1*ddba0402SEnji Cooper /* $NetBSD: t_o_search.c,v 1.5 2017/01/10 22:25:01 christos Exp $ */ 257718be8SEnji Cooper 357718be8SEnji Cooper /*- 457718be8SEnji Cooper * Copyright (c) 2012 The NetBSD Foundation, Inc. 557718be8SEnji Cooper * All rights reserved. 657718be8SEnji Cooper * 757718be8SEnji Cooper * This code is derived from software contributed to The NetBSD Foundation 857718be8SEnji Cooper * by Emmanuel Dreyfus. 957718be8SEnji Cooper * 1057718be8SEnji Cooper * Redistribution and use in source and binary forms, with or without 1157718be8SEnji Cooper * modification, are permitted provided that the following conditions 1257718be8SEnji Cooper * are met: 1357718be8SEnji Cooper * 1. Redistributions of source code must retain the above copyright 1457718be8SEnji Cooper * notice, this list of conditions and the following disclaimer. 1557718be8SEnji Cooper * 2. Redistributions in binary form must reproduce the above copyright 1657718be8SEnji Cooper * notice, this list of conditions and the following disclaimer in the 1757718be8SEnji Cooper * documentation and/or other materials provided with the distribution. 1857718be8SEnji Cooper * 1957718be8SEnji Cooper * THIS SOFTWARE IS PROVIDED BY THE NETBSD FOUNDATION, INC. AND CONTRIBUTORS 2057718be8SEnji Cooper * ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED 2157718be8SEnji Cooper * TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR 2257718be8SEnji Cooper * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE FOUNDATION OR CONTRIBUTORS 2357718be8SEnji Cooper * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR 2457718be8SEnji Cooper * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF 2557718be8SEnji Cooper * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS 2657718be8SEnji Cooper * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN 2757718be8SEnji Cooper * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) 2857718be8SEnji Cooper * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE 2957718be8SEnji Cooper * POSSIBILITY OF SUCH DAMAGE. 3057718be8SEnji Cooper */ 3157718be8SEnji Cooper #include <sys/cdefs.h> 32*ddba0402SEnji Cooper __RCSID("$NetBSD: t_o_search.c,v 1.5 2017/01/10 22:25:01 christos Exp $"); 3357718be8SEnji Cooper 3457718be8SEnji Cooper #include <atf-c.h> 35*ddba0402SEnji Cooper 36*ddba0402SEnji Cooper #include <sys/param.h> 37*ddba0402SEnji Cooper #include <sys/stat.h> 38*ddba0402SEnji Cooper 3957718be8SEnji Cooper #include <errno.h> 4057718be8SEnji Cooper #include <fcntl.h> 4157718be8SEnji Cooper #include <limits.h> 4257718be8SEnji Cooper #include <paths.h> 4357718be8SEnji Cooper #include <stdio.h> 4457718be8SEnji Cooper #include <string.h> 4557718be8SEnji Cooper #include <unistd.h> 4657718be8SEnji Cooper #include <pwd.h> 4757718be8SEnji Cooper 4857718be8SEnji Cooper /* 4957718be8SEnji Cooper * dholland 20130112: disable tests that require O_SEARCH semantics 5057718be8SEnji Cooper * until a decision is reached about the semantics of O_SEARCH and a 5157718be8SEnji Cooper * non-broken implementation is available. 5257718be8SEnji Cooper */ 5357718be8SEnji Cooper #if (O_MASK & O_SEARCH) != 0 5457718be8SEnji Cooper #define USE_O_SEARCH 5557718be8SEnji Cooper #endif 5657718be8SEnji Cooper 5757718be8SEnji Cooper #define DIR "dir" 5857718be8SEnji Cooper #define FILE "dir/o_search" 5957718be8SEnji Cooper #define BASEFILE "o_search" 6057718be8SEnji Cooper 6157718be8SEnji Cooper 6257718be8SEnji Cooper ATF_TC(o_search_perm1); 6357718be8SEnji Cooper ATF_TC_HEAD(o_search_perm1, tc) 6457718be8SEnji Cooper { 6557718be8SEnji Cooper atf_tc_set_md_var(tc, "descr", "See that openat enforces search permission"); 6657718be8SEnji Cooper atf_tc_set_md_var(tc, "require.user", "unprivileged"); 6757718be8SEnji Cooper } 6857718be8SEnji Cooper ATF_TC_BODY(o_search_perm1, tc) 6957718be8SEnji Cooper { 7057718be8SEnji Cooper int dfd; 7157718be8SEnji Cooper int fd; 7257718be8SEnji Cooper 7357718be8SEnji Cooper ATF_REQUIRE(mkdir(DIR, 0755) == 0); 7457718be8SEnji Cooper ATF_REQUIRE((fd = open(FILE, O_CREAT|O_RDWR, 0644)) != -1); 7557718be8SEnji Cooper ATF_REQUIRE(close(fd) == 0); 7657718be8SEnji Cooper 7757718be8SEnji Cooper ATF_REQUIRE((dfd = open(DIR, O_RDONLY, 0)) != -1); 7857718be8SEnji Cooper 7957718be8SEnji Cooper ATF_REQUIRE((fd = openat(dfd, BASEFILE, O_RDWR, 0)) != -1); 8057718be8SEnji Cooper ATF_REQUIRE(close(fd) == 0); 8157718be8SEnji Cooper 8257718be8SEnji Cooper ATF_REQUIRE(fchmod(dfd, 644) == 0); 8357718be8SEnji Cooper 8457718be8SEnji Cooper ATF_REQUIRE((fd = openat(dfd, BASEFILE, O_RDWR, 0)) == -1); 8557718be8SEnji Cooper ATF_REQUIRE(errno == EACCES); 8657718be8SEnji Cooper 8757718be8SEnji Cooper ATF_REQUIRE(close(dfd) == 0); 8857718be8SEnji Cooper } 8957718be8SEnji Cooper 9057718be8SEnji Cooper #ifdef USE_O_SEARCH 9157718be8SEnji Cooper 9257718be8SEnji Cooper ATF_TC(o_search_root_flag1); 9357718be8SEnji Cooper ATF_TC_HEAD(o_search_root_flag1, tc) 9457718be8SEnji Cooper { 9557718be8SEnji Cooper atf_tc_set_md_var(tc, "descr", "See that root openat honours O_SEARCH"); 9657718be8SEnji Cooper atf_tc_set_md_var(tc, "require.user", "root"); 9757718be8SEnji Cooper } 9857718be8SEnji Cooper ATF_TC_BODY(o_search_root_flag1, tc) 9957718be8SEnji Cooper { 10057718be8SEnji Cooper int dfd; 10157718be8SEnji Cooper int fd; 10257718be8SEnji Cooper 10357718be8SEnji Cooper ATF_REQUIRE(mkdir(DIR, 0755) == 0); 10457718be8SEnji Cooper ATF_REQUIRE((fd = open(FILE, O_CREAT|O_RDWR, 0644)) != -1); 10557718be8SEnji Cooper ATF_REQUIRE(close(fd) == 0); 10657718be8SEnji Cooper 10757718be8SEnji Cooper ATF_REQUIRE((dfd = open(DIR, O_RDONLY|O_SEARCH, 0)) != -1); 10857718be8SEnji Cooper 10957718be8SEnji Cooper ATF_REQUIRE((fd = openat(dfd, BASEFILE, O_RDWR, 0)) != -1); 11057718be8SEnji Cooper ATF_REQUIRE(close(fd) == 0); 11157718be8SEnji Cooper 11257718be8SEnji Cooper ATF_REQUIRE(fchmod(dfd, 644) == 0); 11357718be8SEnji Cooper 11457718be8SEnji Cooper ATF_REQUIRE((fd = openat(dfd, BASEFILE, O_RDWR, 0)) != -1); 11557718be8SEnji Cooper ATF_REQUIRE(close(fd) == 0); 11657718be8SEnji Cooper 11757718be8SEnji Cooper ATF_REQUIRE(fchmod(dfd, 444) == 0); 11857718be8SEnji Cooper 11957718be8SEnji Cooper ATF_REQUIRE((fd = openat(dfd, BASEFILE, O_RDWR, 0)) != -1); 12057718be8SEnji Cooper 12157718be8SEnji Cooper ATF_REQUIRE(close(dfd) == 0); 12257718be8SEnji Cooper } 12357718be8SEnji Cooper 12457718be8SEnji Cooper ATF_TC(o_search_unpriv_flag1); 12557718be8SEnji Cooper ATF_TC_HEAD(o_search_unpriv_flag1, tc) 12657718be8SEnji Cooper { 12757718be8SEnji Cooper atf_tc_set_md_var(tc, "descr", "See that openat honours O_SEARCH"); 12857718be8SEnji Cooper atf_tc_set_md_var(tc, "require.user", "unprivileged"); 12957718be8SEnji Cooper } 13057718be8SEnji Cooper ATF_TC_BODY(o_search_unpriv_flag1, tc) 13157718be8SEnji Cooper { 13257718be8SEnji Cooper int dfd; 13357718be8SEnji Cooper int fd; 13457718be8SEnji Cooper 13557718be8SEnji Cooper ATF_REQUIRE(mkdir(DIR, 0755) == 0); 13657718be8SEnji Cooper ATF_REQUIRE((fd = open(FILE, O_CREAT|O_RDWR, 0644)) != -1); 13757718be8SEnji Cooper ATF_REQUIRE(close(fd) == 0); 13857718be8SEnji Cooper 13957718be8SEnji Cooper ATF_REQUIRE((dfd = open(DIR, O_RDONLY|O_SEARCH, 0)) != -1); 14057718be8SEnji Cooper 14157718be8SEnji Cooper ATF_REQUIRE((fd = openat(dfd, BASEFILE, O_RDWR, 0)) != -1); 14257718be8SEnji Cooper ATF_REQUIRE(close(fd) == 0); 14357718be8SEnji Cooper 14457718be8SEnji Cooper ATF_REQUIRE(fchmod(dfd, 644) == 0); 14557718be8SEnji Cooper 14657718be8SEnji Cooper ATF_REQUIRE((fd = openat(dfd, BASEFILE, O_RDWR, 0)) != -1); 14757718be8SEnji Cooper ATF_REQUIRE(close(fd) == 0); 14857718be8SEnji Cooper 14957718be8SEnji Cooper ATF_REQUIRE(fchmod(dfd, 444) == 0); 15057718be8SEnji Cooper 15157718be8SEnji Cooper ATF_REQUIRE((fd = openat(dfd, BASEFILE, O_RDWR, 0)) != -1); 15257718be8SEnji Cooper 15357718be8SEnji Cooper ATF_REQUIRE(close(dfd) == 0); 15457718be8SEnji Cooper } 15557718be8SEnji Cooper 15657718be8SEnji Cooper #endif /* USE_O_SEARCH */ 15757718be8SEnji Cooper 15857718be8SEnji Cooper ATF_TC(o_search_perm2); 15957718be8SEnji Cooper ATF_TC_HEAD(o_search_perm2, tc) 16057718be8SEnji Cooper { 16157718be8SEnji Cooper atf_tc_set_md_var(tc, "descr", "See that faccessat enforces search permission"); 16257718be8SEnji Cooper atf_tc_set_md_var(tc, "require.user", "unprivileged"); 16357718be8SEnji Cooper } 16457718be8SEnji Cooper ATF_TC_BODY(o_search_perm2, tc) 16557718be8SEnji Cooper { 16657718be8SEnji Cooper int dfd; 16757718be8SEnji Cooper int fd; 16857718be8SEnji Cooper ATF_REQUIRE(mkdir(DIR, 0755) == 0); 16957718be8SEnji Cooper ATF_REQUIRE((fd = open(FILE, O_CREAT|O_RDWR, 0644)) != -1); 17057718be8SEnji Cooper ATF_REQUIRE(close(fd) == 0); 17157718be8SEnji Cooper 17257718be8SEnji Cooper ATF_REQUIRE((dfd = open(DIR, O_RDONLY, 0)) != -1); 17357718be8SEnji Cooper 17457718be8SEnji Cooper ATF_REQUIRE(faccessat(dfd, BASEFILE, W_OK, 0) == 0); 17557718be8SEnji Cooper 17657718be8SEnji Cooper ATF_REQUIRE(fchmod(dfd, 644) == 0); 17757718be8SEnji Cooper 17857718be8SEnji Cooper ATF_REQUIRE(faccessat(dfd, BASEFILE, W_OK, 0) == -1); 17957718be8SEnji Cooper ATF_REQUIRE(errno == EACCES); 18057718be8SEnji Cooper 18157718be8SEnji Cooper ATF_REQUIRE(close(dfd) == 0); 18257718be8SEnji Cooper } 18357718be8SEnji Cooper 18457718be8SEnji Cooper #ifdef USE_O_SEARCH 18557718be8SEnji Cooper 18657718be8SEnji Cooper ATF_TC(o_search_root_flag2); 18757718be8SEnji Cooper ATF_TC_HEAD(o_search_root_flag2, tc) 18857718be8SEnji Cooper { 18957718be8SEnji Cooper atf_tc_set_md_var(tc, "descr", "See that root fstatat honours O_SEARCH"); 19057718be8SEnji Cooper atf_tc_set_md_var(tc, "require.user", "root"); 19157718be8SEnji Cooper } 19257718be8SEnji Cooper ATF_TC_BODY(o_search_root_flag2, tc) 19357718be8SEnji Cooper { 19457718be8SEnji Cooper int dfd; 19557718be8SEnji Cooper int fd; 19657718be8SEnji Cooper 19757718be8SEnji Cooper ATF_REQUIRE(mkdir(DIR, 0755) == 0); 19857718be8SEnji Cooper ATF_REQUIRE((fd = open(FILE, O_CREAT|O_RDWR, 0644)) != -1); 19957718be8SEnji Cooper ATF_REQUIRE(close(fd) == 0); 20057718be8SEnji Cooper 20157718be8SEnji Cooper ATF_REQUIRE((dfd = open(DIR, O_RDONLY|O_SEARCH, 0)) != -1); 20257718be8SEnji Cooper 20357718be8SEnji Cooper ATF_REQUIRE(faccessat(dfd, BASEFILE, W_OK, 0) == 0); 20457718be8SEnji Cooper 20557718be8SEnji Cooper ATF_REQUIRE(fchmod(dfd, 644) == 0); 20657718be8SEnji Cooper 20757718be8SEnji Cooper ATF_REQUIRE(faccessat(dfd, BASEFILE, W_OK, 0) == 0); 20857718be8SEnji Cooper 20957718be8SEnji Cooper ATF_REQUIRE(fchmod(dfd, 444) == 0); 21057718be8SEnji Cooper 21157718be8SEnji Cooper ATF_REQUIRE(faccessat(dfd, BASEFILE, W_OK, 0) == 0); 21257718be8SEnji Cooper 21357718be8SEnji Cooper ATF_REQUIRE(close(dfd) == 0); 21457718be8SEnji Cooper } 21557718be8SEnji Cooper 21657718be8SEnji Cooper ATF_TC(o_search_unpriv_flag2); 21757718be8SEnji Cooper ATF_TC_HEAD(o_search_unpriv_flag2, tc) 21857718be8SEnji Cooper { 21957718be8SEnji Cooper atf_tc_set_md_var(tc, "descr", "See that fstatat honours O_SEARCH"); 22057718be8SEnji Cooper atf_tc_set_md_var(tc, "require.user", "unprivileged"); 22157718be8SEnji Cooper } 22257718be8SEnji Cooper ATF_TC_BODY(o_search_unpriv_flag2, tc) 22357718be8SEnji Cooper { 22457718be8SEnji Cooper int dfd; 22557718be8SEnji Cooper int fd; 22657718be8SEnji Cooper 22757718be8SEnji Cooper ATF_REQUIRE(mkdir(DIR, 0755) == 0); 22857718be8SEnji Cooper ATF_REQUIRE((fd = open(FILE, O_CREAT|O_RDWR, 0644)) != -1); 22957718be8SEnji Cooper ATF_REQUIRE(close(fd) == 0); 23057718be8SEnji Cooper 23157718be8SEnji Cooper ATF_REQUIRE((dfd = open(DIR, O_RDONLY|O_SEARCH, 0)) != -1); 23257718be8SEnji Cooper 23357718be8SEnji Cooper ATF_REQUIRE(faccessat(dfd, BASEFILE, W_OK, 0) == 0); 23457718be8SEnji Cooper 23557718be8SEnji Cooper ATF_REQUIRE(fchmod(dfd, 644) == 0); 23657718be8SEnji Cooper 23757718be8SEnji Cooper ATF_REQUIRE(faccessat(dfd, BASEFILE, W_OK, 0) == 0); 23857718be8SEnji Cooper 23957718be8SEnji Cooper ATF_REQUIRE(fchmod(dfd, 444) == 0); 24057718be8SEnji Cooper 24157718be8SEnji Cooper ATF_REQUIRE(faccessat(dfd, BASEFILE, W_OK, 0) == 0); 24257718be8SEnji Cooper 24357718be8SEnji Cooper ATF_REQUIRE(close(dfd) == 0); 24457718be8SEnji Cooper } 24557718be8SEnji Cooper 24657718be8SEnji Cooper #endif /* USE_O_SEARCH */ 24757718be8SEnji Cooper 24857718be8SEnji Cooper 24957718be8SEnji Cooper ATF_TC(o_search_notdir); 25057718be8SEnji Cooper ATF_TC_HEAD(o_search_notdir, tc) 25157718be8SEnji Cooper { 25257718be8SEnji Cooper atf_tc_set_md_var(tc, "descr", "See that openat fails with non dir fd"); 25357718be8SEnji Cooper } 25457718be8SEnji Cooper ATF_TC_BODY(o_search_notdir, tc) 25557718be8SEnji Cooper { 25657718be8SEnji Cooper int dfd; 25757718be8SEnji Cooper int fd; 25857718be8SEnji Cooper 25957718be8SEnji Cooper ATF_REQUIRE(mkdir(DIR, 0755) == 0); 26057718be8SEnji Cooper ATF_REQUIRE((dfd = open(FILE, O_CREAT|O_RDWR|O_SEARCH, 0644)) != -1); 26157718be8SEnji Cooper ATF_REQUIRE((fd = openat(dfd, BASEFILE, O_RDWR, 0)) == -1); 26257718be8SEnji Cooper ATF_REQUIRE(errno == ENOTDIR); 26357718be8SEnji Cooper } 26457718be8SEnji Cooper 26557718be8SEnji Cooper ATF_TP_ADD_TCS(tp) 26657718be8SEnji Cooper { 26757718be8SEnji Cooper 26857718be8SEnji Cooper ATF_TP_ADD_TC(tp, o_search_perm1); 26957718be8SEnji Cooper #ifdef USE_O_SEARCH 27057718be8SEnji Cooper ATF_TP_ADD_TC(tp, o_search_root_flag1); 27157718be8SEnji Cooper ATF_TP_ADD_TC(tp, o_search_unpriv_flag1); 27257718be8SEnji Cooper #endif 27357718be8SEnji Cooper ATF_TP_ADD_TC(tp, o_search_perm2); 27457718be8SEnji Cooper #ifdef USE_O_SEARCH 27557718be8SEnji Cooper ATF_TP_ADD_TC(tp, o_search_root_flag2); 27657718be8SEnji Cooper ATF_TP_ADD_TC(tp, o_search_unpriv_flag2); 27757718be8SEnji Cooper #endif 27857718be8SEnji Cooper ATF_TP_ADD_TC(tp, o_search_notdir); 27957718be8SEnji Cooper 28057718be8SEnji Cooper return atf_no_error(); 28157718be8SEnji Cooper } 282