security/cap_test/cap_test_capabilities.c

124 	int ret, is_nfs;
187 	ret = openat(dfd_cap, "cap_create", O_CREAT | O_RDONLY, 0600);
189 	    CAP_CREATE | CAP_READ | CAP_LOOKUP, ret >= 0);
190 	CHECK(ret == -1 || close(ret) == 0);
191 	CHECK(ret == -1 || unlinkat(dirfd, "cap_create", 0) == 0);
192 	ret = openat(dfd_cap, "cap_create", O_CREAT | O_WRONLY | O_APPEND,
195 	    CAP_CREATE | CAP_WRITE | CAP_LOOKUP, ret >= 0);
196 	CHECK(ret == -1 || close(ret) == 0);
197 	CHECK(ret == -1 || unlinkat(dirfd, "cap_create", 0) == 0);
198 	ret = openat(dfd_cap, "cap_create", O_CREAT | O_RDWR | O_APPEND, 0600);
200 	    CAP_CREATE | CAP_READ | CAP_WRITE | CAP_LOOKUP, ret >= 0);
201 	CHECK(ret == -1 || close(ret) == 0);
202 	CHECK(ret == -1 || unlinkat(dirfd, "cap_create", 0) == 0);
204 	ret = fsync(fd_cap);
205 	CHECK_RESULT(fsync, CAP_FSYNC, ret == 0);
207 	ret = openat(dirfd, "cap_fsync", O_CREAT, 0600);
208 	CHECK(ret >= 0);
209 	CHECK(close(ret) == 0);
210 	ret = openat(dfd_cap, "cap_fsync", O_FSYNC | O_RDONLY);
212 	    CAP_FSYNC | CAP_READ | CAP_LOOKUP, ret >= 0);
213 	CHECK(ret == -1 || close(ret) == 0);
214 	ret = openat(dfd_cap, "cap_fsync", O_FSYNC | O_WRONLY | O_APPEND);
216 	    CAP_FSYNC | CAP_WRITE | CAP_LOOKUP, ret >= 0);
217 	CHECK(ret == -1 || close(ret) == 0);
218 	ret = openat(dfd_cap, "cap_fsync", O_FSYNC | O_RDWR | O_APPEND);
220 	    CAP_FSYNC | CAP_READ | CAP_WRITE | CAP_LOOKUP, ret >= 0);
221 	CHECK(ret == -1 || close(ret) == 0);
222 	ret = openat(dfd_cap, "cap_fsync", O_SYNC | O_RDONLY);
224 	    CAP_FSYNC | CAP_READ | CAP_LOOKUP, ret >= 0);
225 	CHECK(ret == -1 || close(ret) == 0);
226 	ret = openat(dfd_cap, "cap_fsync", O_SYNC | O_WRONLY | O_APPEND);
228 	    CAP_FSYNC | CAP_WRITE | CAP_LOOKUP, ret >= 0);
229 	CHECK(ret == -1 || close(ret) == 0);
230 	ret = openat(dfd_cap, "cap_fsync", O_SYNC | O_RDWR | O_APPEND);
232 	    CAP_FSYNC | CAP_READ | CAP_WRITE | CAP_LOOKUP, ret >= 0);
233 	CHECK(ret == -1 || close(ret) == 0);
236 	ret = ftruncate(fd_cap, 0);
237 	CHECK_RESULT(ftruncate, CAP_FTRUNCATE, ret == 0);
239 	ret = openat(dirfd, "cap_ftruncate", O_CREAT, 0600);
240 	CHECK(ret >= 0);
241 	CHECK(close(ret) == 0);
242 	ret = openat(dfd_cap, "cap_ftruncate", O_TRUNC | O_RDONLY);
244 	    CAP_FTRUNCATE | CAP_READ | CAP_LOOKUP, ret >= 0);
245 	CHECK(ret == -1 || close(ret) == 0);
246 	ret = openat(dfd_cap, "cap_ftruncate", O_TRUNC | O_WRONLY);
248 	    CAP_FTRUNCATE | CAP_WRITE | CAP_LOOKUP, ret >= 0);
249 	CHECK(ret == -1 || close(ret) == 0);
250 	ret = openat(dfd_cap, "cap_ftruncate", O_TRUNC | O_RDWR);
252 	    CAP_FTRUNCATE | CAP_READ | CAP_WRITE | CAP_LOOKUP, ret >= 0);
253 	CHECK(ret == -1 || close(ret) == 0);
256 	ret = openat(dfd_cap, "cap_create", O_CREAT | O_WRONLY, 0600);
258 	    CAP_CREATE | CAP_WRITE | CAP_SEEK | CAP_LOOKUP, ret >= 0);
259 	CHECK(ret == -1 || close(ret) == 0);
260 	CHECK(ret == -1 || unlinkat(dirfd, "cap_create", 0) == 0);
261 	ret = openat(dfd_cap, "cap_create", O_CREAT | O_RDWR, 0600);
264 	    ret >= 0);
265 	CHECK(ret == -1 || close(ret) == 0);
266 	CHECK(ret == -1 || unlinkat(dirfd, "cap_create", 0) == 0);
268 	ret = openat(dirfd, "cap_fsync", O_CREAT, 0600);
269 	CHECK(ret >= 0);
270 	CHECK(close(ret) == 0);
271 	ret = openat(dfd_cap, "cap_fsync", O_FSYNC | O_WRONLY);
273 	    CAP_FSYNC | CAP_WRITE | CAP_SEEK | CAP_LOOKUP, ret >= 0);
274 	CHECK(ret == -1 || close(ret) == 0);
275 	ret = openat(dfd_cap, "cap_fsync", O_FSYNC | O_RDWR);
277 	    CAP_FSYNC | CAP_READ | CAP_WRITE | CAP_SEEK | CAP_LOOKUP, ret >= 0);
278 	CHECK(ret == -1 || close(ret) == 0);
279 	ret = openat(dfd_cap, "cap_fsync", O_SYNC | O_WRONLY);
281 	    CAP_FSYNC | CAP_WRITE | CAP_SEEK | CAP_LOOKUP, ret >= 0);
282 	CHECK(ret == -1 || close(ret) == 0);
283 	ret = openat(dfd_cap, "cap_fsync", O_SYNC | O_RDWR);
285 	    CAP_FSYNC | CAP_READ | CAP_WRITE | CAP_SEEK | CAP_LOOKUP, ret >= 0);
286 	CHECK(ret == -1 || close(ret) == 0);
292 	ret = fchflags(fd_cap, UF_NODUMP);
294 	    ret == 0 || (is_nfs && errno == EOPNOTSUPP));
296 	ret = openat(dirfd, "cap_chflagsat", O_CREAT, 0600);
297 	CHECK(ret >= 0);
298 	CHECK(close(ret) == 0);
299 	ret = chflagsat(dfd_cap, "cap_chflagsat", UF_NODUMP, 0);
300 	CHECK_RESULT(chflagsat, CAP_CHFLAGSAT | CAP_LOOKUP, ret == 0);
303 	ret = fchown(fd_cap, -1, -1);
304 	CHECK_RESULT(fchown, CAP_FCHOWN, ret == 0);
306 	ret = openat(dirfd, "cap_fchownat", O_CREAT, 0600);
307 	CHECK(ret >= 0);
308 	CHECK(close(ret) == 0);
309 	ret = fchownat(dfd_cap, "cap_fchownat", -1, -1, 0);
310 	CHECK_RESULT(fchownat, CAP_FCHOWN | CAP_LOOKUP, ret == 0);
313 	ret = fchmod(fd_cap, 0644);
314 	CHECK_RESULT(fchmod, CAP_FCHMOD, ret == 0);
316 	ret = openat(dirfd, "cap_fchmodat", O_CREAT, 0600);
317 	CHECK(ret >= 0);
318 	CHECK(close(ret) == 0);
319 	ret = fchmodat(dfd_cap, "cap_fchmodat", 0600, 0);
320 	CHECK_RESULT(fchmodat, CAP_FCHMOD | CAP_LOOKUP, ret == 0);
323 	ret = fcntl(fd_cap, F_GETFL);
324 	CHECK_RESULT(fcntl(F_GETFL), CAP_FCNTL, ret >= 0);
325 	ret = fcntl(fd_cap, F_SETFL, ret);
326 	CHECK_RESULT(fcntl(F_SETFL), CAP_FCNTL, ret == 0);
330 	ret = fstat(fd_cap, &sb);
331 	CHECK_RESULT(fstat, CAP_FSTAT, ret == 0);
333 	ret = openat(dirfd, "cap_fstatat", O_CREAT, 0600);
334 	CHECK(ret >= 0);
335 	CHECK(close(ret) == 0);
336 	ret = fstatat(dfd_cap, "cap_fstatat", &sb, 0);
337 	CHECK_RESULT(fstatat, CAP_FSTAT | CAP_LOOKUP, ret == 0);
340 	ret = fstatfs(fd_cap, &sf);
341 	CHECK_RESULT(fstatfs, CAP_FSTATFS, ret == 0);
343 	ret = fpathconf(fd_cap, _PC_NAME_MAX);
344 	CHECK_RESULT(fpathconf, CAP_FPATHCONF, ret >= 0);
346 	ret = futimes(fd_cap, NULL);
347 	CHECK_RESULT(futimes, CAP_FUTIMES, ret == 0);
349 	ret = openat(dirfd, "cap_futimesat", O_CREAT, 0600);
350 	CHECK(ret >= 0);
351 	CHECK(close(ret) == 0);
352 	ret = futimesat(dfd_cap, "cap_futimesat", NULL);
353 	CHECK_RESULT(futimesat, CAP_FUTIMES | CAP_LOOKUP, ret == 0);
356 	ret = openat(dirfd, "cap_linkat_src", O_CREAT, 0600);
357 	CHECK(ret >= 0);
358 	CHECK(close(ret) == 0);
359 	ret = linkat(dirfd, "cap_linkat_src", dfd_cap, "cap_linkat_dst", 0);
360 	CHECK_RESULT(linkat, CAP_LINKAT | CAP_LOOKUP, ret == 0);
362 	CHECK(ret == -1 || unlinkat(dirfd, "cap_linkat_dst", 0) == 0);
364 	ret = mkdirat(dfd_cap, "cap_mkdirat", 0700);
365 	CHECK_RESULT(mkdirat, CAP_MKDIRAT | CAP_LOOKUP, ret == 0);
366 	CHECK(ret == -1 || unlinkat(dirfd, "cap_mkdirat", AT_REMOVEDIR) == 0);
368 	ret = mkfifoat(dfd_cap, "cap_mkfifoat", 0600);
369 	CHECK_RESULT(mkfifoat, CAP_MKFIFOAT | CAP_LOOKUP, ret == 0);
370 	CHECK(ret == -1 || unlinkat(dirfd, "cap_mkfifoat", 0) == 0);
372 	ret = mknodat(dfd_cap, "cap_mknodat", S_IFCHR | 0600, 0);
373 	CHECK_RESULT(mknodat, CAP_MKNODAT | CAP_LOOKUP, ret == 0);
374 	CHECK(ret == -1 || unlinkat(dirfd, "cap_mknodat", 0) == 0);
378 	ret = symlinkat("test", dfd_cap, "cap_symlinkat");
379 	CHECK_RESULT(symlinkat, CAP_SYMLINKAT | CAP_LOOKUP, ret == 0);
380 	CHECK(ret == -1 || unlinkat(dirfd, "cap_symlinkat", 0) == 0);
382 	ret = openat(dirfd, "cap_unlinkat", O_CREAT, 0600);
383 	CHECK(ret >= 0);
384 	CHECK(close(ret) == 0);
385 	ret = unlinkat(dfd_cap, "cap_unlinkat", 0);
386 	CHECK_RESULT(unlinkat, CAP_UNLINKAT | CAP_LOOKUP, ret == 0);
387 	CHECK(ret == 0 || unlinkat(dirfd, "cap_unlinkat", 0) == 0);
388 	ret = mkdirat(dirfd, "cap_unlinkat", 0700);
389 	CHECK(ret == 0);
390 	ret = unlinkat(dfd_cap, "cap_unlinkat", AT_REMOVEDIR);
391 	CHECK_RESULT(unlinkat, CAP_UNLINKAT | CAP_LOOKUP, ret == 0);
392 	CHECK(ret == 0 || unlinkat(dirfd, "cap_unlinkat", AT_REMOVEDIR) == 0);
398 	ret = poll(&pollfd, 1, 0);