| /* |
| * |
| * Copyright (c) International Business Machines Corp., 2001 |
| * |
| * This program is free software; you can redistribute it and/or modify |
| * it under the terms of the GNU General Public License as published by |
| * the Free Software Foundation; either version 2 of the License, or |
| * (at your option) any later version. |
| * |
| * This program is distributed in the hope that it will be useful, |
| * but WITHOUT ANY WARRANTY; without even the implied warranty of |
| * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See |
| * the GNU General Public License for more details. |
| * |
| * You should have received a copy of the GNU General Public License |
| * along with this program; if not, write to the Free Software |
| * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA |
| */ |
| |
| /* |
| * NAME |
| * setresuid02.c |
| * |
| * DESCRIPTION |
| * Test that a non-root user can change the real, effective and saved |
| * uid values through the setresuid system call. |
| * |
| * ALGORITHM |
| * |
| * Setup: |
| * Setup signal handling |
| * Get user information. |
| * Pause for SIGUSER1 if option specified. |
| * |
| * Setup test values. |
| * Loop if the proper options are given. |
| * For each test set execute the system call |
| * Check that we received the expected result. |
| * Verify that the uid, euid and suid values are still correct. |
| * Cleanup: |
| * Print errno log and/or timing stats if option given. |
| * |
| * USAGE: <for command-line> |
| * setresuid02 [-c n] [-f] [-i n] [-I x] [-P x] [-t] |
| * where, -c n : Run n copies concurrently. |
| * -f : Turn off functionality Testing. |
| * -i n : Execute test n times. |
| * -I x : Execute test for x seconds. |
| * -P x : Pause for x seconds between iterations. |
| * -t : Turn on syscall timing. |
| * |
| * History |
| * 07/2001 John George |
| * -Ported |
| * |
| * Restrictions |
| * This test must be run by root. |
| * nobody and bin must be a valid users. |
| */ |
| |
| #define _GNU_SOURCE 1 |
| #include <pwd.h> |
| #include <stdlib.h> |
| #include "test.h" |
| #include "usctest.h" |
| #include <errno.h> |
| #include <sys/wait.h> |
| |
| char *TCID = "setresuid02"; |
| |
| uid_t neg_one = -1; |
| |
| /* flag to tell parent if child passed or failed. */ |
| int flag = 0; |
| |
| uid_t nobody_pw_uid, bin_pw_uid; |
| char user1name[] = "nobody"; |
| char user2name[] = "bin"; |
| |
| struct passwd nobody, bin; |
| |
| /* |
| * The following structure contains all test data. Each structure in the array |
| * is used for a separate test. The tests are executed in the for loop below. |
| */ |
| |
| struct test_data_t { |
| uid_t *real_uid; |
| uid_t *eff_uid; |
| uid_t *sav_uid; |
| struct passwd *exp_real_usr; |
| struct passwd *exp_eff_usr; |
| struct passwd *exp_sav_usr; |
| char *test_msg; |
| } test_data[] = { |
| { |
| &neg_one, &neg_one, &bin_pw_uid, &nobody, &bin, &bin, |
| "After setresuid(-1, -1, bin),"}, { |
| &neg_one, &nobody_pw_uid, &neg_one, &nobody, &nobody, &bin, |
| "After setresuid(-1, nobody -1),"}, { |
| &bin_pw_uid, &neg_one, &neg_one, &bin, &nobody, &bin, |
| "After setresuid(bin, -1 -1),"},}; |
| |
| int TST_TOTAL = sizeof(test_data) / sizeof(test_data[0]); |
| |
| void setup(void); |
| void cleanup(void); |
| |
| void |
| uid_verify(struct passwd *ru, struct passwd *eu, struct passwd *su, char *); |
| |
| int main(int ac, char **av) |
| { |
| int lc; |
| const char *msg; |
| int status; |
| |
| if ((msg = parse_opts(ac, av, NULL, NULL)) != NULL) { |
| tst_brkm(TBROK, NULL, "OPTION PARSING ERROR - %s", msg); |
| |
| } |
| |
| setup(); |
| |
| for (lc = 0; TEST_LOOPING(lc); lc++) { |
| int i, pid; |
| |
| /* reset tst_count in case we are looping */ |
| tst_count = 0; |
| |
| /* set the appropriate ownership values */ |
| if (setresuid(nobody_pw_uid, bin_pw_uid, nobody_pw_uid) == -1) { |
| tst_brkm(TFAIL, cleanup, "Initial setresuid failed"); |
| } |
| |
| if ((pid = FORK_OR_VFORK()) == -1) { |
| tst_brkm(TBROK, cleanup, "fork failed"); |
| } else if (pid == 0) { /* child */ |
| |
| for (i = 0; i < TST_TOTAL; i++) { |
| |
| /* Set the real, effective or saved user id */ |
| TEST(setresuid(*test_data[i].real_uid, |
| *test_data[i].eff_uid, |
| *test_data[i].sav_uid)); |
| |
| if (TEST_RETURN != -1) { |
| tst_resm(TPASS, "setresuid(%d, %d, %d) " |
| "succeeded as expected.", |
| *test_data[i].real_uid, |
| *test_data[i].eff_uid, |
| *test_data[i].sav_uid); |
| } else { |
| tst_resm(TFAIL, "setresuid(%d, %d, %d) " |
| "did not return as expected.", |
| *test_data[i].real_uid, |
| *test_data[i].eff_uid, |
| *test_data[i].sav_uid); |
| flag = -1; |
| } |
| |
| uid_verify(test_data[i].exp_real_usr, |
| test_data[i].exp_eff_usr, |
| test_data[i].exp_sav_usr, |
| test_data[i].test_msg); |
| } |
| exit(flag); |
| } else { /* parent */ |
| waitpid(pid, &status, 0); |
| if (WEXITSTATUS(status) != 0) { |
| tst_resm(TFAIL, "test failed within " |
| "child process."); |
| } |
| } |
| } |
| cleanup(); |
| tst_exit(); |
| } |
| |
| /* |
| * setup() |
| * performs all ONE TIME setup for this test |
| */ |
| void setup(void) |
| { |
| tst_require_root(NULL); |
| |
| tst_sig(FORK, DEF_HANDLER, cleanup); |
| |
| if (getpwnam("nobody") == NULL) { |
| tst_brkm(TBROK, NULL, "nobody must be a valid user."); |
| tst_exit(); |
| } |
| |
| if (getpwnam("bin") == NULL) { |
| tst_brkm(TBROK, NULL, "bin must be a valid user."); |
| tst_exit(); |
| } |
| |
| nobody = *(getpwnam("nobody")); |
| nobody_pw_uid = nobody.pw_uid; |
| |
| bin = *(getpwnam("bin")); |
| bin_pw_uid = bin.pw_uid; |
| |
| /* Pause if that option was specified |
| * TEST_PAUSE contains the code to fork the test with the -i option. |
| * You want to make sure you do this before you create your temporary |
| * directory. |
| */ |
| TEST_PAUSE; |
| } |
| |
| /* |
| * cleanup() |
| * performs all ONE TIME cleanup for this test at |
| * completion or premature exit |
| */ |
| void cleanup(void) |
| { |
| /* |
| * print timing stats if that option was specified. |
| * print errno log if that option was specified. |
| */ |
| TEST_CLEANUP; |
| |
| } |
| |
| void |
| uid_verify(struct passwd *ru, struct passwd *eu, struct passwd *su, char *when) |
| { |
| uid_t cur_ru, cur_eu, cur_su; |
| if (getresuid(&cur_ru, &cur_eu, &cur_su) != 0) { |
| flag = -1; |
| tst_brkm(TBROK, cleanup, "Set getresuid() failed"); |
| } |
| if ((cur_ru != ru->pw_uid) || (cur_eu != eu->pw_uid) || (cur_su != |
| su->pw_uid)) { |
| tst_resm(TFAIL, "ERROR: %s real uid = %d; effective uid = %d; " |
| "saved uid = %d", when, cur_ru, cur_eu, cur_su); |
| tst_resm(TINFO, "Expected: real uid = %d, effective uid = %d " |
| "saved uid = %d", ru->pw_uid, eu->pw_uid, su->pw_uid); |
| flag = -1; |
| } else { |
| tst_resm(TINFO, "real uid = %d, effective uid = %d, and " |
| "saved uid = %d as expected", cur_ru, cur_eu, cur_su); |
| } |
| } |