1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
|
/* Tests of lchown.
Copyright (C) 2009-2018 Free Software Foundation, Inc.
This program is free software: you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation; either version 3 of the License, or
(at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program. If not, see <https://www.gnu.org/licenses/>. */
/* Written by Eric Blake <ebb9@byu.net>, 2009. */
#include "nap.h"
#if !HAVE_GETEGID
# define getegid() ((gid_t) -1)
#endif
#ifndef HAVE_LCHMOD
# define HAVE_LCHMOD 0
#endif
#ifndef CHOWN_CHANGE_TIME_BUG
# define CHOWN_CHANGE_TIME_BUG 0
#endif
/* This file is designed to test lchown(n,o,g) and
chownat(AT_FDCWD,n,o,g,AT_SYMLINK_NOFOLLOW). FUNC is the function
to test. Assumes that BASE and ASSERT are already defined, and
that appropriate headers are already included. If PRINT, warn
before skipping symlink tests with status 77. */
static int
test_lchown (int (*func) (char const *, uid_t, gid_t), bool print)
{
struct stat st1;
struct stat st2;
gid_t *gids = NULL;
int gids_count;
int result;
/* Solaris 8 is interesting - if the current process belongs to
multiple groups, the current directory is owned by a group that
the current process belongs to but different than getegid(), and
the current directory does not have the S_ISGID bit, then regular
files created in the directory belong to the directory's group,
but symlinks belong to the current effective group id. If
S_ISGID is set, then both files and symlinks belong to the
directory's group. However, it is possible to run the testsuite
from within a directory owned by a group we don't belong to, in
which case all things that we create belong to the current
effective gid. So, work around the issues by creating a
subdirectory (we are guaranteed that the subdirectory will be
owned by one of our current groups), change ownership of that
directory to the current effective gid (which will thus succeed),
then create all other files within that directory (eliminating
questions on whether inheritance or current id triumphs, since
the two methods resolve to the same gid). */
ASSERT (mkdir (BASE "dir", 0700) == 0);
ASSERT (stat (BASE "dir", &st1) == 0);
/* Filter out mingw and file systems which have no concept of groups. */
result = func (BASE "dir", st1.st_uid, getegid ());
if (result == -1 && (errno == ENOSYS || errno == EPERM))
{
ASSERT (rmdir (BASE "dir") == 0);
if (print)
fputs ("skipping test: no support for ownership\n", stderr);
return 77;
}
ASSERT (result == 0);
ASSERT (close (creat (BASE "dir/file", 0600)) == 0);
ASSERT (stat (BASE "dir/file", &st1) == 0);
ASSERT (st1.st_uid != (uid_t) -1);
ASSERT (st1.st_gid != (gid_t) -1);
ASSERT (st1.st_gid == getegid ());
/* Sanity check of error cases. */
errno = 0;
ASSERT (func ("", -1, -1) == -1);
ASSERT (errno == ENOENT);
errno = 0;
ASSERT (func ("no_such", -1, -1) == -1);
ASSERT (errno == ENOENT);
errno = 0;
ASSERT (func ("no_such/", -1, -1) == -1);
ASSERT (errno == ENOENT);
errno = 0;
ASSERT (func (BASE "dir/file/", -1, -1) == -1);
ASSERT (errno == ENOTDIR);
/* Check that -1 does not alter ownership. */
ASSERT (func (BASE "dir/file", -1, st1.st_gid) == 0);
ASSERT (func (BASE "dir/file", st1.st_uid, -1) == 0);
ASSERT (func (BASE "dir/file", (uid_t) -1, (gid_t) -1) == 0);
ASSERT (stat (BASE "dir/file", &st2) == 0);
ASSERT (st1.st_uid == st2.st_uid);
ASSERT (st1.st_gid == st2.st_gid);
/* Even if the values aren't changing, ctime is required to change
if at least one argument is not -1. */
nap ();
ASSERT (func (BASE "dir/file", st1.st_uid, st1.st_gid) == 0);
ASSERT (stat (BASE "dir/file", &st2) == 0);
ASSERT (st1.st_ctime < st2.st_ctime
|| (st1.st_ctime == st2.st_ctime
&& get_stat_ctime_ns (&st1) < get_stat_ctime_ns (&st2)));
/* Test symlink behavior. */
if (symlink ("link", BASE "dir/link2"))
{
ASSERT (unlink (BASE "dir/file") == 0);
ASSERT (rmdir (BASE "dir") == 0);
if (print)
fputs ("skipping test: symlinks not supported on this file system\n",
stderr);
return 77;
}
result = func (BASE "dir/link2", -1, -1);
if (result == -1 && errno == ENOSYS)
{
ASSERT (unlink (BASE "dir/file") == 0);
ASSERT (unlink (BASE "dir/link2") == 0);
ASSERT (rmdir (BASE "dir") == 0);
if (print)
fputs ("skipping test: symlink ownership not supported\n", stderr);
return 77;
}
ASSERT (result == 0);
errno = 0;
ASSERT (func (BASE "dir/link2/", st1.st_uid, st1.st_gid) == -1);
ASSERT (errno == ENOENT);
ASSERT (symlink ("file", BASE "dir/link") == 0);
ASSERT (mkdir (BASE "dir/sub", 0700) == 0);
ASSERT (symlink ("sub", BASE "dir/link3") == 0);
/* For non-privileged users, lchown can only portably succeed at
changing group ownership of a file we own. If we belong to at
least two groups, then verifying the correct change is simple.
But if we belong to only one group, then we fall back on the
other observable effect of lchown: the ctime must be updated. */
gids_count = mgetgroups (NULL, st1.st_gid, &gids);
if (1 < gids_count)
{
ASSERT (gids[1] != st1.st_gid);
ASSERT (gids[1] != (gid_t) -1);
ASSERT (lstat (BASE "dir/link", &st2) == 0);
ASSERT (st1.st_uid == st2.st_uid);
ASSERT (st1.st_gid == st2.st_gid);
ASSERT (lstat (BASE "dir/link2", &st2) == 0);
ASSERT (st1.st_uid == st2.st_uid);
ASSERT (st1.st_gid == st2.st_gid);
errno = 0;
ASSERT (func (BASE "dir/link2/", -1, gids[1]) == -1);
ASSERT (errno == ENOTDIR);
ASSERT (stat (BASE "dir/file", &st2) == 0);
ASSERT (st1.st_uid == st2.st_uid);
ASSERT (st1.st_gid == st2.st_gid);
ASSERT (lstat (BASE "dir/link", &st2) == 0);
ASSERT (st1.st_uid == st2.st_uid);
ASSERT (st1.st_gid == st2.st_gid);
ASSERT (lstat (BASE "dir/link2", &st2) == 0);
ASSERT (st1.st_uid == st2.st_uid);
ASSERT (st1.st_gid == st2.st_gid);
ASSERT (func (BASE "dir/link2", -1, gids[1]) == 0);
ASSERT (stat (BASE "dir/file", &st2) == 0);
ASSERT (st1.st_uid == st2.st_uid);
ASSERT (st1.st_gid == st2.st_gid);
ASSERT (lstat (BASE "dir/link", &st2) == 0);
ASSERT (st1.st_uid == st2.st_uid);
ASSERT (st1.st_gid == st2.st_gid);
ASSERT (lstat (BASE "dir/link2", &st2) == 0);
ASSERT (st1.st_uid == st2.st_uid);
ASSERT (gids[1] == st2.st_gid);
/* Trailing slash follows through to directory. */
ASSERT (lstat (BASE "dir/link3", &st2) == 0);
ASSERT (st1.st_uid == st2.st_uid);
ASSERT (st1.st_gid == st2.st_gid);
ASSERT (lstat (BASE "dir/sub", &st2) == 0);
ASSERT (st1.st_uid == st2.st_uid);
ASSERT (st1.st_gid == st2.st_gid);
ASSERT (func (BASE "dir/link3/", -1, gids[1]) == 0);
ASSERT (lstat (BASE "dir/link3", &st2) == 0);
ASSERT (st1.st_uid == st2.st_uid);
ASSERT (st1.st_gid == st2.st_gid);
ASSERT (lstat (BASE "dir/sub", &st2) == 0);
ASSERT (st1.st_uid == st2.st_uid);
ASSERT (gids[1] == st2.st_gid);
}
else if (!CHOWN_CHANGE_TIME_BUG || HAVE_LCHMOD)
{
/* If we don't have lchmod, and lchown fails to change ctime,
then we can't test this part of lchown. */
struct stat l1;
struct stat l2;
ASSERT (stat (BASE "dir/file", &st1) == 0);
ASSERT (lstat (BASE "dir/link", &l1) == 0);
ASSERT (lstat (BASE "dir/link2", &l2) == 0);
nap ();
errno = 0;
ASSERT (func (BASE "dir/link2/", -1, st1.st_gid) == -1);
ASSERT (errno == ENOTDIR);
ASSERT (stat (BASE "dir/file", &st2) == 0);
ASSERT (st1.st_ctime == st2.st_ctime);
ASSERT (get_stat_ctime_ns (&st1) == get_stat_ctime_ns (&st2));
ASSERT (lstat (BASE "dir/link", &st2) == 0);
ASSERT (l1.st_ctime == st2.st_ctime);
ASSERT (get_stat_ctime_ns (&l1) == get_stat_ctime_ns (&st2));
ASSERT (lstat (BASE "dir/link2", &st2) == 0);
ASSERT (l2.st_ctime == st2.st_ctime);
ASSERT (get_stat_ctime_ns (&l2) == get_stat_ctime_ns (&st2));
ASSERT (func (BASE "dir/link2", -1, st1.st_gid) == 0);
ASSERT (stat (BASE "dir/file", &st2) == 0);
ASSERT (st1.st_ctime == st2.st_ctime);
ASSERT (get_stat_ctime_ns (&st1) == get_stat_ctime_ns (&st2));
ASSERT (lstat (BASE "dir/link", &st2) == 0);
ASSERT (l1.st_ctime == st2.st_ctime);
ASSERT (get_stat_ctime_ns (&l1) == get_stat_ctime_ns (&st2));
ASSERT (lstat (BASE "dir/link2", &st2) == 0);
ASSERT (l2.st_ctime < st2.st_ctime
|| (l2.st_ctime == st2.st_ctime
&& get_stat_ctime_ns (&l2) < get_stat_ctime_ns (&st2)));
/* Trailing slash follows through to directory. */
ASSERT (lstat (BASE "dir/sub", &st1) == 0);
ASSERT (lstat (BASE "dir/link3", &l1) == 0);
nap ();
ASSERT (func (BASE "dir/link3/", -1, st1.st_gid) == 0);
ASSERT (lstat (BASE "dir/link3", &st2) == 0);
ASSERT (l1.st_ctime == st2.st_ctime);
ASSERT (get_stat_ctime_ns (&l1) == get_stat_ctime_ns (&st2));
ASSERT (lstat (BASE "dir/sub", &st2) == 0);
ASSERT (st1.st_ctime < st2.st_ctime
|| (st1.st_ctime == st2.st_ctime
&& get_stat_ctime_ns (&st1) < get_stat_ctime_ns (&st2)));
}
/* Cleanup. */
free (gids);
ASSERT (unlink (BASE "dir/file") == 0);
ASSERT (unlink (BASE "dir/link") == 0);
ASSERT (unlink (BASE "dir/link2") == 0);
ASSERT (unlink (BASE "dir/link3") == 0);
ASSERT (rmdir (BASE "dir/sub") == 0);
ASSERT (rmdir (BASE "dir") == 0);
return 0;
}
|
