1*d780102eSjmmv //
2*d780102eSjmmv // Automated Testing Framework (atf)
3*d780102eSjmmv //
4*d780102eSjmmv // Copyright (c) 2007 The NetBSD Foundation, Inc.
5*d780102eSjmmv // All rights reserved.
6*d780102eSjmmv //
7*d780102eSjmmv // Redistribution and use in source and binary forms, with or without
8*d780102eSjmmv // modification, are permitted provided that the following conditions
9*d780102eSjmmv // are met:
10*d780102eSjmmv // 1. Redistributions of source code must retain the above copyright
11*d780102eSjmmv // notice, this list of conditions and the following disclaimer.
12*d780102eSjmmv // 2. Redistributions in binary form must reproduce the above copyright
13*d780102eSjmmv // notice, this list of conditions and the following disclaimer in the
14*d780102eSjmmv // documentation and/or other materials provided with the distribution.
15*d780102eSjmmv //
16*d780102eSjmmv // THIS SOFTWARE IS PROVIDED BY THE NETBSD FOUNDATION, INC. AND
17*d780102eSjmmv // CONTRIBUTORS ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES,
18*d780102eSjmmv // INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
19*d780102eSjmmv // MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
20*d780102eSjmmv // IN NO EVENT SHALL THE FOUNDATION OR CONTRIBUTORS BE LIABLE FOR ANY
21*d780102eSjmmv // DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
22*d780102eSjmmv // DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE
23*d780102eSjmmv // GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
24*d780102eSjmmv // INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER
25*d780102eSjmmv // IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR
26*d780102eSjmmv // OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
27*d780102eSjmmv // IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
28*d780102eSjmmv //
29*d780102eSjmmv
30*d780102eSjmmv extern "C" {
31*d780102eSjmmv #include <sys/param.h>
32*d780102eSjmmv #include <sys/types.h>
33*d780102eSjmmv #include <limits.h>
34*d780102eSjmmv #include <unistd.h>
35*d780102eSjmmv }
36*d780102eSjmmv
37*d780102eSjmmv #include <iostream>
38*d780102eSjmmv #include <set>
39*d780102eSjmmv
40*d780102eSjmmv #include <atf-c++.hpp>
41*d780102eSjmmv
42*d780102eSjmmv #include "user.hpp"
43*d780102eSjmmv
44*d780102eSjmmv // ------------------------------------------------------------------------
45*d780102eSjmmv // Test cases for the free functions.
46*d780102eSjmmv // ------------------------------------------------------------------------
47*d780102eSjmmv
48*d780102eSjmmv ATF_TEST_CASE(euid);
ATF_TEST_CASE_HEAD(euid)49*d780102eSjmmv ATF_TEST_CASE_HEAD(euid)
50*d780102eSjmmv {
51*d780102eSjmmv set_md_var("descr", "Tests the euid function");
52*d780102eSjmmv }
ATF_TEST_CASE_BODY(euid)53*d780102eSjmmv ATF_TEST_CASE_BODY(euid)
54*d780102eSjmmv {
55*d780102eSjmmv using tools::user::euid;
56*d780102eSjmmv
57*d780102eSjmmv ATF_REQUIRE_EQ(euid(), ::geteuid());
58*d780102eSjmmv }
59*d780102eSjmmv
60*d780102eSjmmv ATF_TEST_CASE(is_member_of_group);
ATF_TEST_CASE_HEAD(is_member_of_group)61*d780102eSjmmv ATF_TEST_CASE_HEAD(is_member_of_group)
62*d780102eSjmmv {
63*d780102eSjmmv set_md_var("descr", "Tests the is_member_of_group function");
64*d780102eSjmmv }
ATF_TEST_CASE_BODY(is_member_of_group)65*d780102eSjmmv ATF_TEST_CASE_BODY(is_member_of_group)
66*d780102eSjmmv {
67*d780102eSjmmv using tools::user::is_member_of_group;
68*d780102eSjmmv
69*d780102eSjmmv std::set< gid_t > groups;
70*d780102eSjmmv gid_t maxgid = 0;
71*d780102eSjmmv {
72*d780102eSjmmv gid_t gids[NGROUPS_MAX];
73*d780102eSjmmv int ngids = ::getgroups(NGROUPS_MAX, gids);
74*d780102eSjmmv if (ngids == -1)
75*d780102eSjmmv ATF_FAIL("Call to ::getgroups failed");
76*d780102eSjmmv for (int i = 0; i < ngids; i++) {
77*d780102eSjmmv groups.insert(gids[i]);
78*d780102eSjmmv if (gids[i] > maxgid)
79*d780102eSjmmv maxgid = gids[i];
80*d780102eSjmmv }
81*d780102eSjmmv std::cout << "User belongs to " << ngids << " groups\n";
82*d780102eSjmmv std::cout << "Last GID is " << maxgid << "\n";
83*d780102eSjmmv }
84*d780102eSjmmv
85*d780102eSjmmv const gid_t maxgid_limit = 1 << 16;
86*d780102eSjmmv if (maxgid > maxgid_limit) {
87*d780102eSjmmv std::cout << "Test truncated from " << maxgid << " groups to "
88*d780102eSjmmv << maxgid_limit << " to keep the run time reasonable "
89*d780102eSjmmv "enough\n";
90*d780102eSjmmv maxgid = maxgid_limit;
91*d780102eSjmmv }
92*d780102eSjmmv
93*d780102eSjmmv for (gid_t g = 0; g <= maxgid; g++) {
94*d780102eSjmmv if (groups.find(g) == groups.end()) {
95*d780102eSjmmv std::cout << "Checking if user does not belong to group "
96*d780102eSjmmv << g << "\n";
97*d780102eSjmmv ATF_REQUIRE(!is_member_of_group(g));
98*d780102eSjmmv } else {
99*d780102eSjmmv std::cout << "Checking if user belongs to group " << g << "\n";
100*d780102eSjmmv ATF_REQUIRE(is_member_of_group(g));
101*d780102eSjmmv }
102*d780102eSjmmv }
103*d780102eSjmmv }
104*d780102eSjmmv
105*d780102eSjmmv ATF_TEST_CASE(is_root);
ATF_TEST_CASE_HEAD(is_root)106*d780102eSjmmv ATF_TEST_CASE_HEAD(is_root)
107*d780102eSjmmv {
108*d780102eSjmmv set_md_var("descr", "Tests the is_root function");
109*d780102eSjmmv }
ATF_TEST_CASE_BODY(is_root)110*d780102eSjmmv ATF_TEST_CASE_BODY(is_root)
111*d780102eSjmmv {
112*d780102eSjmmv using tools::user::is_root;
113*d780102eSjmmv
114*d780102eSjmmv if (::geteuid() == 0) {
115*d780102eSjmmv ATF_REQUIRE(is_root());
116*d780102eSjmmv } else {
117*d780102eSjmmv ATF_REQUIRE(!is_root());
118*d780102eSjmmv }
119*d780102eSjmmv }
120*d780102eSjmmv
121*d780102eSjmmv ATF_TEST_CASE(is_unprivileged);
ATF_TEST_CASE_HEAD(is_unprivileged)122*d780102eSjmmv ATF_TEST_CASE_HEAD(is_unprivileged)
123*d780102eSjmmv {
124*d780102eSjmmv set_md_var("descr", "Tests the is_unprivileged function");
125*d780102eSjmmv }
ATF_TEST_CASE_BODY(is_unprivileged)126*d780102eSjmmv ATF_TEST_CASE_BODY(is_unprivileged)
127*d780102eSjmmv {
128*d780102eSjmmv using tools::user::is_unprivileged;
129*d780102eSjmmv
130*d780102eSjmmv if (::geteuid() != 0) {
131*d780102eSjmmv ATF_REQUIRE(is_unprivileged());
132*d780102eSjmmv } else {
133*d780102eSjmmv ATF_REQUIRE(!is_unprivileged());
134*d780102eSjmmv }
135*d780102eSjmmv }
136*d780102eSjmmv
137*d780102eSjmmv // ------------------------------------------------------------------------
138*d780102eSjmmv // Main.
139*d780102eSjmmv // ------------------------------------------------------------------------
140*d780102eSjmmv
ATF_INIT_TEST_CASES(tcs)141*d780102eSjmmv ATF_INIT_TEST_CASES(tcs)
142*d780102eSjmmv {
143*d780102eSjmmv // Add the tests for the free functions.
144*d780102eSjmmv ATF_ADD_TEST_CASE(tcs, euid);
145*d780102eSjmmv ATF_ADD_TEST_CASE(tcs, is_member_of_group);
146*d780102eSjmmv ATF_ADD_TEST_CASE(tcs, is_root);
147*d780102eSjmmv ATF_ADD_TEST_CASE(tcs, is_unprivileged);
148*d780102eSjmmv }
149