cap_grp/tests/grp_test.c

137 runtest_cmds(cap_channel_t *capgrp)
147 	if (cap_setgrent(capgrp) == 1)
151 	grpc = cap_getgrent(capgrp);
155 		grpc = cap_getgrent(capgrp);
161 	cap_getgrent_r(capgrp, &stc, bufc, sizeof(bufc), &grpc);
165 		cap_getgrent_r(capgrp, &stc, bufc, sizeof(bufc), &grpc);
171 	if (cap_setgrent(capgrp) == 1)
175 	cap_getgrent_r(capgrp, &stc, bufc, sizeof(bufc), &grpc);
180 	grpc = cap_getgrent(capgrp);
185 	grpc = cap_getgrnam(capgrp, "wheel");
188 		grpc = cap_getgrnam(capgrp, "operator");
194 	cap_getgrnam_r(capgrp, "wheel", &stc, bufc, sizeof(bufc), &grpc);
197 		cap_getgrnam_r(capgrp, "operator", &stc, bufc, sizeof(bufc),
204 	grpc = cap_getgrgid(capgrp, GID_WHEEL);
207 		grpc = cap_getgrgid(capgrp, GID_OPERATOR);
213 	cap_getgrgid_r(capgrp, GID_WHEEL, &stc, bufc, sizeof(bufc), &grpc);
216 		cap_getgrgid_r(capgrp, GID_OPERATOR, &stc, bufc, sizeof(bufc),
228 	cap_channel_t *capgrp;
258 	capgrp = cap_clone(origcapgrp);
259 	CHECK(capgrp != NULL);
268 	CHECK(cap_grp_limit_cmds(capgrp, cmds, 7) == 0);
269 	CHECK(cap_grp_limit_fields(capgrp, fields, 4) == 0);
270 	CHECK(cap_grp_limit_groups(capgrp, names, 5, NULL, 0) == 0);
272 	CHECK(runtest_cmds(capgrp) == (SETGRENT | GETGRENT | GETGRENT_R |
275 	cap_close(capgrp);
286 	capgrp = cap_clone(origcapgrp);
287 	CHECK(capgrp != NULL);
296 	CHECK(cap_grp_limit_cmds(capgrp, cmds, 7) == 0);
297 	CHECK(cap_grp_limit_fields(capgrp, fields, 4) == 0);
298 	CHECK(cap_grp_limit_groups(capgrp, NULL, 0, gids, 5) == 0);
300 	CHECK(runtest_cmds(capgrp) == (SETGRENT | GETGRENT | GETGRENT_R |
303 	cap_close(capgrp);
318 	capgrp = cap_clone(origcapgrp);
319 	CHECK(capgrp != NULL);
327 	CHECK(cap_grp_limit_cmds(capgrp, cmds, 6) == 0);
335 	CHECK(cap_grp_limit_cmds(capgrp, cmds, 7) == -1 && errno == ENOTCAPABLE);
337 	CHECK(cap_grp_limit_cmds(capgrp, cmds, 1) == -1 && errno == ENOTCAPABLE);
338 	CHECK(cap_grp_limit_groups(capgrp, names, 5, NULL, 0) == 0);
340 	CHECK(runtest_cmds(capgrp) == (GETGRENT0 | GETGRENT1 | GETGRENT_R0 |
343 	cap_close(capgrp);
358 	capgrp = cap_clone(origcapgrp);
359 	CHECK(capgrp != NULL);
367 	CHECK(cap_grp_limit_cmds(capgrp, cmds, 6) == 0);
375 	CHECK(cap_grp_limit_cmds(capgrp, cmds, 7) == -1 && errno == ENOTCAPABLE);
377 	CHECK(cap_grp_limit_cmds(capgrp, cmds, 1) == -1 && errno == ENOTCAPABLE);
378 	CHECK(cap_grp_limit_groups(capgrp, NULL, 0, gids, 5) == 0);
380 	CHECK(runtest_cmds(capgrp) == (GETGRENT0 | GETGRENT1 | GETGRENT_R0 |
383 	cap_close(capgrp);
398 	capgrp = cap_clone(origcapgrp);
399 	CHECK(capgrp != NULL);
407 	CHECK(cap_grp_limit_cmds(capgrp, cmds, 6) == 0);
415 	CHECK(cap_grp_limit_cmds(capgrp, cmds, 7) == -1 && errno == ENOTCAPABLE);
417 	CHECK(cap_grp_limit_cmds(capgrp, cmds, 1) == -1 && errno == ENOTCAPABLE);
418 	CHECK(cap_grp_limit_fields(capgrp, fields, 4) == 0);
419 	CHECK(cap_grp_limit_groups(capgrp, names, 5, NULL, 0) == 0);
421 	CHECK(runtest_cmds(capgrp) == (SETGRENT | GETGRENT_R2 |
424 	cap_close(capgrp);
439 	capgrp = cap_clone(origcapgrp);
440 	CHECK(capgrp != NULL);
448 	CHECK(cap_grp_limit_cmds(capgrp, cmds, 6) == 0);
456 	CHECK(cap_grp_limit_cmds(capgrp, cmds, 7) == -1 && errno == ENOTCAPABLE);
458 	CHECK(cap_grp_limit_cmds(capgrp, cmds, 1) == -1 && errno == ENOTCAPABLE);
459 	CHECK(cap_grp_limit_fields(capgrp, fields, 4) == 0);
460 	CHECK(cap_grp_limit_groups(capgrp, NULL, 0, gids, 5) == 0);
462 	CHECK(runtest_cmds(capgrp) == (SETGRENT | GETGRENT_R2 |
465 	cap_close(capgrp);
480 	capgrp = cap_clone(origcapgrp);
481 	CHECK(capgrp != NULL);
489 	CHECK(cap_grp_limit_cmds(capgrp, cmds, 6) == 0);
497 	CHECK(cap_grp_limit_cmds(capgrp, cmds, 7) == -1 && errno == ENOTCAPABLE);
499 	CHECK(cap_grp_limit_cmds(capgrp, cmds, 1) == -1 && errno == ENOTCAPABLE);
500 	CHECK(cap_grp_limit_groups(capgrp, names, 5, NULL, 0) == 0);
502 	CHECK(runtest_cmds(capgrp) == (SETGRENT | GETGRENT0 | GETGRENT1 |
505 	cap_close(capgrp);
520 	capgrp = cap_clone(origcapgrp);
521 	CHECK(capgrp != NULL);
529 	CHECK(cap_grp_limit_cmds(capgrp, cmds, 6) == 0);
537 	CHECK(cap_grp_limit_cmds(capgrp, cmds, 7) == -1 && errno == ENOTCAPABLE);
539 	CHECK(cap_grp_limit_cmds(capgrp, cmds, 1) == -1 && errno == ENOTCAPABLE);
540 	CHECK(cap_grp_limit_groups(capgrp, NULL, 0, gids, 5) == 0);
542 	CHECK(runtest_cmds(capgrp) == (SETGRENT | GETGRENT0 | GETGRENT1 |
545 	cap_close(capgrp);
560 	capgrp = cap_clone(origcapgrp);
561 	CHECK(capgrp != NULL);
569 	CHECK(cap_grp_limit_cmds(capgrp, cmds, 6) == 0);
577 	CHECK(cap_grp_limit_cmds(capgrp, cmds, 7) == -1 && errno == ENOTCAPABLE);
579 	CHECK(cap_grp_limit_cmds(capgrp, cmds, 1) == -1 && errno == ENOTCAPABLE);
580 	CHECK(cap_grp_limit_fields(capgrp, fields, 4) == 0);
581 	CHECK(cap_grp_limit_groups(capgrp, names, 5, NULL, 0) == 0);
583 	CHECK(runtest_cmds(capgrp) == (SETGRENT | GETGRENT | GETGRENT_R |
586 	cap_close(capgrp);
601 	capgrp = cap_clone(origcapgrp);
602 	CHECK(capgrp != NULL);
610 	CHECK(cap_grp_limit_cmds(capgrp, cmds, 6) == 0);
618 	CHECK(cap_grp_limit_cmds(capgrp, cmds, 7) == -1 && errno == ENOTCAPABLE);
620 	CHECK(cap_grp_limit_cmds(capgrp, cmds, 1) == -1 && errno == ENOTCAPABLE);
621 	CHECK(cap_grp_limit_fields(capgrp, fields, 4) == 0);
622 	CHECK(cap_grp_limit_groups(capgrp, NULL, 0, gids, 5) == 0);
624 	CHECK(runtest_cmds(capgrp) == (SETGRENT | GETGRENT | GETGRENT_R |
627 	cap_close(capgrp);
642 	capgrp = cap_clone(origcapgrp);
643 	CHECK(capgrp != NULL);
651 	CHECK(cap_grp_limit_cmds(capgrp, cmds, 6) == 0);
659 	CHECK(cap_grp_limit_cmds(capgrp, cmds, 7) == -1 && errno == ENOTCAPABLE);
661 	CHECK(cap_grp_limit_cmds(capgrp, cmds, 1) == -1 && errno == ENOTCAPABLE);
662 	CHECK(cap_grp_limit_groups(capgrp, names, 5, NULL, 0) == 0);
664 	CHECK(runtest_cmds(capgrp) == (SETGRENT | GETGRENT | GETGRENT_R |
667 	cap_close(capgrp);
682 	capgrp = cap_clone(origcapgrp);
683 	CHECK(capgrp != NULL);
691 	CHECK(cap_grp_limit_cmds(capgrp, cmds, 6) == 0);
699 	CHECK(cap_grp_limit_cmds(capgrp, cmds, 7) == -1 && errno == ENOTCAPABLE);
701 	CHECK(cap_grp_limit_cmds(capgrp, cmds, 1) == -1 && errno == ENOTCAPABLE);
702 	CHECK(cap_grp_limit_groups(capgrp, NULL, 0, gids, 5) == 0);
704 	CHECK(runtest_cmds(capgrp) == (SETGRENT | GETGRENT | GETGRENT_R |
707 	cap_close(capgrp);
722 	capgrp = cap_clone(origcapgrp);
723 	CHECK(capgrp != NULL);
731 	CHECK(cap_grp_limit_cmds(capgrp, cmds, 6) == 0);
739 	CHECK(cap_grp_limit_cmds(capgrp, cmds, 7) == -1 && errno == ENOTCAPABLE);
741 	CHECK(cap_grp_limit_cmds(capgrp, cmds, 1) == -1 && errno == ENOTCAPABLE);
742 	CHECK(cap_grp_limit_fields(capgrp, fields, 4) == 0);
743 	CHECK(cap_grp_limit_groups(capgrp, names, 5, NULL, 0) == 0);
745 	CHECK(runtest_cmds(capgrp) == (SETGRENT | GETGRENT | GETGRENT_R |
748 	cap_close(capgrp);
763 	capgrp = cap_clone(origcapgrp);
764 	CHECK(capgrp != NULL);
772 	CHECK(cap_grp_limit_cmds(capgrp, cmds, 6) == 0);
780 	CHECK(cap_grp_limit_cmds(capgrp, cmds, 7) == -1 && errno == ENOTCAPABLE);
782 	CHECK(cap_grp_limit_cmds(capgrp, cmds, 1) == -1 && errno == ENOTCAPABLE);
783 	CHECK(cap_grp_limit_fields(capgrp, fields, 4) == 0);
784 	CHECK(cap_grp_limit_groups(capgrp, NULL, 0, gids, 5) == 0);
786 	CHECK(runtest_cmds(capgrp) == (SETGRENT | GETGRENT | GETGRENT_R |
789 	cap_close(capgrp);
804 	capgrp = cap_clone(origcapgrp);
805 	CHECK(capgrp != NULL);
813 	CHECK(cap_grp_limit_cmds(capgrp, cmds, 6) == 0);
821 	CHECK(cap_grp_limit_cmds(capgrp, cmds, 7) == -1 && errno == ENOTCAPABLE);
823 	CHECK(cap_grp_limit_cmds(capgrp, cmds, 1) == -1 && errno == ENOTCAPABLE);
824 	CHECK(cap_grp_limit_groups(capgrp, names, 5, NULL, 0) == 0);
826 	CHECK(runtest_cmds(capgrp) == (SETGRENT | GETGRENT | GETGRENT_R |
829 	cap_close(capgrp);
844 	capgrp = cap_clone(origcapgrp);
845 	CHECK(capgrp != NULL);
853 	CHECK(cap_grp_limit_cmds(capgrp, cmds, 6) == 0);
861 	CHECK(cap_grp_limit_cmds(capgrp, cmds, 7) == -1 && errno == ENOTCAPABLE);
863 	CHECK(cap_grp_limit_cmds(capgrp, cmds, 1) == -1 && errno == ENOTCAPABLE);
864 	CHECK(cap_grp_limit_groups(capgrp, NULL, 0, gids, 5) == 0);
866 	CHECK(runtest_cmds(capgrp) == (SETGRENT | GETGRENT | GETGRENT_R |
869 	cap_close(capgrp);
900 runtest_fields(cap_channel_t *capgrp, unsigned int expected)
906 	(void)cap_setgrent(capgrp);
907 	grp = cap_getgrent(capgrp);
911 	(void)cap_setgrent(capgrp);
912 	cap_getgrent_r(capgrp, &st, buf, sizeof(buf), &grp);
916 	grp = cap_getgrnam(capgrp, "wheel");
920 	cap_getgrnam_r(capgrp, "wheel", &st, buf, sizeof(buf), &grp);
924 	grp = cap_getgrgid(capgrp, GID_WHEEL);
928 	cap_getgrgid_r(capgrp, GID_WHEEL, &st, buf, sizeof(buf), &grp);
938 	cap_channel_t *capgrp;
949 	capgrp = cap_clone(origcapgrp);
950 	CHECK(capgrp != NULL);
956 	CHECK(cap_grp_limit_fields(capgrp, fields, 4) == 0);
958 	CHECK(runtest_fields(capgrp, GR_NAME | GR_PASSWD | GR_GID | GR_MEM));
960 	cap_close(capgrp);
966 	capgrp = cap_clone(origcapgrp);
967 	CHECK(capgrp != NULL);
972 	CHECK(cap_grp_limit_fields(capgrp, fields, 3) == 0);
977 	CHECK(cap_grp_limit_fields(capgrp, fields, 4) == -1 &&
980 	CHECK(runtest_fields(capgrp, GR_PASSWD | GR_GID | GR_MEM));
982 	cap_close(capgrp);
988 	capgrp = cap_clone(origcapgrp);
989 	CHECK(capgrp != NULL);
994 	CHECK(cap_grp_limit_fields(capgrp, fields, 3) == 0);
999 	CHECK(cap_grp_limit_fields(capgrp, fields, 4) == -1 &&
1002 	CHECK(cap_grp_limit_fields(capgrp, fields, 1) == -1 &&
1005 	CHECK(runtest_fields(capgrp, GR_NAME | GR_GID | GR_MEM));
1007 	cap_close(capgrp);
1013 	capgrp = cap_clone(origcapgrp);
1014 	CHECK(capgrp != NULL);
1019 	CHECK(cap_grp_limit_fields(capgrp, fields, 3) == 0);
1024 	CHECK(cap_grp_limit_fields(capgrp, fields, 4) == -1 &&
1027 	CHECK(cap_grp_limit_fields(capgrp, fields, 1) == -1 &&
1030 	CHECK(runtest_fields(capgrp, GR_NAME | GR_PASSWD | GR_MEM));
1032 	cap_close(capgrp);
1038 	capgrp = cap_clone(origcapgrp);
1039 	CHECK(capgrp != NULL);
1044 	CHECK(cap_grp_limit_fields(capgrp, fields, 3) == 0);
1049 	CHECK(cap_grp_limit_fields(capgrp, fields, 4) == -1 &&
1052 	CHECK(cap_grp_limit_fields(capgrp, fields, 1) == -1 &&
1055 	CHECK(runtest_fields(capgrp, GR_NAME | GR_PASSWD | GR_GID));
1057 	cap_close(capgrp);
1063 	capgrp = cap_clone(origcapgrp);
1064 	CHECK(capgrp != NULL);
1068 	CHECK(cap_grp_limit_fields(capgrp, fields, 2) == 0);
1073 	CHECK(cap_grp_limit_fields(capgrp, fields, 4) == -1 &&
1076 	CHECK(cap_grp_limit_fields(capgrp, fields, 1) == -1 &&
1079 	CHECK(runtest_fields(capgrp, GR_NAME | GR_PASSWD));
1081 	cap_close(capgrp);
1087 	capgrp = cap_clone(origcapgrp);
1088 	CHECK(capgrp != NULL);
1092 	CHECK(cap_grp_limit_fields(capgrp, fields, 2) == 0);
1097 	CHECK(cap_grp_limit_fields(capgrp, fields, 4) == -1 &&
1100 	CHECK(cap_grp_limit_fields(capgrp, fields, 1) == -1 &&
1103 	CHECK(runtest_fields(capgrp, GR_NAME | GR_GID));
1105 	cap_close(capgrp);
1111 	capgrp = cap_clone(origcapgrp);
1112 	CHECK(capgrp != NULL);
1116 	CHECK(cap_grp_limit_fields(capgrp, fields, 2) == 0);
1121 	CHECK(cap_grp_limit_fields(capgrp, fields, 4) == -1 &&
1124 	CHECK(cap_grp_limit_fields(capgrp, fields, 1) == -1 &&
1127 	CHECK(runtest_fields(capgrp, GR_NAME | GR_MEM));
1129 	cap_close(capgrp);
1135 	capgrp = cap_clone(origcapgrp);
1136 	CHECK(capgrp != NULL);
1140 	CHECK(cap_grp_limit_fields(capgrp, fields, 2) == 0);
1145 	CHECK(cap_grp_limit_fields(capgrp, fields, 4) == -1 &&
1148 	CHECK(cap_grp_limit_fields(capgrp, fields, 1) == -1 &&
1151 	CHECK(runtest_fields(capgrp, GR_PASSWD | GR_GID));
1153 	cap_close(capgrp);
1159 	capgrp = cap_clone(origcapgrp);
1160 	CHECK(capgrp != NULL);
1164 	CHECK(cap_grp_limit_fields(capgrp, fields, 2) == 0);
1169 	CHECK(cap_grp_limit_fields(capgrp, fields, 4) == -1 &&
1172 	CHECK(cap_grp_limit_fields(capgrp, fields, 1) == -1 &&
1175 	CHECK(runtest_fields(capgrp, GR_PASSWD | GR_MEM));
1177 	cap_close(capgrp);
1183 	capgrp = cap_clone(origcapgrp);
1184 	CHECK(capgrp != NULL);
1188 	CHECK(cap_grp_limit_fields(capgrp, fields, 2) == 0);
1193 	CHECK(cap_grp_limit_fields(capgrp, fields, 4) == -1 &&
1196 	CHECK(cap_grp_limit_fields(capgrp, fields, 1) == -1 &&
1199 	CHECK(runtest_fields(capgrp, GR_GID | GR_MEM));
1201 	cap_close(capgrp);
1205 runtest_groups(cap_channel_t *capgrp, const char **names, const gid_t *gids,
1213 	(void)cap_setgrent(capgrp);
1216 		grp = cap_getgrent(capgrp);
1232 	(void)cap_setgrent(capgrp);
1235 		cap_getgrent_r(capgrp, &st, buf, sizeof(buf), &grp);
1252 		grp = cap_getgrnam(capgrp, names[i]);
1258 		cap_getgrnam_r(capgrp, names[i], &st, buf, sizeof(buf), &grp);
1264 		grp = cap_getgrgid(capgrp, gids[i]);
1270 		cap_getgrgid_r(capgrp, gids[i], &st, buf, sizeof(buf), &grp);
1281 	cap_channel_t *capgrp;
1291 	capgrp = cap_clone(origcapgrp);
1292 	CHECK(capgrp != NULL);
1299 	CHECK(cap_grp_limit_groups(capgrp, names, 5, NULL, 0) == 0);
1306 	CHECK(runtest_groups(capgrp, names, gids, 5));
1308 	cap_close(capgrp);
1316 	capgrp = cap_clone(origcapgrp);
1317 	CHECK(capgrp != NULL);
1322 	CHECK(cap_grp_limit_groups(capgrp, names, 3, NULL, 0) == 0);
1324 	CHECK(cap_grp_limit_groups(capgrp, names, 4, NULL, 0) == -1 &&
1327 	CHECK(cap_grp_limit_groups(capgrp, names, 1, NULL, 0) == -1 &&
1334 	CHECK(runtest_groups(capgrp, names, gids, 3));
1336 	cap_close(capgrp);
1344 	capgrp = cap_clone(origcapgrp);
1345 	CHECK(capgrp != NULL);
1350 	CHECK(cap_grp_limit_groups(capgrp, names, 3, NULL, 0) == 0);
1352 	CHECK(cap_grp_limit_groups(capgrp, names, 4, NULL, 0) == -1 &&
1355 	CHECK(cap_grp_limit_groups(capgrp, names, 1, NULL, 0) == -1 &&
1362 	CHECK(runtest_groups(capgrp, names, gids, 3));
1364 	cap_close(capgrp);
1372 	capgrp = cap_clone(origcapgrp);
1373 	CHECK(capgrp != NULL);
1381 	CHECK(cap_grp_limit_groups(capgrp, NULL, 0, gids, 3) == 0);
1383 	CHECK(cap_grp_limit_groups(capgrp, NULL, 0, gids, 4) == -1 &&
1386 	CHECK(cap_grp_limit_groups(capgrp, NULL, 0, gids, 1) == -1 &&
1390 	CHECK(runtest_groups(capgrp, names, gids, 3));
1392 	cap_close(capgrp);
1400 	capgrp = cap_clone(origcapgrp);
1401 	CHECK(capgrp != NULL);
1409 	CHECK(cap_grp_limit_groups(capgrp, NULL, 0, gids, 3) == 0);
1411 	CHECK(cap_grp_limit_groups(capgrp, NULL, 0, gids, 4) == -1 &&
1414 	CHECK(cap_grp_limit_groups(capgrp, NULL, 0, gids, 1) == -1 &&
1418 	CHECK(runtest_groups(capgrp, names, gids, 3));
1420 	cap_close(capgrp);
1428 	capgrp = cap_clone(origcapgrp);
1429 	CHECK(capgrp != NULL);
1432 	CHECK(cap_grp_limit_groups(capgrp, names, 1, NULL, 0) == 0);
1434 	CHECK(cap_grp_limit_groups(capgrp, names, 2, NULL, 0) == -1 &&
1437 	CHECK(cap_grp_limit_groups(capgrp, names, 1, NULL, 0) == -1 &&
1442 	CHECK(runtest_groups(capgrp, names, gids, 1));
1444 	cap_close(capgrp);
1452 	capgrp = cap_clone(origcapgrp);
1453 	CHECK(capgrp != NULL);
1457 	CHECK(cap_grp_limit_groups(capgrp, names, 2, NULL, 0) == 0);
1459 	CHECK(cap_grp_limit_groups(capgrp, names, 3, NULL, 0) == -1 &&
1462 	CHECK(cap_grp_limit_groups(capgrp, names, 1, NULL, 0) == -1 &&
1468 	CHECK(runtest_groups(capgrp, names, gids, 2));
1470 	cap_close(capgrp);
1478 	capgrp = cap_clone(origcapgrp);
1479 	CHECK(capgrp != NULL);
1483 	CHECK(cap_grp_limit_groups(capgrp, NULL, 0, gids, 1) == 0);
1485 	CHECK(cap_grp_limit_groups(capgrp, NULL, 0, gids, 2) == -1 &&
1488 	CHECK(cap_grp_limit_groups(capgrp, NULL, 0, gids, 1) == -1 &&
1492 	CHECK(runtest_groups(capgrp, names, gids, 1));
1494 	cap_close(capgrp);
1502 	capgrp = cap_clone(origcapgrp);
1503 	CHECK(capgrp != NULL);
1509 	CHECK(cap_grp_limit_groups(capgrp, NULL, 0, gids, 2) == 0);
1511 	CHECK(cap_grp_limit_groups(capgrp, NULL, 0, gids, 3) == -1 &&
1514 	CHECK(cap_grp_limit_groups(capgrp, NULL, 0, gids, 1) == -1 &&
1518 	CHECK(runtest_groups(capgrp, names, gids, 2));
1520 	cap_close(capgrp);
1526 	cap_channel_t *capcas, *capgrp;
1534 	capgrp = cap_service_open(capcas, "system.grp");
1535 	CHECKX(capgrp != NULL);
1541 	CHECK(runtest_cmds(capgrp) == (SETGRENT | GETGRENT | GETGRENT_R |
1544 	test_cmds(capgrp);
1546 	test_fields(capgrp);
1548 	test_groups(capgrp);
1550 	cap_close(capgrp);