blob: 80dc2a3031655038d5486567c7660f4c2a6cd99d [file] [log] [blame]
/*
* Copyright (c) Wipro Technologies Ltd, 2002. All Rights Reserved.
*
* This program is free software; you can redistribute it and/or modify it
* under the terms of version 2 of the GNU General Public License as
* published by the Free Software Foundation.
*
* This program is distributed in the hope that it would be useful, but
* WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
*
* You should have received a copy of the GNU General Public License along
* with this program; if not, write the Free Software Foundation, Inc.,
* 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
*
*/
/**********************************************************
*
* TEST IDENTIFIER : setresgid03
*
* EXECUTED BY : root / superuser
*
* TEST TITLE : Checking error conditions for setresgid(2)
*
* TEST CASE TOTAL : 4
*
* AUTHOR : Madhu T L <madhu.tarikere@wipro.com>
*
* SIGNALS
* Uses SIGUSR1 to pause before test if option set.
* (See the parse_opts(3) man page).
*
* DESCRIPTION
* Verify that,
* 1. setresgid(2) fails with EPERM for unprivileged user in setting
* saved group id.
* 2. setresgid(2) fails with EPERM for unprivileged user in setting
* effective group id.
* 3. setresgid(2) fails with EPERM for unprivileged user in setting
* real group id.
* 4. setresgid(2) fails with EPERM for unprivileged user in setting
* real/effective/saved group id.
*
* Setup:
* Setup signal handling.
* Test caller is superuser
* Check existence of user id's root/bin/nobody
* Set real/effective/saved gid to nobody
* Set effective uid to nobody
* Pause for SIGUSR1 if option specified.
*
* Test:
* Loop if the proper options are given.
* Execute system call
* Check return value, errno and functionality, if success,
* Issue PASS message
* Otherwise,
* Issue FAIL message
*
* Cleanup:
* Print errno log and/or timing stats if options given
*
* USAGE: <for command-line>
* setresgid03 [-c n] [-e] [-f] [-h] [-i n] [-I x] [-p] [-P x] [-t]
* where, -c n : Run n copies concurrently.
* -e : Turn on errno logging.
* -f : Turn off functional testing
* -h : Show help screen
* -i n : Execute test n times.
* -I x : Execute test for x seconds.
* -p : Pause for SIGUSR1 before starting
* -P x : Pause for x seconds between iterations.
* -t : Turn on syscall timing.
*
****************************************************************/
#define _GNU_SOURCE 1
#include <errno.h>
#include <pwd.h>
#include <sys/types.h>
#include <unistd.h>
#include "test.h"
#include "usctest.h"
#define EXP_RET_VAL -1
#define EXP_ERRNO EPERM
#define TEST_DESC "unprivileged user"
struct test_case_t { /* test case structure */
uid_t *rgid; /* real GID */
uid_t *egid; /* effective GID */
uid_t *sgid; /* saved GID */
struct passwd *exp_rgid; /* Expected real GID */
struct passwd *exp_egid; /* Expected effective GID */
struct passwd *exp_sgid; /* Expected saved GID */
};
char *TCID = "setresgid03";
static int testno;
static struct passwd nobody, bin, root;
static uid_t nobody_gid, bin_gid, neg = -1;
static int exp_enos[] = { EPERM, 0 };
static int test_functionality(uid_t, uid_t, uid_t);
static void setup(void);
static void cleanup(void);
static struct test_case_t tdat[] = {
{&neg, &neg, &bin.pw_gid, &nobody, &nobody, &nobody},
{&neg, &bin.pw_gid, &neg, &nobody, &nobody, &nobody},
{&bin.pw_gid, &neg, &neg, &nobody, &nobody, &nobody},
{&bin.pw_gid, &bin.pw_gid, &bin.pw_gid, &nobody, &nobody, &nobody},
};
int TST_TOTAL = sizeof(tdat) / sizeof(tdat[0]);
int main(int argc, char **argv)
{
int lc;
char *msg;
if ((msg = parse_opts(argc, argv, NULL, NULL)) != NULL) {
tst_brkm(TBROK, NULL, "OPTION PARSING ERROR - %s", msg);
}
setup();
for (lc = 0; TEST_LOOPING(lc); lc++) {
/* reset tst_count in case we are looping */
tst_count = 0;
for (testno = 0; testno < TST_TOTAL; ++testno) {
TEST(setresgid(*tdat[testno].rgid, *tdat[testno].egid,
*tdat[testno].sgid));
TEST_ERROR_LOG(TEST_ERRNO);
if ((TEST_RETURN == EXP_RET_VAL) &&
(TEST_ERRNO == EXP_ERRNO)) {
if (!test_functionality
(tdat[testno].exp_rgid->pw_gid,
tdat[testno].exp_egid->pw_gid,
tdat[testno].exp_sgid->pw_gid)) {
tst_resm(TPASS, "setresgid() failed as "
"expected for %s : errno %d",
TEST_DESC, TEST_ERRNO);
} else {
tst_resm(TFAIL, "Functionality test "
"for setresgid() for %s failed",
TEST_DESC);
}
} else {
tst_resm(TFAIL, "setresgid() returned "
"unexpected results for %s ; returned"
" %ld (expected %d), errno %d (expected"
" %d)", TEST_DESC,
TEST_RETURN, EXP_RET_VAL, TEST_ERRNO,
EXP_ERRNO);
}
}
}
cleanup();
tst_exit();
}
static int test_functionality(uid_t exp_rgid, uid_t exp_egid, uid_t exp_sgid)
{
uid_t cur_rgid, cur_egid, cur_sgid;
/*
* Perform functional verification, if STD_FUNCTIONAL_TEST is
* set (-f options is not used)
*/
if (STD_FUNCTIONAL_TEST == 0) {
return 0;
}
/* Get current real, effective and saved group id */
if (getresgid(&cur_rgid, &cur_egid, &cur_sgid) == -1) {
tst_brkm(TBROK, cleanup, "getresgid() failed");
}
if ((cur_rgid == exp_rgid) && (cur_egid == exp_egid)
&& (cur_sgid == exp_sgid)) {
return 0;
}
return 1;
}
/*
* setup()
* performs all ONE TIME setup for this test
*/
void setup(void)
{
struct passwd *passwd_p;
tst_sig(NOFORK, DEF_HANDLER, cleanup);
/* Check whether we are root */
if (geteuid() != 0) {
tst_brkm(TBROK, NULL, "Must be root for this test!");
}
if ((passwd_p = getpwnam("root")) == NULL) {
tst_brkm(TBROK, NULL, "getpwnam() failed for root");
}
root = *passwd_p;
if ((passwd_p = getpwnam("bin")) == NULL) {
tst_brkm(TBROK, NULL, "bin user id doesn't exist");
}
bin = *passwd_p;
bin_gid = bin.pw_gid;
if ((passwd_p = getpwnam("nobody")) == NULL) {
tst_brkm(TBROK, NULL, "nobody user id doesn't exist");
}
nobody = *passwd_p;
nobody_gid = nobody.pw_gid;
/* set the expected errnos... */
TEST_EXP_ENOS(exp_enos);
/* Set real/effective/saved gid to nobody */
if (setresgid(nobody_gid, nobody_gid, nobody_gid) == -1) {
tst_brkm(TBROK, NULL, "setup() failed for setting while"
" setting real/effective/saved gid");
}
/* Set euid to nobody */
if (setuid(nobody.pw_uid) == -1) {
tst_brkm(TBROK, NULL, "setuid failed to "
"to set the effective uid to nodody");
}
/* Pause if that option was specified
* TEST_PAUSE contains the code to fork the test with the -c option.
*/
TEST_PAUSE;
}
/*
* cleanup()
* performs all ONE TIME cleanup for this test at
* completion or premature exit
*/
void cleanup(void)
{
/*
* print timing stats if that option was specified.
* print errno log if that option was specified.
*/
TEST_CLEANUP;
}