xref: /openbsd-src/regress/sys/kern/pledge/ioctl/pfioctl2.c (revision 0e59fe4a1c718a4933dd9d458a49498ca0590f17)

/*	$OpenBSD: pfioctl2.c,v 1.3 2022/02/26 20:14:06 bluhm Exp $ */
/*
 * Copyright (c) 2016 Sebastian Benoit <benno@openbsd.org>
 *
 * Permission to use, copy, modify, and distribute this software for any
 * purpose with or without fee is hereby granted, provided that the above
 * copyright notice and this permission notice appear in all copies.
 *
 * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
 * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
 * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
 * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
 * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
 * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
 * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
 */

#include <sys/types.h>
#include <sys/socket.h>
#include <sys/ioctl.h>
#include <net/if.h>
#include <net/pfvar.h>

#include <err.h>
#include <errno.h>
#include <fcntl.h>
#include <stdio.h>
#include <stdlib.h>
#include <unistd.h>

#define PF_SOCKET		"/dev/pf"

int	test_pf_status(int);

int
test_pf_status(int s)
{
	struct pf_status	status;
	int			ret = 0;

	if (ioctl(s, DIOCGETSTATUS, &status) == -1)
		err(1, "%s: DIOCGETSTATUS", __func__);
	if (!status.running)
		warnx("%s: pf is disabled", __func__);

	return (ret);
}


int
main(int argc, char *argv[])
{
	int			s;

	printf("pf ioctl with file opened after pledge fails\n");
	if (pledge("stdio pf", NULL) == -1)
		err(1, "pledge");

	/* this fd is not fdpledged, test should fail */
	if ((s = open(PF_SOCKET, O_RDWR)) == -1) {
		err(1, "%s: cannot open pf socket", __func__);
	}

	test_pf_status(s);
	close(s);
	exit(0);
}