t_o_search.c revision 1.1 1 /* $NetBSD: t_o_search.c,v 1.1 2012/11/18 17:41:54 manu Exp $ */
2
3 /*-
4 * Copyright (c) 2012 The NetBSD Foundation, Inc.
5 * All rights reserved.
6 *
7 * This code is derived from software contributed to The NetBSD Foundation
8 * by Emmanuel Dreyfus.
9 *
10 * Redistribution and use in source and binary forms, with or without
11 * modification, are permitted provided that the following conditions
12 * are met:
13 * 1. Redistributions of source code must retain the above copyright
14 * notice, this list of conditions and the following disclaimer.
15 * 2. Redistributions in binary form must reproduce the above copyright
16 * notice, this list of conditions and the following disclaimer in the
17 * documentation and/or other materials provided with the distribution.
18 *
19 * THIS SOFTWARE IS PROVIDED BY THE NETBSD FOUNDATION, INC. AND CONTRIBUTORS
20 * ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
21 * TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
22 * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE FOUNDATION OR CONTRIBUTORS
23 * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
24 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
25 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
26 * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
27 * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
28 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
29 * POSSIBILITY OF SUCH DAMAGE.
30 */
31 #include <sys/cdefs.h>
32 __RCSID("$NetBSD: t_o_search.c,v 1.1 2012/11/18 17:41:54 manu Exp $");
33
34 #include <atf-c.h>
35 #include <errno.h>
36 #include <fcntl.h>
37 #include <limits.h>
38 #include <paths.h>
39 #include <stdio.h>
40 #include <string.h>
41 #include <unistd.h>
42 #include <pwd.h>
43 #include <sys/param.h>
44
45 #define DIR "dir"
46 #define FILE "dir/o_search"
47 #define BASEFILE "o_search"
48
49 ATF_TC_WITH_CLEANUP(o_search_perm1);
50 ATF_TC_HEAD(o_search_perm1, tc)
51 {
52 atf_tc_set_md_var(tc, "descr", "See that openat enforce search permission");
53 atf_tc_set_md_var(tc, "require.user", "unprivileged");
54 }
55
56 ATF_TC_BODY(o_search_perm1, tc)
57 {
58 int dfd;
59 int fd;
60
61 ATF_REQUIRE(mkdir(DIR, 0755) == 0);
62 ATF_REQUIRE((fd = open(FILE, O_CREAT|O_RDWR, 0644)) != -1);
63 ATF_REQUIRE(close(fd) == 0);
64
65 ATF_REQUIRE((dfd = open(DIR, O_RDONLY, 0)) != -1);
66
67 ATF_REQUIRE((fd = openat(dfd, BASEFILE, O_RDWR, 0)) != -1);
68 ATF_REQUIRE(close(fd) == 0);
69
70 ATF_REQUIRE(fchmod(dfd, 644) == 0);
71
72 ATF_REQUIRE((fd = openat(dfd, BASEFILE, O_RDWR, 0)) == -1);
73 ATF_REQUIRE(errno == EACCES);
74
75 ATF_REQUIRE(close(dfd) == 0);
76 }
77
78 ATF_TC_CLEANUP(o_search_perm1, tc)
79 {
80 (void)unlink(FILE);
81 (void)rmdir(DIR);
82 }
83
84 ATF_TC_WITH_CLEANUP(o_search_flag1);
85 ATF_TC_HEAD(o_search_flag1, tc)
86 {
87 atf_tc_set_md_var(tc, "descr", "See that openat honours O_SEARCH");
88 }
89
90 ATF_TC_BODY(o_search_flag1, tc)
91 {
92 int dfd;
93 int fd;
94
95 ATF_REQUIRE(mkdir(DIR, 0755) == 0);
96 ATF_REQUIRE((fd = open(FILE, O_CREAT|O_RDWR, 0644)) != -1);
97 ATF_REQUIRE(close(fd) == 0);
98
99 ATF_REQUIRE((dfd = open(DIR, O_RDONLY|O_SEARCH, 0)) != -1);
100
101 ATF_REQUIRE((fd = openat(dfd, BASEFILE, O_RDWR, 0)) != -1);
102 ATF_REQUIRE(close(fd) == 0);
103
104 ATF_REQUIRE(fchmod(dfd, 644) == 0);
105
106 ATF_REQUIRE((fd = openat(dfd, BASEFILE, O_RDWR, 0)) != -1);
107 ATF_REQUIRE(close(fd) == 0);
108
109 ATF_REQUIRE(fchmod(dfd, 444) == 0);
110
111 ATF_REQUIRE((fd = openat(dfd, BASEFILE, O_RDWR, 0)) != -1);
112
113 ATF_REQUIRE(close(dfd) == 0);
114 }
115
116 ATF_TC_CLEANUP(o_search_flag1, tc)
117 {
118 (void)unlink(FILE);
119 (void)rmdir(DIR);
120 }
121
122 ATF_TC_WITH_CLEANUP(o_search_perm2);
123 ATF_TC_HEAD(o_search_perm2, tc)
124 {
125 atf_tc_set_md_var(tc, "descr", "See that fstatat enforce search permission");
126 atf_tc_set_md_var(tc, "require.user", "unprivileged");
127 }
128
129 ATF_TC_BODY(o_search_perm2, tc)
130 {
131 int dfd;
132 int fd;
133 ATF_REQUIRE(mkdir(DIR, 0755) == 0);
134 ATF_REQUIRE((fd = open(FILE, O_CREAT|O_RDWR, 0644)) != -1);
135 ATF_REQUIRE(close(fd) == 0);
136
137 ATF_REQUIRE((dfd = open(DIR, O_RDONLY, 0)) != -1);
138
139 ATF_REQUIRE(faccessat(dfd, BASEFILE, W_OK, 0) == 0);
140
141 ATF_REQUIRE(fchmod(dfd, 644) == 0);
142
143 ATF_REQUIRE(faccessat(dfd, BASEFILE, W_OK, 0) == -1);
144 ATF_REQUIRE(errno == EACCES);
145
146 ATF_REQUIRE(close(dfd) == 0);
147 }
148
149 ATF_TC_CLEANUP(o_search_perm2, tc)
150 {
151 (void)unlink(FILE);
152 (void)rmdir(DIR);
153 }
154
155 ATF_TC_WITH_CLEANUP(o_search_flag2);
156 ATF_TC_HEAD(o_search_flag2, tc)
157 {
158 atf_tc_set_md_var(tc, "descr", "See that fstatat honours O_SEARCH");
159 }
160
161 ATF_TC_BODY(o_search_flag2, tc)
162 {
163 int dfd;
164 int fd;
165
166 ATF_REQUIRE(mkdir(DIR, 0755) == 0);
167 ATF_REQUIRE((fd = open(FILE, O_CREAT|O_RDWR, 0644)) != -1);
168 ATF_REQUIRE(close(fd) == 0);
169
170 ATF_REQUIRE((dfd = open(DIR, O_RDONLY|O_SEARCH, 0)) != -1);
171
172 ATF_REQUIRE(faccessat(dfd, BASEFILE, W_OK, 0) == 0);
173
174 ATF_REQUIRE(fchmod(dfd, 644) == 0);
175
176 ATF_REQUIRE(faccessat(dfd, BASEFILE, W_OK, 0) == 0);
177
178 ATF_REQUIRE(fchmod(dfd, 444) == 0);
179
180 ATF_REQUIRE(faccessat(dfd, BASEFILE, W_OK, 0) == 0);
181
182 ATF_REQUIRE(close(dfd) == 0);
183 }
184
185 ATF_TC_CLEANUP(o_search_flag2, tc)
186 {
187 (void)unlink(FILE);
188 (void)rmdir(DIR);
189 }
190
191 ATF_TC_WITH_CLEANUP(o_search_notdir);
192 ATF_TC_HEAD(o_search_notdir, tc)
193 {
194 atf_tc_set_md_var(tc, "descr", "See that openat fails with non dir fd");
195 }
196
197 ATF_TC_BODY(o_search_notdir, tc)
198 {
199 int dfd;
200 int fd;
201
202 ATF_REQUIRE(mkdir(DIR, 0755) == 0);
203 ATF_REQUIRE((dfd = open(FILE, O_CREAT|O_RDWR|O_SEARCH, 0644)) != -1);
204 ATF_REQUIRE((fd = openat(dfd, BASEFILE, O_RDWR, 0)) == -1);
205 ATF_REQUIRE(errno == ENOTDIR);
206 }
207
208 ATF_TC_CLEANUP(o_search_notdir, tc)
209 {
210 (void)unlink(FILE);
211 (void)rmdir(DIR);
212 }
213
214
215
216 ATF_TP_ADD_TCS(tp)
217 {
218
219 ATF_TP_ADD_TC(tp, o_search_perm1);
220 ATF_TP_ADD_TC(tp, o_search_flag1);
221 ATF_TP_ADD_TC(tp, o_search_perm2);
222 ATF_TP_ADD_TC(tp, o_search_flag2);
223 ATF_TP_ADD_TC(tp, o_search_notdir);
224
225 return atf_no_error();
226 }
227