1*49cdfc7eSAndroid Build Coastguard Worker // SPDX-License-Identifier: GPL-2.0-or-later
2*49cdfc7eSAndroid Build Coastguard Worker /*
3*49cdfc7eSAndroid Build Coastguard Worker * Copyright (c) International Business Machines Corp., 2001
4*49cdfc7eSAndroid Build Coastguard Worker * Ported by John George
5*49cdfc7eSAndroid Build Coastguard Worker * Copyright (C) 2021 SUSE LLC <[email protected]>
6*49cdfc7eSAndroid Build Coastguard Worker */
7*49cdfc7eSAndroid Build Coastguard Worker
8*49cdfc7eSAndroid Build Coastguard Worker /*\
9*49cdfc7eSAndroid Build Coastguard Worker * [Description]
10*49cdfc7eSAndroid Build Coastguard Worker *
11*49cdfc7eSAndroid Build Coastguard Worker * Test the setreuid() feature, verifying the role of the saved-set-uid
12*49cdfc7eSAndroid Build Coastguard Worker * and setreuid's effect on it.
13*49cdfc7eSAndroid Build Coastguard Worker */
14*49cdfc7eSAndroid Build Coastguard Worker
15*49cdfc7eSAndroid Build Coastguard Worker #include <sys/types.h>
16*49cdfc7eSAndroid Build Coastguard Worker #include <pwd.h>
17*49cdfc7eSAndroid Build Coastguard Worker #include <stdlib.h>
18*49cdfc7eSAndroid Build Coastguard Worker
19*49cdfc7eSAndroid Build Coastguard Worker #include "tst_test.h"
20*49cdfc7eSAndroid Build Coastguard Worker #include "tst_uid.h"
21*49cdfc7eSAndroid Build Coastguard Worker #include "compat_tst_16.h"
22*49cdfc7eSAndroid Build Coastguard Worker
23*49cdfc7eSAndroid Build Coastguard Worker static uid_t root_uid, nobody_uid, main_uid, other_uid, neg_one = -1;
24*49cdfc7eSAndroid Build Coastguard Worker
25*49cdfc7eSAndroid Build Coastguard Worker struct test_data_t {
26*49cdfc7eSAndroid Build Coastguard Worker uid_t *real_uid;
27*49cdfc7eSAndroid Build Coastguard Worker uid_t *eff_uid;
28*49cdfc7eSAndroid Build Coastguard Worker int exp_ret;
29*49cdfc7eSAndroid Build Coastguard Worker uid_t *exp_real_uid;
30*49cdfc7eSAndroid Build Coastguard Worker uid_t *exp_eff_uid;
31*49cdfc7eSAndroid Build Coastguard Worker uid_t *exp_sav_uid;
32*49cdfc7eSAndroid Build Coastguard Worker const char *test_msg;
33*49cdfc7eSAndroid Build Coastguard Worker } test_data[] = {
34*49cdfc7eSAndroid Build Coastguard Worker {&nobody_uid, &root_uid, 0, &nobody_uid, &root_uid, &root_uid,
35*49cdfc7eSAndroid Build Coastguard Worker "setreuid(nobody, root)"},
36*49cdfc7eSAndroid Build Coastguard Worker {&neg_one, &nobody_uid, 0, &nobody_uid, &nobody_uid, &root_uid,
37*49cdfc7eSAndroid Build Coastguard Worker "setreuid(-1, nobody)"},
38*49cdfc7eSAndroid Build Coastguard Worker {&neg_one, &root_uid, 0, &nobody_uid, &root_uid, &root_uid,
39*49cdfc7eSAndroid Build Coastguard Worker "setreuid(-1, root)"},
40*49cdfc7eSAndroid Build Coastguard Worker {&main_uid, &neg_one, 0, &main_uid, &root_uid, &root_uid,
41*49cdfc7eSAndroid Build Coastguard Worker "setreuid(main, -1)"},
42*49cdfc7eSAndroid Build Coastguard Worker {&neg_one, &other_uid, 0, &main_uid, &other_uid, &other_uid,
43*49cdfc7eSAndroid Build Coastguard Worker "setreuid(-1, other)"},
44*49cdfc7eSAndroid Build Coastguard Worker {&neg_one, &root_uid, -1, &main_uid, &other_uid, &other_uid,
45*49cdfc7eSAndroid Build Coastguard Worker "setreuid(-1, root)"},
46*49cdfc7eSAndroid Build Coastguard Worker {&neg_one, &nobody_uid, -1, &main_uid, &other_uid, &other_uid,
47*49cdfc7eSAndroid Build Coastguard Worker "setreuid(-1, nobody)"},
48*49cdfc7eSAndroid Build Coastguard Worker {&neg_one, &main_uid, 0, &main_uid, &main_uid, &other_uid,
49*49cdfc7eSAndroid Build Coastguard Worker "setreuid(-1, main)"},
50*49cdfc7eSAndroid Build Coastguard Worker {&neg_one, &other_uid, 0, &main_uid, &other_uid, &other_uid,
51*49cdfc7eSAndroid Build Coastguard Worker "setreuid(-1, other)"},
52*49cdfc7eSAndroid Build Coastguard Worker {&other_uid, &main_uid, 0, &other_uid, &main_uid, &main_uid,
53*49cdfc7eSAndroid Build Coastguard Worker "setreuid(other, main)"},
54*49cdfc7eSAndroid Build Coastguard Worker {&neg_one, &other_uid, 0, &other_uid, &other_uid, &main_uid,
55*49cdfc7eSAndroid Build Coastguard Worker "setreuid(-1, other)"},
56*49cdfc7eSAndroid Build Coastguard Worker {&neg_one, &main_uid, 0, &other_uid, &main_uid, &main_uid,
57*49cdfc7eSAndroid Build Coastguard Worker "setreuid(-1, main)"},
58*49cdfc7eSAndroid Build Coastguard Worker {&main_uid, &neg_one, 0, &main_uid, &main_uid, &main_uid,
59*49cdfc7eSAndroid Build Coastguard Worker "setreuid(main, -1)"},
60*49cdfc7eSAndroid Build Coastguard Worker {&neg_one, &other_uid, -1, &main_uid, &main_uid, &main_uid,
61*49cdfc7eSAndroid Build Coastguard Worker "setreuid(-1, other)"},
62*49cdfc7eSAndroid Build Coastguard Worker };
63*49cdfc7eSAndroid Build Coastguard Worker
setup(void)64*49cdfc7eSAndroid Build Coastguard Worker static void setup(void)
65*49cdfc7eSAndroid Build Coastguard Worker {
66*49cdfc7eSAndroid Build Coastguard Worker uid_t test_users[3];
67*49cdfc7eSAndroid Build Coastguard Worker struct passwd *pw;
68*49cdfc7eSAndroid Build Coastguard Worker
69*49cdfc7eSAndroid Build Coastguard Worker root_uid = getuid();
70*49cdfc7eSAndroid Build Coastguard Worker pw = SAFE_GETPWNAM("nobody");
71*49cdfc7eSAndroid Build Coastguard Worker nobody_uid = test_users[0] = pw->pw_uid;
72*49cdfc7eSAndroid Build Coastguard Worker tst_get_uids(test_users, 1, 3);
73*49cdfc7eSAndroid Build Coastguard Worker main_uid = test_users[1];
74*49cdfc7eSAndroid Build Coastguard Worker other_uid = test_users[2];
75*49cdfc7eSAndroid Build Coastguard Worker
76*49cdfc7eSAndroid Build Coastguard Worker UID16_CHECK(root_uid, setreuid);
77*49cdfc7eSAndroid Build Coastguard Worker UID16_CHECK(nobody_uid, setreuid);
78*49cdfc7eSAndroid Build Coastguard Worker UID16_CHECK(main_uid, setreuid);
79*49cdfc7eSAndroid Build Coastguard Worker UID16_CHECK(other_uid, setreuid);
80*49cdfc7eSAndroid Build Coastguard Worker
81*49cdfc7eSAndroid Build Coastguard Worker /* Make sure that saved UID is also set to root */
82*49cdfc7eSAndroid Build Coastguard Worker SAFE_SETUID(root_uid);
83*49cdfc7eSAndroid Build Coastguard Worker }
84*49cdfc7eSAndroid Build Coastguard Worker
run_child(const struct test_data_t * tc)85*49cdfc7eSAndroid Build Coastguard Worker static void run_child(const struct test_data_t *tc)
86*49cdfc7eSAndroid Build Coastguard Worker {
87*49cdfc7eSAndroid Build Coastguard Worker if (tc->exp_ret) {
88*49cdfc7eSAndroid Build Coastguard Worker TST_EXP_FAIL(SETREUID(*tc->real_uid, *tc->eff_uid), EPERM,
89*49cdfc7eSAndroid Build Coastguard Worker "%s", tc->test_msg);
90*49cdfc7eSAndroid Build Coastguard Worker } else {
91*49cdfc7eSAndroid Build Coastguard Worker TST_EXP_PASS(SETREUID(*tc->real_uid, *tc->eff_uid), "%s",
92*49cdfc7eSAndroid Build Coastguard Worker tc->test_msg);
93*49cdfc7eSAndroid Build Coastguard Worker }
94*49cdfc7eSAndroid Build Coastguard Worker
95*49cdfc7eSAndroid Build Coastguard Worker if (!TST_PASS)
96*49cdfc7eSAndroid Build Coastguard Worker return;
97*49cdfc7eSAndroid Build Coastguard Worker
98*49cdfc7eSAndroid Build Coastguard Worker tst_check_resuid(tc->test_msg, *tc->exp_real_uid, *tc->exp_eff_uid,
99*49cdfc7eSAndroid Build Coastguard Worker *tc->exp_sav_uid);
100*49cdfc7eSAndroid Build Coastguard Worker }
101*49cdfc7eSAndroid Build Coastguard Worker
run(void)102*49cdfc7eSAndroid Build Coastguard Worker static void run(void)
103*49cdfc7eSAndroid Build Coastguard Worker {
104*49cdfc7eSAndroid Build Coastguard Worker if (!SAFE_FORK()) {
105*49cdfc7eSAndroid Build Coastguard Worker unsigned int i;
106*49cdfc7eSAndroid Build Coastguard Worker
107*49cdfc7eSAndroid Build Coastguard Worker for (i = 0; i < ARRAY_SIZE(test_data); i++)
108*49cdfc7eSAndroid Build Coastguard Worker run_child(test_data + i);
109*49cdfc7eSAndroid Build Coastguard Worker
110*49cdfc7eSAndroid Build Coastguard Worker exit(0);
111*49cdfc7eSAndroid Build Coastguard Worker }
112*49cdfc7eSAndroid Build Coastguard Worker
113*49cdfc7eSAndroid Build Coastguard Worker tst_reap_children();
114*49cdfc7eSAndroid Build Coastguard Worker }
115*49cdfc7eSAndroid Build Coastguard Worker
116*49cdfc7eSAndroid Build Coastguard Worker static struct tst_test test = {
117*49cdfc7eSAndroid Build Coastguard Worker .test_all = run,
118*49cdfc7eSAndroid Build Coastguard Worker .setup = setup,
119*49cdfc7eSAndroid Build Coastguard Worker .needs_root = 1,
120*49cdfc7eSAndroid Build Coastguard Worker .forks_child = 1,
121*49cdfc7eSAndroid Build Coastguard Worker };
122