djm@openbsd.org | dd36932 | 2017-04-30 23:34:55 +0000 | [diff] [blame] | 1 | # $OpenBSD: connect-privsep.sh,v 1.9 2017/04/30 23:34:55 djm Exp $ |
Damien Miller | 38cd435 | 2002-05-01 13:17:33 +1000 | [diff] [blame] | 2 | # Placed in the Public Domain. |
| 3 | |
| 4 | tid="proxy connect with privsep" |
| 5 | |
Damien Miller | faf4d80 | 2011-08-17 12:09:19 +1000 | [diff] [blame] | 6 | cp $OBJ/sshd_proxy $OBJ/sshd_proxy.orig |
Damien Miller | 38cd435 | 2002-05-01 13:17:33 +1000 | [diff] [blame] | 7 | echo 'UsePrivilegeSeparation yes' >> $OBJ/sshd_proxy |
| 8 | |
djm@openbsd.org | dd36932 | 2017-04-30 23:34:55 +0000 | [diff] [blame] | 9 | ${SSH} -F $OBJ/ssh_proxy 999.999.999.999 true |
| 10 | if [ $? -ne 0 ]; then |
| 11 | fail "ssh privsep+proxyconnect failed" |
| 12 | fi |
Damien Miller | faf4d80 | 2011-08-17 12:09:19 +1000 | [diff] [blame] | 13 | |
| 14 | cp $OBJ/sshd_proxy.orig $OBJ/sshd_proxy |
| 15 | echo 'UsePrivilegeSeparation sandbox' >> $OBJ/sshd_proxy |
| 16 | |
djm@openbsd.org | dd36932 | 2017-04-30 23:34:55 +0000 | [diff] [blame] | 17 | ${SSH} -F $OBJ/ssh_proxy 999.999.999.999 true |
| 18 | if [ $? -ne 0 ]; then |
| 19 | # XXX replace this with fail once sandbox has stabilised |
| 20 | warn "ssh privsep/sandbox+proxyconnect failed" |
| 21 | fi |
Darren Tucker | 2920bc1 | 2012-06-30 15:06:28 +1000 | [diff] [blame] | 22 | |
| 23 | # Because sandbox is sensitive to changes in libc, especially malloc, retest |
| 24 | # with every malloc.conf option (and none). |
Darren Tucker | 732b463 | 2016-03-14 16:04:23 +1100 | [diff] [blame] | 25 | if [ -z "TEST_MALLOC_OPTIONS" ]; then |
tb@openbsd.org | 7da751d | 2016-11-01 13:43:27 +0000 | [diff] [blame] | 26 | mopts="C F G J R S U X < >" |
Darren Tucker | 732b463 | 2016-03-14 16:04:23 +1100 | [diff] [blame] | 27 | else |
| 28 | mopts=`echo $TEST_MALLOC_OPTIONS | sed 's/./& /g'` |
| 29 | fi |
| 30 | for m in '' $mopts ; do |
djm@openbsd.org | dd36932 | 2017-04-30 23:34:55 +0000 | [diff] [blame] | 31 | env MALLOC_OPTIONS="$m" ${SSH} -F $OBJ/ssh_proxy 999.999.999.999 true |
Darren Tucker | 2920bc1 | 2012-06-30 15:06:28 +1000 | [diff] [blame] | 32 | if [ $? -ne 0 ]; then |
djm@openbsd.org | dd36932 | 2017-04-30 23:34:55 +0000 | [diff] [blame] | 33 | fail "ssh privsep/sandbox+proxyconnect mopt '$m' failed" |
Darren Tucker | 2920bc1 | 2012-06-30 15:06:28 +1000 | [diff] [blame] | 34 | fi |
Darren Tucker | 2920bc1 | 2012-06-30 15:06:28 +1000 | [diff] [blame] | 35 | done |