diff options
Diffstat (limited to 'tools/regression/priv/test_utimes.c')
| -rw-r--r-- | tools/regression/priv/test_utimes.c | 153 |
1 files changed, 153 insertions, 0 deletions
diff --git a/tools/regression/priv/test_utimes.c b/tools/regression/priv/test_utimes.c new file mode 100644 index 0000000..51cef52 --- /dev/null +++ b/tools/regression/priv/test_utimes.c @@ -0,0 +1,153 @@ +/*- + * Copyright (c) 2006 nCircle Network Security, Inc. + * All rights reserved. + * + * This software was developed by Robert N. M. Watson for the TrustedBSD + * Project under contract to nCircle Network Security, Inc. + * + * Redistribution and use in source and binary forms, with or without + * modification, are permitted provided that the following conditions + * are met: + * 1. Redistributions of source code must retain the above copyright + * notice, this list of conditions and the following disclaimer. + * 2. Redistributions in binary form must reproduce the above copyright + * notice, this list of conditions and the following disclaimer in the + * documentation and/or other materials provided with the distribution. + * + * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND + * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE + * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE + * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR, NCIRCLE NETWORK SECURITY, + * INC., OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, + * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED + * TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR + * PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF + * LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING + * NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS + * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. + * + * $FreeBSD$ + */ + +/* + * If times is NULL, ... The caller must be the owner of the file, have + * permission to write the file, or be the super-user. + * + * If times is non-NULL, ... The caller must be the owner of the file or be + * the super-user. + * + * To test these, create a temporary file owned by uid_owner; then run a + * series of tests as root, owner, and other, along with various modes, to + * see what is permitted, and if not, what error is returned. + */ + +#include <sys/types.h> +#include <sys/stat.h> + +#include <err.h> +#include <errno.h> +#include <stdio.h> +#include <stdlib.h> +#include <string.h> +#include <unistd.h> + +#include "main.h" + +static int +try_utimes(const char *path, mode_t mode, uid_t uid, + struct timeval *timestamp, int expected) +{ + int error; + + if (chmod(path, mode) < 0) { + warn("try_utimes(%s, %d, %d, 0x%08x): chmod", path, mode, uid, + (u_int)timestamp); + (void)unlink(path); + exit(-1); + } + + if (seteuid(uid) < 0) { + warn("try_utimes(%s, %d, %d, 0x%08x): seteuid(%d)", path, + mode, uid, (u_int)timestamp, uid); + (void)unlink(path); + exit(-1); + } + + error = utimes(path, timestamp); + + if (seteuid(UID_ROOT) < 0) { + warn("try_utimes(%s, %d, %d, 0x%08x): seteuid(UID_ROOT)", + path, mode, uid, (u_int)timestamp); + (void)unlink(path); + exit(-1); + } + + if (expected == 0) { + if (error != 0) { + (void)unlink(path); + errx(-1, "try_utimes(%s, 0%o, %d, 0x%08x) failed %d", + path, mode, uid, (u_int)timestamp, errno); + } + return (0); + } + + if (expected == errno) + return (0); + + (void)unlink(path); + errx(-1, "try_utimes(%s, 0%o, %d, 0x%08x) wrong err %d", path, mode, + uid, (u_int)timestamp, errno); +} + +void +test_utimes(void) +{ + char path[128] = "/tmp/utimes.XXXXXXXXX"; + struct timeval timestamp[2]; + int fd; + + if (getuid() != 0) + errx(-1, "must be run as root"); + + fd = mkstemp(path); + if (fd == -1) + err(-1, "mkstemp"); + + if (chown(path, UID_OWNER, -1) < 0) { + warn("chown(%s, %d)", path, UID_OWNER); + (void)unlink(path); + return; + } + + bzero(timestamp, sizeof(timestamp)); + + try_utimes(path, 0444, UID_ROOT, NULL, 0); + try_utimes(path, 0444, UID_OWNER, NULL, 0); + /* Denied by permissions. */ + try_utimes(path, 0444, UID_OTHER, NULL, EACCES); + + try_utimes(path, 0444, UID_ROOT, timestamp, 0); + try_utimes(path, 0444, UID_OWNER, timestamp, 0); + try_utimes(path, 0444, UID_OTHER, timestamp, EPERM); + + try_utimes(path, 0644, UID_ROOT, NULL, 0); + try_utimes(path, 0644, UID_OWNER, NULL, 0); + /* Denied by permissions. */ + try_utimes(path, 0644, UID_OTHER, NULL, EACCES); + + try_utimes(path, 0644, UID_ROOT, timestamp, 0); + try_utimes(path, 0644, UID_OWNER, timestamp, 0); + /* Denied as not owner. */ + try_utimes(path, 0644, UID_OTHER, timestamp, EPERM); + + try_utimes(path, 0666, UID_ROOT, NULL, 0); + try_utimes(path, 0666, UID_OWNER, NULL, 0); + try_utimes(path, 0666, UID_OTHER, NULL, 0); + + try_utimes(path, 0666, UID_ROOT, timestamp, 0); + try_utimes(path, 0666, UID_OWNER, timestamp, 0); + /* Denied as not owner. */ + try_utimes(path, 0666, UID_OTHER, timestamp, EPERM); + + (void)unlink(path); +} |
