86   1.5  njoly 
     87   1.5  njoly 	if (FSTYPE_SYSVBFS(tc))
     88   1.5  njoly 		atf_tc_skip("directories not supported by file system");
     89   1.5  njoly 
     90   1.5  njoly 	FSTEST_ENTER();
     91   1.5  njoly 
     92   1.5  njoly 	if (rump_sys_mkdir(dir, 0777) == -1)
     93   1.5  njoly 		atf_tc_fail_errno("mkdir");
     94   1.5  njoly 
     95   1.5  njoly 	rump_pub_lwproc_rfork(RUMP_RFCFDG);
     96   1.5  njoly 	if (rump_sys_setuid(1) == -1)
     97   1.5  njoly 		atf_tc_fail_errno("setuid");
     98  1.10   jmmv 	if (FSTYPE_ZFS(tc))
     99  1.10   jmmv 		atf_tc_expect_fail("PR kern/47656: Test known to be broken");
    100   1.5  njoly         if (rump_sys_open(name, O_RDWR|O_CREAT, 0666) != -1 || errno != EACCES)
    101   1.5  njoly 		atf_tc_fail_errno("open");
    102   1.5  njoly 	rump_pub_lwproc_releaselwp();
    103   1.5  njoly 
    104   1.5  njoly 	if ((fd = rump_sys_open(name, O_RDWR|O_CREAT, 0666)) == -1)
    105   1.5  njoly 		atf_tc_fail_errno("open");
    106   1.5  njoly 	if (rump_sys_close(fd) == -1)
    107   1.5  njoly 		atf_tc_fail_errno("close");
    108   1.5  njoly 
    109   1.5  njoly 	rump_pub_lwproc_rfork(RUMP_RFCFDG);
    110   1.5  njoly 	if (rump_sys_setuid(1) == -1)
    111   1.5  njoly 		atf_tc_fail_errno("setuid");
    112   1.5  njoly         if (rump_sys_unlink(name) != -1 || errno != EACCES)
    113   1.5  njoly 		atf_tc_fail_errno("unlink");
    114   1.5  njoly 	rump_pub_lwproc_releaselwp();
    115   1.5  njoly 
    116   1.5  njoly         if (rump_sys_unlink(name) == -1)
    117   1.5  njoly 		atf_tc_fail_errno("unlink");
    118   1.5  njoly 
    119   1.5  njoly 	if (rump_sys_rmdir(dir) == -1)
    120   1.5  njoly 		atf_tc_fail_errno("rmdir");
    121   1.5  njoly 
    122   1.5  njoly 	FSTEST_EXIT();
    123   1.5  njoly }
    124   1.1  njoly 
    125   1.6  njoly static void
    126   1.6  njoly times(const atf_tc_t *tc, const char *mp)
    127   1.6  njoly {
    128   1.6  njoly 	const char *name = "file.test";
    129   1.8  njoly 	int fd;
    130   1.7  njoly 	struct timeval tmv[2];
    131   1.6  njoly 
    132   1.6  njoly 	FSTEST_ENTER();
    133   1.6  njoly 
    134   1.6  njoly 	if ((fd = rump_sys_open(name, O_RDWR|O_CREAT, 0666)) == -1)
    135   1.6  njoly 		atf_tc_fail_errno("open");
    136   1.6  njoly 	if (rump_sys_close(fd) == -1)
    137   1.6  njoly 		atf_tc_fail_errno("close");
    138   1.6  njoly 
    139   1.6  njoly 	rump_pub_lwproc_rfork(RUMP_RFCFDG);
    140   1.6  njoly 	if (rump_sys_setuid(1) == -1)
    141   1.6  njoly 		atf_tc_fail_errno("setuid");
    142  1.10   jmmv 	if (FSTYPE_ZFS(tc))
    143  1.10   jmmv 		atf_tc_expect_fail("PR kern/47656: Test known to be broken");
    144   1.6  njoly 	if (rump_sys_utimes(name, NULL) != -1 || errno != EACCES)
    145   1.6  njoly 		atf_tc_fail_errno("utimes");
    146   1.6  njoly 	rump_pub_lwproc_releaselwp();
    147   1.6  njoly 
    148   1.6  njoly 	if (rump_sys_utimes(name, NULL) == -1)
    149   1.6  njoly 		atf_tc_fail_errno("utimes");
    150   1.6  njoly 
    151   1.7  njoly 	rump_pub_lwproc_rfork(RUMP_RFCFDG);
    152   1.7  njoly 	if (rump_sys_setuid(1) == -1)
    153   1.7  njoly 		atf_tc_fail_errno("setuid");
    154   1.8  njoly 	if (rump_sys_utimes(name, tmv) != -1 || errno != EPERM)
    155   1.7  njoly 		atf_tc_fail_errno("utimes");
    156   1.7  njoly 	rump_pub_lwproc_releaselwp();
    157   1.7  njoly 
    158   1.7  njoly 	if (rump_sys_utimes(name, tmv) == -1)
    159   1.7  njoly 		atf_tc_fail_errno("utimes");
    160   1.7  njoly 
    161   1.6  njoly 	if (rump_sys_unlink(name) == -1)
    162   1.6  njoly 		atf_tc_fail_errno("unlink");
    163   1.6  njoly 
    164   1.6  njoly 	FSTEST_EXIT();
    165   1.6  njoly }
    166   1.6  njoly 
    167   1.9  njoly static void
    168   1.9  njoly flags(const atf_tc_t *tc, const char *mp)
    169   1.9  njoly {
    170   1.9  njoly 	const char *name = "file.test";
    171   1.9  njoly 	int fd, fflags;
    172   1.9  njoly 	struct stat st;
    173   1.9  njoly 
    174   1.9  njoly 	FSTEST_ENTER();
    175   1.9  njoly 
    176   1.9  njoly 	if ((fd = rump_sys_open(name, O_RDWR|O_CREAT, 0666)) == -1)
    177   1.9  njoly 		atf_tc_fail_errno("open");
    178   1.9  njoly 	if (rump_sys_close(fd) == -1)
    179   1.9  njoly 		atf_tc_fail_errno("close");
    180   1.9  njoly 
    181   1.9  njoly 	if (rump_sys_stat(name, &st) == -1)
    182   1.9  njoly 		atf_tc_fail_errno("stat");
    183  1.10   jmmv 	if (FSTYPE_ZFS(tc))
    184  1.10   jmmv 		atf_tc_expect_fail("PR kern/47656: Test known to be broken");
    185   1.9  njoly 	if (rump_sys_chflags(name, st.st_flags) == -1) {
    186   1.9  njoly 		if (errno == EOPNOTSUPP)
    187   1.9  njoly 			atf_tc_skip("file flags not supported by file system");
    188   1.9  njoly 		atf_tc_fail_errno("chflags");
    189   1.9  njoly 	}
    190   1.9  njoly 
    191   1.9  njoly 	fflags = st.st_flags | UF_IMMUTABLE;
    192   1.9  njoly 
    193   1.9  njoly 	rump_pub_lwproc_rfork(RUMP_RFCFDG);
    194   1.9  njoly 	if (rump_sys_setuid(1) == -1)
    195   1.9  njoly 		atf_tc_fail_errno("setuid");
    196   1.9  njoly 	fflags |= UF_IMMUTABLE;
    197   1.9  njoly 	if (rump_sys_chflags(name, fflags) != -1 || errno != EPERM)
    198   1.9  njoly 		atf_tc_fail_errno("chflags");
    199   1.9  njoly 	rump_pub_lwproc_releaselwp();
    200   1.9  njoly 
    201   1.9  njoly 	if (rump_sys_chflags(name, fflags) == -1)
    202   1.9  njoly 		atf_tc_fail_errno("chflags");
    203   1.9  njoly 
    204   1.9  njoly 	fflags &= ~UF_IMMUTABLE;
    205   1.9  njoly 	if (rump_sys_chflags(name, fflags) == -1)
    206   1.9  njoly 		atf_tc_fail_errno("chflags");
    207   1.9  njoly 
    208   1.9  njoly 	if (rump_sys_unlink(name) == -1)
    209   1.9  njoly 		atf_tc_fail_errno("unlink");
    210   1.9  njoly 
    211   1.9  njoly 	FSTEST_EXIT();
    212   1.9  njoly }
    213   1.9  njoly 
    214   1.1  njoly ATF_TC_FSAPPLY(owner, "owner unprivileged checks");
    215   1.5  njoly ATF_TC_FSAPPLY(dirperms, "directory permission checks");
    216   1.6  njoly ATF_TC_FSAPPLY(times, "time set checks");
    217   1.9  njoly ATF_TC_FSAPPLY(flags, "file flags checks");
    218   1.1  njoly 
    219   1.1  njoly ATF_TP_ADD_TCS(tp)
    220   1.1  njoly {
    221   1.1  njoly 
    222   1.1  njoly 	ATF_TP_FSAPPLY(owner);
    223   1.5  njoly 	ATF_TP_FSAPPLY(dirperms);
    224   1.6  njoly 	ATF_TP_FSAPPLY(times);
    225   1.9  njoly 	ATF_TP_FSAPPLY(flags);
    226   1.1  njoly 
    227   1.1  njoly 	return atf_no_error();
    228   1.1  njoly }
    229