t_setuid.c revision 272343 
1/* $NetBSD: t_setuid.c,v 1.1 2011/07/07 06:57:54 jruoho Exp $ */
2
3/*-
4 * Copyright (c) 2011 The NetBSD Foundation, Inc.
5 * All rights reserved.
6 *
7 * This code is derived from software contributed to The NetBSD Foundation
8 * by Jukka Ruohonen.
9 *
10 * Redistribution and use in source and binary forms, with or without
11 * modification, are permitted provided that the following conditions
12 * are met:
13 * 1. Redistributions of source code must retain the above copyright
14 *    notice, this list of conditions and the following disclaimer.
15 * 2. Redistributions in binary form must reproduce the above copyright
16 *    notice, this list of conditions and the following disclaimer in the
17 *    documentation and/or other materials provided with the distribution.
18 *
19 * THIS SOFTWARE IS PROVIDED BY THE NETBSD FOUNDATION, INC. AND CONTRIBUTORS
20 * ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
21 * TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
22 * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE FOUNDATION OR CONTRIBUTORS
23 * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
24 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
25 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
26 * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
27 * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
28 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
29 * POSSIBILITY OF SUCH DAMAGE.
30 */
31#include <sys/cdefs.h>
32__RCSID("$NetBSD: t_setuid.c,v 1.1 2011/07/07 06:57:54 jruoho Exp $");
33
34#include <sys/wait.h>
35
36#include <atf-c.h>
37#include <errno.h>
38#include <pwd.h>
39#include <stdlib.h>
40#include <unistd.h>
41
42ATF_TC(setuid_perm);
43ATF_TC_HEAD(setuid_perm, tc)
44{
45	atf_tc_set_md_var(tc, "descr", "Test setuid(0) as normal user");
46	atf_tc_set_md_var(tc, "require.user", "unprivileged");
47}
48
49ATF_TC_BODY(setuid_perm, tc)
50{
51	errno = 0;
52
53	ATF_REQUIRE(setuid(0) == -1);
54	ATF_REQUIRE(errno == EPERM);
55}
56
57ATF_TC(setuid_real);
58ATF_TC_HEAD(setuid_real, tc)
59{
60	atf_tc_set_md_var(tc, "descr", "Test setuid(2) with real UID");
61}
62
63ATF_TC_BODY(setuid_real, tc)
64{
65	uid_t uid = getuid();
66
67	ATF_REQUIRE(setuid(uid) == 0);
68
69	ATF_REQUIRE(getuid() == uid);
70	ATF_REQUIRE(geteuid() == uid);
71}
72
73ATF_TC(setuid_root);
74ATF_TC_HEAD(setuid_root, tc)
75{
76	atf_tc_set_md_var(tc, "descr", "A basic test of setuid(2)");
77	atf_tc_set_md_var(tc, "require.user", "root");
78}
79
80ATF_TC_BODY(setuid_root, tc)
81{
82	struct passwd *pw;
83	int rv, sta;
84	pid_t pid;
85	uid_t uid;
86
87	while ((pw = getpwent()) != NULL) {
88
89		pid = fork();
90		ATF_REQUIRE(pid >= 0);
91
92		if (pid == 0) {
93
94			rv = setuid(pw->pw_uid);
95
96			if (rv != 0)
97				_exit(EXIT_FAILURE);
98
99			uid = getuid();
100
101			if (uid != pw->pw_uid)
102				_exit(EXIT_FAILURE);
103
104			_exit(EXIT_SUCCESS);
105		}
106
107		(void)wait(&sta);
108
109		if (WIFEXITED(sta) == 0 || WEXITSTATUS(sta) != EXIT_SUCCESS)
110			atf_tc_fail("failed to change UID to %u", pw->pw_uid);
111	}
112}
113
114ATF_TP_ADD_TCS(tp)
115{
116
117	ATF_TP_ADD_TC(tp, setuid_perm);
118	ATF_TP_ADD_TC(tp, setuid_real);
119	ATF_TP_ADD_TC(tp, setuid_root);
120
121	return atf_no_error();
122}
123