1#!/usr/local/bin/ksh93 -p 2# 3# CDDL HEADER START 4# 5# The contents of this file are subject to the terms of the 6# Common Development and Distribution License (the "License"). 7# You may not use this file except in compliance with the License. 8# 9# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE 10# or http://www.opensolaris.org/os/licensing. 11# See the License for the specific language governing permissions 12# and limitations under the License. 13# 14# When distributing Covered Code, include this CDDL HEADER in each 15# file and include the License file at usr/src/OPENSOLARIS.LICENSE. 16# If applicable, add the following below this CDDL HEADER, with the 17# fields enclosed by brackets "[]" replaced with your own identifying 18# information: Portions Copyright [yyyy] [name of copyright owner] 19# 20# CDDL HEADER END 21# 22 23# 24# Copyright 2008 Sun Microsystems, Inc. All rights reserved. 25# Use is subject to license terms. 26 27. $STF_SUITE/include/libtest.kshlib 28. $STF_SUITE/tests/cli_user/cli_user.kshlib 29 30################################################################################ 31# 32# __stc_assertion_start 33# 34# ID: zfs_allow_001_neg 35# 36# DESCRIPTION: 37# 38# zfs allow returns an error when run as a user 39# 40# STRATEGY: 41# 42# 1. Verify that trying to show allows works as a user 43# 2. Verify that trying to set allows fails as a user 44# 45# 46# TESTABILITY: explicit 47# 48# TEST_AUTOMATION_LEVEL: automated 49# 50# CODING_STATUS: COMPLETED (2007-07-27) 51# 52# __stc_assertion_end 53# 54################################################################################ 55 56# check to see if we have zfs allow 57$ZFS 2>&1 | $GREP "allow" > /dev/null 58if (($? != 0)) then 59 log_unsupported "ZFS allow not supported on this machine." 60fi 61 62log_assert "zfs allow returns an error when run as a user" 63 64log_must run_unprivileged "$ZFS allow $TESTPOOL/$TESTFS" 65log_mustnot run_unprivileged "$ZFS allow `$LOGNAME` create $TESTPOOL/$TESTFS" 66 67# now verify that the above command actually did nothing by 68# checking for any allow output. ( if no allows are granted, 69# nothing should be output ) 70OUTPUT=$(run_unprivileged "$ZFS allow $TESTPOOL/$TESTFS" | $GREP "Local+Descendent" ) 71if [ -n "$OUTPUT" ] 72then 73 log_fail "zfs allow permissions were granted on $TESTPOOL/$TESTFS" 74fi 75 76log_pass "zfs allow returns an error when run as a user" 77 78