1 /* $NetBSD: t_setuid.c,v 1.1 2011/07/07 06:57:54 jruoho Exp $ */
2 
3 /*-
4  * Copyright (c) 2011 The NetBSD Foundation, Inc.
5  * All rights reserved.
6  *
7  * This code is derived from software contributed to The NetBSD Foundation
8  * by Jukka Ruohonen.
9  *
10  * Redistribution and use in source and binary forms, with or without
11  * modification, are permitted provided that the following conditions
12  * are met:
13  * 1. Redistributions of source code must retain the above copyright
14  *    notice, this list of conditions and the following disclaimer.
15  * 2. Redistributions in binary form must reproduce the above copyright
16  *    notice, this list of conditions and the following disclaimer in the
17  *    documentation and/or other materials provided with the distribution.
18  *
19  * THIS SOFTWARE IS PROVIDED BY THE NETBSD FOUNDATION, INC. AND CONTRIBUTORS
20  * ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
21  * TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
22  * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE FOUNDATION OR CONTRIBUTORS
23  * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
24  * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
25  * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
26  * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
27  * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
28  * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
29  * POSSIBILITY OF SUCH DAMAGE.
30  */
31 #include <sys/cdefs.h>
32 __RCSID("$NetBSD: t_setuid.c,v 1.1 2011/07/07 06:57:54 jruoho Exp $");
33 
34 #include <sys/wait.h>
35 
36 #include <atf-c.h>
37 #include <errno.h>
38 #include <pwd.h>
39 #include <stdlib.h>
40 #include <unistd.h>
41 
42 ATF_TC(setuid_perm);
43 ATF_TC_HEAD(setuid_perm, tc)
44 {
45 	atf_tc_set_md_var(tc, "descr", "Test setuid(0) as normal user");
46 	atf_tc_set_md_var(tc, "require.user", "unprivileged");
47 }
48 
49 ATF_TC_BODY(setuid_perm, tc)
50 {
51 	errno = 0;
52 
53 	ATF_REQUIRE(setuid(0) == -1);
54 	ATF_REQUIRE(errno == EPERM);
55 }
56 
57 ATF_TC(setuid_real);
58 ATF_TC_HEAD(setuid_real, tc)
59 {
60 	atf_tc_set_md_var(tc, "descr", "Test setuid(2) with real UID");
61 }
62 
63 ATF_TC_BODY(setuid_real, tc)
64 {
65 	uid_t uid = getuid();
66 
67 	ATF_REQUIRE(setuid(uid) == 0);
68 
69 	ATF_REQUIRE(getuid() == uid);
70 	ATF_REQUIRE(geteuid() == uid);
71 }
72 
73 ATF_TC(setuid_root);
74 ATF_TC_HEAD(setuid_root, tc)
75 {
76 	atf_tc_set_md_var(tc, "descr", "A basic test of setuid(2)");
77 	atf_tc_set_md_var(tc, "require.user", "root");
78 }
79 
80 ATF_TC_BODY(setuid_root, tc)
81 {
82 	struct passwd *pw;
83 	int rv, sta;
84 	pid_t pid;
85 	uid_t uid;
86 
87 	while ((pw = getpwent()) != NULL) {
88 
89 		pid = fork();
90 		ATF_REQUIRE(pid >= 0);
91 
92 		if (pid == 0) {
93 
94 			rv = setuid(pw->pw_uid);
95 
96 			if (rv != 0)
97 				_exit(EXIT_FAILURE);
98 
99 			uid = getuid();
100 
101 			if (uid != pw->pw_uid)
102 				_exit(EXIT_FAILURE);
103 
104 			_exit(EXIT_SUCCESS);
105 		}
106 
107 		(void)wait(&sta);
108 
109 		if (WIFEXITED(sta) == 0 || WEXITSTATUS(sta) != EXIT_SUCCESS)
110 			atf_tc_fail("failed to change UID to %u", pw->pw_uid);
111 	}
112 }
113 
114 ATF_TP_ADD_TCS(tp)
115 {
116 
117 	ATF_TP_ADD_TC(tp, setuid_perm);
118 	ATF_TP_ADD_TC(tp, setuid_real);
119 	ATF_TP_ADD_TC(tp, setuid_root);
120 
121 	return atf_no_error();
122 }
123