Dmitry V. Levin | 80f7db1 | 2014-12-13 21:49:01 +0000 | [diff] [blame] | 1 | #ifdef HAVE_CONFIG_H |
| 2 | # include "config.h" |
| 3 | #endif |
| 4 | #include <assert.h> |
Dmitry V. Levin | 530bed0 | 2014-12-14 13:30:54 +0000 | [diff] [blame] | 5 | #include <stdlib.h> |
Dmitry V. Levin | 80f7db1 | 2014-12-13 21:49:01 +0000 | [diff] [blame] | 6 | #include <unistd.h> |
Dmitry V. Levin | 77e0d2d | 2015-03-02 02:13:03 +0000 | [diff] [blame] | 7 | #include <fcntl.h> |
Dmitry V. Levin | 80f7db1 | 2014-12-13 21:49:01 +0000 | [diff] [blame] | 8 | #include <sys/syscall.h> |
| 9 | |
| 10 | int |
| 11 | main(void) |
| 12 | { |
| 13 | #if defined(__NR_getuid) \ |
| 14 | && defined(__NR_setuid) \ |
| 15 | && defined(__NR_getresuid) \ |
| 16 | && defined(__NR_setreuid) \ |
| 17 | && defined(__NR_setresuid) \ |
Dmitry V. Levin | 68804b3 | 2015-03-16 18:10:21 +0000 | [diff] [blame] | 18 | && defined(__NR_fchown) \ |
Dmitry V. Levin | 530bed0 | 2014-12-14 13:30:54 +0000 | [diff] [blame] | 19 | && defined(__NR_getgroups) \ |
Dmitry V. Levin | 80f7db1 | 2014-12-13 21:49:01 +0000 | [diff] [blame] | 20 | \ |
| 21 | && defined(__NR_getuid32) \ |
| 22 | && defined(__NR_setuid32) \ |
| 23 | && defined(__NR_getresuid32) \ |
| 24 | && defined(__NR_setreuid32) \ |
| 25 | && defined(__NR_setresuid32) \ |
Dmitry V. Levin | 68804b3 | 2015-03-16 18:10:21 +0000 | [diff] [blame] | 26 | && defined(__NR_fchown32) \ |
Dmitry V. Levin | 530bed0 | 2014-12-14 13:30:54 +0000 | [diff] [blame] | 27 | && defined(__NR_getgroups32) \ |
Dmitry V. Levin | 80f7db1 | 2014-12-13 21:49:01 +0000 | [diff] [blame] | 28 | \ |
| 29 | && __NR_getuid != __NR_getuid32 \ |
| 30 | && __NR_setuid != __NR_setuid32 \ |
| 31 | && __NR_getresuid != __NR_getresuid32 \ |
| 32 | && __NR_setreuid != __NR_setreuid32 \ |
| 33 | && __NR_setresuid != __NR_setresuid32 \ |
Dmitry V. Levin | 68804b3 | 2015-03-16 18:10:21 +0000 | [diff] [blame] | 34 | && __NR_fchown != __NR_fchown32 \ |
Dmitry V. Levin | 530bed0 | 2014-12-14 13:30:54 +0000 | [diff] [blame] | 35 | && __NR_getgroups != __NR_getgroups32 \ |
Dmitry V. Levin | 80f7db1 | 2014-12-13 21:49:01 +0000 | [diff] [blame] | 36 | /**/ |
Dmitry V. Levin | 3a15bc8 | 2015-03-02 01:13:47 +0000 | [diff] [blame] | 37 | int uid; |
Dmitry V. Levin | 530bed0 | 2014-12-14 13:30:54 +0000 | [diff] [blame] | 38 | int size; |
| 39 | int *list = 0; |
Dmitry V. Levin | 80f7db1 | 2014-12-13 21:49:01 +0000 | [diff] [blame] | 40 | |
Dmitry V. Levin | 3a15bc8 | 2015-03-02 01:13:47 +0000 | [diff] [blame] | 41 | uid = syscall(__NR_getuid); |
Dmitry V. Levin | 77e0d2d | 2015-03-02 02:13:03 +0000 | [diff] [blame] | 42 | |
| 43 | (void) close(0); |
| 44 | if (open("/proc/sys/kernel/overflowuid", O_RDONLY) == 0) { |
| 45 | /* we trust the kernel */ |
| 46 | char buf[sizeof(int)*3]; |
| 47 | int n = read(0, buf, sizeof(buf) - 1); |
| 48 | if (n) { |
| 49 | buf[n] = '\0'; |
| 50 | n = atoi(buf); |
| 51 | if (uid == n) |
| 52 | return 77; |
| 53 | } |
| 54 | close(0); |
| 55 | } |
| 56 | |
Dmitry V. Levin | 3a15bc8 | 2015-03-02 01:13:47 +0000 | [diff] [blame] | 57 | assert(syscall(__NR_setuid, uid) == 0); |
| 58 | { |
| 59 | /* |
| 60 | * uids returned by getresuid should be ignored |
| 61 | * to avoid 16bit vs 32bit issues. |
| 62 | */ |
| 63 | int r, e, s; |
| 64 | assert(syscall(__NR_getresuid, &r, &e, &s) == 0); |
| 65 | } |
Dmitry V. Levin | 80f7db1 | 2014-12-13 21:49:01 +0000 | [diff] [blame] | 66 | assert(syscall(__NR_setreuid, -1, 0xffff) == 0); |
Dmitry V. Levin | 3a15bc8 | 2015-03-02 01:13:47 +0000 | [diff] [blame] | 67 | assert(syscall(__NR_setresuid, uid, -1, 0xffff) == 0); |
Dmitry V. Levin | 68804b3 | 2015-03-16 18:10:21 +0000 | [diff] [blame] | 68 | assert(syscall(__NR_fchown, 1, -1, 0xffff) == 0); |
Dmitry V. Levin | 530bed0 | 2014-12-14 13:30:54 +0000 | [diff] [blame] | 69 | assert((size = syscall(__NR_getgroups, 0, list)) >= 0); |
| 70 | assert(list = calloc(size + 1, sizeof(*list))); |
| 71 | assert(syscall(__NR_getgroups, size, list) == size); |
Dmitry V. Levin | 80f7db1 | 2014-12-13 21:49:01 +0000 | [diff] [blame] | 72 | return 0; |
| 73 | #else |
| 74 | return 77; |
| 75 | #endif |
| 76 | } |