2019-01-01 00:11:28 +00:00
|
|
|
/* Copyright (C) 2004-2019 Free Software Foundation, Inc.
|
2004-11-12 01:27:04 +00:00
|
|
|
This file is part of the GNU C Library.
|
|
|
|
Contributed by Jakub Jelinek <jaku@redhat.com>, 2004.
|
|
|
|
|
|
|
|
The GNU C Library is free software; you can redistribute it and/or
|
|
|
|
modify it under the terms of the GNU Lesser General Public
|
|
|
|
License as published by the Free Software Foundation; either
|
|
|
|
version 2.1 of the License, or (at your option) any later version.
|
|
|
|
|
|
|
|
The GNU C Library is distributed in the hope that it will be useful,
|
|
|
|
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
|
|
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
|
|
Lesser General Public License for more details.
|
|
|
|
|
|
|
|
You should have received a copy of the GNU Lesser General Public
|
2012-02-09 23:18:22 +00:00
|
|
|
License along with the GNU C Library; if not, see
|
Prefer https to http for gnu.org and fsf.org URLs
Also, change sources.redhat.com to sourceware.org.
This patch was automatically generated by running the following shell
script, which uses GNU sed, and which avoids modifying files imported
from upstream:
sed -ri '
s,(http|ftp)(://(.*\.)?(gnu|fsf|sourceware)\.org($|[^.]|\.[^a-z])),https\2,g
s,(http|ftp)(://(.*\.)?)sources\.redhat\.com($|[^.]|\.[^a-z]),https\2sourceware.org\4,g
' \
$(find $(git ls-files) -prune -type f \
! -name '*.po' \
! -name 'ChangeLog*' \
! -path COPYING ! -path COPYING.LIB \
! -path manual/fdl-1.3.texi ! -path manual/lgpl-2.1.texi \
! -path manual/texinfo.tex ! -path scripts/config.guess \
! -path scripts/config.sub ! -path scripts/install-sh \
! -path scripts/mkinstalldirs ! -path scripts/move-if-change \
! -path INSTALL ! -path locale/programs/charmap-kw.h \
! -path po/libc.pot ! -path sysdeps/gnu/errlist.c \
! '(' -name configure \
-execdir test -f configure.ac -o -f configure.in ';' ')' \
! '(' -name preconfigure \
-execdir test -f preconfigure.ac ';' ')' \
-print)
and then by running 'make dist-prepare' to regenerate files built
from the altered files, and then executing the following to cleanup:
chmod a+x sysdeps/unix/sysv/linux/riscv/configure
# Omit irrelevant whitespace and comment-only changes,
# perhaps from a slightly-different Autoconf version.
git checkout -f \
sysdeps/csky/configure \
sysdeps/hppa/configure \
sysdeps/riscv/configure \
sysdeps/unix/sysv/linux/csky/configure
# Omit changes that caused a pre-commit check to fail like this:
# remote: *** error: sysdeps/powerpc/powerpc64/ppc-mcount.S: trailing lines
git checkout -f \
sysdeps/powerpc/powerpc64/ppc-mcount.S \
sysdeps/unix/sysv/linux/s390/s390-64/syscall.S
# Omit change that caused a pre-commit check to fail like this:
# remote: *** error: sysdeps/sparc/sparc64/multiarch/memcpy-ultra3.S: last line does not end in newline
git checkout -f sysdeps/sparc/sparc64/multiarch/memcpy-ultra3.S
2019-09-07 05:40:42 +00:00
|
|
|
<https://www.gnu.org/licenses/>. */
|
2004-11-12 01:27:04 +00:00
|
|
|
|
|
|
|
#include <pthread.h>
|
|
|
|
#include <pwd.h>
|
|
|
|
#include <grp.h>
|
|
|
|
#include <stdlib.h>
|
|
|
|
#include <stdio.h>
|
|
|
|
#include <sys/wait.h>
|
|
|
|
#include <unistd.h>
|
|
|
|
|
|
|
|
|
|
|
|
static pthread_barrier_t b3, b4;
|
|
|
|
static uid_t prev_ruid, prev_euid, prev_suid, nobody_uid;
|
|
|
|
static gid_t prev_rgid, prev_egid, prev_sgid, nobody_gid;
|
|
|
|
enum ACTION { PREPARE, SET, CHECK_BEFORE, CHECK_AFTER };
|
|
|
|
#define TESTNO(arg) ((long int) (arg) & 0xff)
|
|
|
|
#define THREADNO(arg) ((long int) (arg) >> 8)
|
|
|
|
|
|
|
|
|
|
|
|
static void
|
|
|
|
check_prev_uid (int tno)
|
|
|
|
{
|
|
|
|
uid_t ruid, euid, suid;
|
|
|
|
if (getresuid (&ruid, &euid, &suid) < 0)
|
|
|
|
{
|
|
|
|
printf ("getresuid failed: %d %m\n", tno);
|
|
|
|
exit (1);
|
|
|
|
}
|
|
|
|
|
|
|
|
if (ruid != prev_ruid || euid != prev_euid || suid != prev_suid)
|
|
|
|
{
|
|
|
|
printf ("uids before in %d (%d %d %d) != (%d %d %d)\n", tno,
|
|
|
|
ruid, euid, suid, prev_ruid, prev_euid, prev_suid);
|
|
|
|
exit (1);
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
static void
|
|
|
|
check_prev_gid (int tno)
|
|
|
|
{
|
|
|
|
gid_t rgid, egid, sgid;
|
|
|
|
if (getresgid (&rgid, &egid, &sgid) < 0)
|
|
|
|
{
|
|
|
|
printf ("getresgid failed: %d %m\n", tno);
|
|
|
|
exit (1);
|
|
|
|
}
|
|
|
|
|
|
|
|
if (rgid != prev_rgid || egid != prev_egid || sgid != prev_sgid)
|
|
|
|
{
|
|
|
|
printf ("gids before in %d (%d %d %d) != (%d %d %d)\n", tno,
|
|
|
|
rgid, egid, sgid, prev_rgid, prev_egid, prev_sgid);
|
|
|
|
exit (1);
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
static void
|
|
|
|
test_setuid1 (enum ACTION action, int tno)
|
|
|
|
{
|
|
|
|
if (action == PREPARE)
|
|
|
|
return;
|
|
|
|
|
|
|
|
if (action != CHECK_AFTER)
|
|
|
|
check_prev_uid (tno);
|
|
|
|
|
|
|
|
if (action == SET && setuid (nobody_uid) < 0)
|
|
|
|
{
|
|
|
|
printf ("setuid failed: %m\n");
|
|
|
|
exit (1);
|
|
|
|
}
|
|
|
|
|
|
|
|
if (action != CHECK_BEFORE)
|
|
|
|
{
|
|
|
|
uid_t ruid, euid, suid;
|
|
|
|
if (getresuid (&ruid, &euid, &suid) < 0)
|
|
|
|
{
|
|
|
|
printf ("getresuid failed: %d %m\n", tno);
|
|
|
|
exit (1);
|
|
|
|
}
|
|
|
|
|
|
|
|
if (ruid != nobody_uid || euid != nobody_uid || suid != nobody_uid)
|
|
|
|
{
|
|
|
|
printf ("after setuid %d (%d %d %d) != (%d %d %d)\n", tno,
|
|
|
|
ruid, euid, suid, nobody_uid, nobody_uid, nobody_uid);
|
|
|
|
exit (1);
|
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
static void
|
|
|
|
test_setuid2 (enum ACTION action, int tno)
|
|
|
|
{
|
|
|
|
if (action == PREPARE)
|
|
|
|
{
|
|
|
|
if (setresuid (nobody_uid, nobody_uid, -1) < 0)
|
|
|
|
{
|
|
|
|
printf ("setresuid failed: %m\n");
|
|
|
|
exit (1);
|
|
|
|
}
|
|
|
|
|
|
|
|
prev_ruid = nobody_uid;
|
|
|
|
prev_euid = nobody_uid;
|
|
|
|
return;
|
|
|
|
}
|
|
|
|
|
|
|
|
if (action != CHECK_AFTER)
|
|
|
|
check_prev_uid (tno);
|
|
|
|
|
|
|
|
if (action == SET && setuid (prev_suid) < 0)
|
|
|
|
{
|
|
|
|
printf ("setuid failed: %m\n");
|
|
|
|
exit (1);
|
|
|
|
}
|
|
|
|
|
|
|
|
if (action != CHECK_BEFORE)
|
|
|
|
{
|
|
|
|
uid_t ruid, euid, suid;
|
|
|
|
if (getresuid (&ruid, &euid, &suid) < 0)
|
|
|
|
{
|
|
|
|
printf ("getresuid failed: %d %m\n", tno);
|
|
|
|
exit (1);
|
|
|
|
}
|
|
|
|
|
|
|
|
if (ruid != nobody_uid || euid != prev_suid || suid != prev_suid)
|
|
|
|
{
|
|
|
|
printf ("after setuid %d (%d %d %d) != (%d %d %d)\n", tno,
|
|
|
|
ruid, euid, suid, nobody_uid, prev_suid, prev_suid);
|
|
|
|
exit (1);
|
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
static void
|
|
|
|
test_seteuid1 (enum ACTION action, int tno)
|
|
|
|
{
|
|
|
|
if (action == PREPARE)
|
|
|
|
return;
|
|
|
|
|
|
|
|
if (action != CHECK_AFTER)
|
|
|
|
check_prev_uid (tno);
|
|
|
|
|
|
|
|
if (action == SET && seteuid (nobody_uid) < 0)
|
|
|
|
{
|
|
|
|
printf ("seteuid failed: %m\n");
|
|
|
|
exit (1);
|
|
|
|
}
|
|
|
|
|
|
|
|
if (action != CHECK_BEFORE)
|
|
|
|
{
|
|
|
|
uid_t ruid, euid, suid;
|
|
|
|
if (getresuid (&ruid, &euid, &suid) < 0)
|
|
|
|
{
|
|
|
|
printf ("getresuid failed: %d %m\n", tno);
|
|
|
|
exit (1);
|
|
|
|
}
|
|
|
|
|
|
|
|
if (ruid != prev_ruid || euid != nobody_uid || suid != prev_suid)
|
|
|
|
{
|
|
|
|
printf ("after seteuid %d (%d %d %d) != (%d %d %d)\n", tno,
|
|
|
|
ruid, euid, suid, prev_ruid, nobody_uid, prev_suid);
|
|
|
|
exit (1);
|
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
static void
|
|
|
|
test_seteuid2 (enum ACTION action, int tno)
|
|
|
|
{
|
|
|
|
if (action == PREPARE)
|
|
|
|
{
|
|
|
|
if (setresuid (nobody_uid, nobody_uid, -1) < 0)
|
|
|
|
{
|
|
|
|
printf ("setresuid failed: %m\n");
|
|
|
|
exit (1);
|
|
|
|
}
|
|
|
|
|
|
|
|
prev_ruid = nobody_uid;
|
|
|
|
prev_euid = nobody_uid;
|
|
|
|
nobody_uid = prev_suid;
|
|
|
|
return;
|
|
|
|
}
|
|
|
|
|
|
|
|
test_seteuid1 (action, tno);
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
static void
|
|
|
|
test_setreuid1 (enum ACTION action, int tno)
|
|
|
|
{
|
|
|
|
if (action == PREPARE)
|
|
|
|
return;
|
|
|
|
|
|
|
|
if (action != CHECK_AFTER)
|
|
|
|
check_prev_uid (tno);
|
|
|
|
|
|
|
|
if (action == SET && setreuid (-1, nobody_uid) < 0)
|
|
|
|
{
|
|
|
|
printf ("setreuid failed: %m\n");
|
|
|
|
exit (1);
|
|
|
|
}
|
|
|
|
|
|
|
|
if (action != CHECK_BEFORE)
|
|
|
|
{
|
|
|
|
uid_t ruid, euid, suid, esuid;
|
|
|
|
if (getresuid (&ruid, &euid, &suid) < 0)
|
|
|
|
{
|
|
|
|
printf ("getresuid failed: %d %m\n", tno);
|
|
|
|
exit (1);
|
|
|
|
}
|
|
|
|
|
|
|
|
if (prev_ruid != nobody_uid)
|
|
|
|
esuid = nobody_uid;
|
|
|
|
else
|
|
|
|
esuid = prev_suid;
|
|
|
|
|
|
|
|
if (ruid != prev_ruid || euid != nobody_uid || suid != esuid)
|
|
|
|
{
|
|
|
|
printf ("after setreuid %d (%d %d %d) != (%d %d %d)\n", tno,
|
|
|
|
ruid, euid, suid, prev_ruid, nobody_uid, esuid);
|
|
|
|
exit (1);
|
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
static void
|
|
|
|
test_setreuid2 (enum ACTION action, int tno)
|
|
|
|
{
|
|
|
|
if (action == PREPARE)
|
|
|
|
return;
|
|
|
|
|
|
|
|
if (action != CHECK_AFTER)
|
|
|
|
check_prev_uid (tno);
|
|
|
|
|
|
|
|
if (action == SET && setreuid (nobody_uid, -1) < 0)
|
|
|
|
{
|
|
|
|
printf ("setreuid failed: %m\n");
|
|
|
|
exit (1);
|
|
|
|
}
|
|
|
|
|
|
|
|
if (action != CHECK_BEFORE)
|
|
|
|
{
|
|
|
|
uid_t ruid, euid, suid;
|
|
|
|
if (getresuid (&ruid, &euid, &suid) < 0)
|
|
|
|
{
|
|
|
|
printf ("getresuid failed: %d %m\n", tno);
|
|
|
|
exit (1);
|
|
|
|
}
|
|
|
|
|
|
|
|
if (ruid != nobody_uid || euid != prev_euid || suid != prev_euid)
|
|
|
|
{
|
|
|
|
printf ("after setreuid %d (%d %d %d) != (%d %d %d)\n", tno,
|
|
|
|
ruid, euid, suid, nobody_uid, prev_euid, prev_euid);
|
|
|
|
exit (1);
|
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
static void
|
|
|
|
test_setreuid3 (enum ACTION action, int tno)
|
|
|
|
{
|
|
|
|
if (action == PREPARE)
|
|
|
|
return;
|
|
|
|
|
|
|
|
if (action != CHECK_AFTER)
|
|
|
|
check_prev_uid (tno);
|
|
|
|
|
|
|
|
if (action == SET && setreuid (nobody_uid, nobody_uid) < 0)
|
|
|
|
{
|
|
|
|
printf ("setreuid failed: %m\n");
|
|
|
|
exit (1);
|
|
|
|
}
|
|
|
|
|
|
|
|
if (action != CHECK_BEFORE)
|
|
|
|
{
|
|
|
|
uid_t ruid, euid, suid;
|
|
|
|
if (getresuid (&ruid, &euid, &suid) < 0)
|
|
|
|
{
|
|
|
|
printf ("getresuid failed: %d %m\n", tno);
|
|
|
|
exit (1);
|
|
|
|
}
|
|
|
|
|
|
|
|
if (ruid != nobody_uid || euid != nobody_uid || suid != nobody_uid)
|
|
|
|
{
|
|
|
|
printf ("after setreuid %d (%d %d %d) != (%d %d %d)\n", tno,
|
|
|
|
ruid, euid, suid, nobody_uid, nobody_uid, nobody_uid);
|
|
|
|
exit (1);
|
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
static void
|
|
|
|
test_setreuid4 (enum ACTION action, int tno)
|
|
|
|
{
|
|
|
|
if (action == PREPARE)
|
|
|
|
{
|
|
|
|
if (setresuid (nobody_uid, nobody_uid, -1) < 0)
|
|
|
|
{
|
|
|
|
printf ("setresuid failed: %m\n");
|
|
|
|
exit (1);
|
|
|
|
}
|
|
|
|
|
|
|
|
prev_ruid = nobody_uid;
|
|
|
|
prev_euid = nobody_uid;
|
|
|
|
nobody_uid = prev_suid;
|
|
|
|
return;
|
|
|
|
}
|
|
|
|
|
|
|
|
test_setreuid1 (action, tno);
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
static void
|
|
|
|
test_setresuid1 (enum ACTION action, int tno)
|
|
|
|
{
|
|
|
|
if (action == PREPARE)
|
|
|
|
return;
|
|
|
|
|
|
|
|
if (action != CHECK_AFTER)
|
|
|
|
check_prev_uid (tno);
|
|
|
|
|
|
|
|
if (action == SET && setresuid (-1, nobody_uid, -1) < 0)
|
|
|
|
{
|
|
|
|
printf ("setresuid failed: %m\n");
|
|
|
|
exit (1);
|
|
|
|
}
|
|
|
|
|
|
|
|
if (action != CHECK_BEFORE)
|
|
|
|
{
|
|
|
|
uid_t ruid, euid, suid;
|
|
|
|
if (getresuid (&ruid, &euid, &suid) < 0)
|
|
|
|
{
|
|
|
|
printf ("getresuid failed: %d %m\n", tno);
|
|
|
|
exit (1);
|
|
|
|
}
|
|
|
|
|
|
|
|
if (ruid != prev_ruid || euid != nobody_uid || suid != prev_suid)
|
|
|
|
{
|
|
|
|
printf ("after setresuid %d (%d %d %d) != (%d %d %d)\n", tno,
|
|
|
|
ruid, euid, suid, prev_ruid, nobody_uid, prev_suid);
|
|
|
|
exit (1);
|
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
static void
|
|
|
|
test_setresuid2 (enum ACTION action, int tno)
|
|
|
|
{
|
|
|
|
if (action == PREPARE)
|
|
|
|
return;
|
|
|
|
|
|
|
|
if (action != CHECK_AFTER)
|
|
|
|
check_prev_uid (tno);
|
|
|
|
|
|
|
|
if (action == SET && setresuid (prev_euid, nobody_uid, nobody_uid) < 0)
|
|
|
|
{
|
|
|
|
printf ("setresuid failed: %m\n");
|
|
|
|
exit (1);
|
|
|
|
}
|
|
|
|
|
|
|
|
if (action != CHECK_BEFORE)
|
|
|
|
{
|
|
|
|
uid_t ruid, euid, suid;
|
|
|
|
if (getresuid (&ruid, &euid, &suid) < 0)
|
|
|
|
{
|
|
|
|
printf ("getresuid failed: %d %m\n", tno);
|
|
|
|
exit (1);
|
|
|
|
}
|
|
|
|
|
|
|
|
if (ruid != prev_euid || euid != nobody_uid || suid != nobody_uid)
|
|
|
|
{
|
|
|
|
printf ("after setresuid %d (%d %d %d) != (%d %d %d)\n", tno,
|
|
|
|
ruid, euid, suid, prev_euid, nobody_uid, nobody_uid);
|
|
|
|
exit (1);
|
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
static void
|
|
|
|
test_setresuid3 (enum ACTION action, int tno)
|
|
|
|
{
|
|
|
|
if (action == PREPARE)
|
|
|
|
return;
|
|
|
|
|
|
|
|
if (action != CHECK_AFTER)
|
|
|
|
check_prev_uid (tno);
|
|
|
|
|
|
|
|
if (action == SET && setresuid (nobody_uid, nobody_uid, nobody_uid) < 0)
|
|
|
|
{
|
|
|
|
printf ("setresuid failed: %m\n");
|
|
|
|
exit (1);
|
|
|
|
}
|
|
|
|
|
|
|
|
if (action != CHECK_BEFORE)
|
|
|
|
{
|
|
|
|
uid_t ruid, euid, suid;
|
|
|
|
if (getresuid (&ruid, &euid, &suid) < 0)
|
|
|
|
{
|
|
|
|
printf ("getresuid failed: %d %m\n", tno);
|
|
|
|
exit (1);
|
|
|
|
}
|
|
|
|
|
|
|
|
if (ruid != nobody_uid || euid != nobody_uid || suid != nobody_uid)
|
|
|
|
{
|
|
|
|
printf ("after setresuid %d (%d %d %d) != (%d %d %d)\n", tno,
|
|
|
|
ruid, euid, suid, nobody_uid, nobody_uid, nobody_uid);
|
|
|
|
exit (1);
|
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
static void
|
|
|
|
test_setresuid4 (enum ACTION action, int tno)
|
|
|
|
{
|
|
|
|
if (action == PREPARE)
|
|
|
|
{
|
|
|
|
if (setresuid (nobody_uid, nobody_uid, -1) < 0)
|
|
|
|
{
|
|
|
|
printf ("setresuid failed: %m\n");
|
|
|
|
exit (1);
|
|
|
|
}
|
|
|
|
|
|
|
|
prev_ruid = nobody_uid;
|
|
|
|
prev_euid = nobody_uid;
|
|
|
|
nobody_uid = prev_suid;
|
|
|
|
return;
|
|
|
|
}
|
|
|
|
|
|
|
|
test_setresuid1 (action, tno);
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
static void
|
|
|
|
test_setgid1 (enum ACTION action, int tno)
|
|
|
|
{
|
|
|
|
if (action == PREPARE)
|
|
|
|
return;
|
|
|
|
|
|
|
|
if (action != CHECK_AFTER)
|
|
|
|
check_prev_gid (tno);
|
|
|
|
|
|
|
|
if (action == SET && setgid (nobody_gid) < 0)
|
|
|
|
{
|
|
|
|
printf ("setgid failed: %m\n");
|
|
|
|
exit (1);
|
|
|
|
}
|
|
|
|
|
|
|
|
if (action != CHECK_BEFORE)
|
|
|
|
{
|
|
|
|
gid_t rgid, egid, sgid;
|
|
|
|
if (getresgid (&rgid, &egid, &sgid) < 0)
|
|
|
|
{
|
|
|
|
printf ("getresgid failed: %d %m\n", tno);
|
|
|
|
exit (1);
|
|
|
|
}
|
|
|
|
|
|
|
|
if (rgid != nobody_gid || egid != nobody_gid || sgid != nobody_gid)
|
|
|
|
{
|
|
|
|
printf ("after setgid %d (%d %d %d) != (%d %d %d)\n", tno,
|
|
|
|
rgid, egid, sgid, nobody_gid, nobody_gid, nobody_gid);
|
|
|
|
exit (1);
|
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
static void
|
|
|
|
test_setgid2 (enum ACTION action, int tno)
|
|
|
|
{
|
|
|
|
if (action == PREPARE)
|
|
|
|
{
|
|
|
|
if (setresgid (nobody_gid, nobody_gid, -1) < 0)
|
|
|
|
{
|
|
|
|
printf ("setresgid failed: %m\n");
|
|
|
|
exit (1);
|
|
|
|
}
|
|
|
|
|
|
|
|
prev_rgid = nobody_gid;
|
|
|
|
prev_egid = nobody_gid;
|
|
|
|
|
|
|
|
if (setresuid (nobody_uid, nobody_uid, -1) < 0)
|
|
|
|
{
|
|
|
|
printf ("setresuid failed: %m\n");
|
|
|
|
exit (1);
|
|
|
|
}
|
|
|
|
|
|
|
|
prev_ruid = nobody_uid;
|
|
|
|
prev_euid = nobody_uid;
|
|
|
|
return;
|
|
|
|
}
|
|
|
|
|
|
|
|
if (action != CHECK_AFTER)
|
|
|
|
check_prev_gid (tno);
|
|
|
|
|
|
|
|
if (action == SET && setgid (prev_sgid) < 0)
|
|
|
|
{
|
|
|
|
printf ("setgid failed: %m\n");
|
|
|
|
exit (1);
|
|
|
|
}
|
|
|
|
|
|
|
|
if (action != CHECK_BEFORE)
|
|
|
|
{
|
|
|
|
gid_t rgid, egid, sgid;
|
|
|
|
if (getresgid (&rgid, &egid, &sgid) < 0)
|
|
|
|
{
|
|
|
|
printf ("getresgid failed: %d %m\n", tno);
|
|
|
|
exit (1);
|
|
|
|
}
|
|
|
|
|
|
|
|
if (rgid != nobody_gid || egid != prev_sgid || sgid != prev_sgid)
|
|
|
|
{
|
|
|
|
printf ("after setgid %d (%d %d %d) != (%d %d %d)\n", tno,
|
|
|
|
rgid, egid, sgid, nobody_gid, prev_sgid, prev_sgid);
|
|
|
|
exit (1);
|
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
static void
|
|
|
|
test_setegid1 (enum ACTION action, int tno)
|
|
|
|
{
|
|
|
|
if (action == PREPARE)
|
|
|
|
return;
|
|
|
|
|
|
|
|
if (action != CHECK_AFTER)
|
|
|
|
check_prev_gid (tno);
|
|
|
|
|
|
|
|
if (action == SET && setegid (nobody_gid) < 0)
|
|
|
|
{
|
|
|
|
printf ("setegid failed: %m\n");
|
|
|
|
exit (1);
|
|
|
|
}
|
|
|
|
|
|
|
|
if (action != CHECK_BEFORE)
|
|
|
|
{
|
|
|
|
gid_t rgid, egid, sgid;
|
|
|
|
if (getresgid (&rgid, &egid, &sgid) < 0)
|
|
|
|
{
|
|
|
|
printf ("getresgid failed: %d %m\n", tno);
|
|
|
|
exit (1);
|
|
|
|
}
|
|
|
|
|
|
|
|
if (rgid != prev_rgid || egid != nobody_gid || sgid != prev_sgid)
|
|
|
|
{
|
|
|
|
printf ("after setegid %d (%d %d %d) != (%d %d %d)\n", tno,
|
|
|
|
rgid, egid, sgid, prev_rgid, nobody_gid, prev_sgid);
|
|
|
|
exit (1);
|
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
static void
|
|
|
|
test_setegid2 (enum ACTION action, int tno)
|
|
|
|
{
|
|
|
|
if (action == PREPARE)
|
|
|
|
{
|
|
|
|
if (setresgid (nobody_gid, nobody_gid, -1) < 0)
|
|
|
|
{
|
|
|
|
printf ("setresgid failed: %m\n");
|
|
|
|
exit (1);
|
|
|
|
}
|
|
|
|
|
|
|
|
prev_rgid = nobody_gid;
|
|
|
|
prev_egid = nobody_gid;
|
|
|
|
nobody_gid = prev_sgid;
|
|
|
|
return;
|
|
|
|
}
|
|
|
|
|
|
|
|
test_setegid1 (action, tno);
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
static void
|
|
|
|
test_setregid1 (enum ACTION action, int tno)
|
|
|
|
{
|
|
|
|
if (action == PREPARE)
|
|
|
|
return;
|
|
|
|
|
|
|
|
if (action != CHECK_AFTER)
|
|
|
|
check_prev_gid (tno);
|
|
|
|
|
|
|
|
if (action == SET && setregid (-1, nobody_gid) < 0)
|
|
|
|
{
|
|
|
|
printf ("setregid failed: %m\n");
|
|
|
|
exit (1);
|
|
|
|
}
|
|
|
|
|
|
|
|
if (action != CHECK_BEFORE)
|
|
|
|
{
|
|
|
|
gid_t rgid, egid, sgid, esgid;
|
|
|
|
if (getresgid (&rgid, &egid, &sgid) < 0)
|
|
|
|
{
|
|
|
|
printf ("getresgid failed: %d %m\n", tno);
|
|
|
|
exit (1);
|
|
|
|
}
|
|
|
|
|
|
|
|
if (prev_rgid != nobody_gid)
|
|
|
|
esgid = nobody_gid;
|
|
|
|
else
|
|
|
|
esgid = prev_sgid;
|
|
|
|
|
|
|
|
if (rgid != prev_rgid || egid != nobody_gid || sgid != esgid)
|
|
|
|
{
|
|
|
|
printf ("after setregid %d (%d %d %d) != (%d %d %d)\n", tno,
|
|
|
|
rgid, egid, sgid, prev_rgid, nobody_gid, esgid);
|
|
|
|
exit (1);
|
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
static void
|
|
|
|
test_setregid2 (enum ACTION action, int tno)
|
|
|
|
{
|
|
|
|
if (action == PREPARE)
|
|
|
|
return;
|
|
|
|
|
|
|
|
if (action != CHECK_AFTER)
|
|
|
|
check_prev_gid (tno);
|
|
|
|
|
|
|
|
if (action == SET && setregid (nobody_gid, -1) < 0)
|
|
|
|
{
|
|
|
|
printf ("setregid failed: %m\n");
|
|
|
|
exit (1);
|
|
|
|
}
|
|
|
|
|
|
|
|
if (action != CHECK_BEFORE)
|
|
|
|
{
|
|
|
|
gid_t rgid, egid, sgid;
|
|
|
|
if (getresgid (&rgid, &egid, &sgid) < 0)
|
|
|
|
{
|
|
|
|
printf ("getresgid failed: %d %m\n", tno);
|
|
|
|
exit (1);
|
|
|
|
}
|
|
|
|
|
|
|
|
if (rgid != nobody_gid || egid != prev_egid || sgid != prev_egid)
|
|
|
|
{
|
|
|
|
printf ("after setregid %d (%d %d %d) != (%d %d %d)\n", tno,
|
|
|
|
rgid, egid, sgid, nobody_gid, prev_egid, prev_egid);
|
|
|
|
exit (1);
|
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
static void
|
|
|
|
test_setregid3 (enum ACTION action, int tno)
|
|
|
|
{
|
|
|
|
if (action == PREPARE)
|
|
|
|
return;
|
|
|
|
|
|
|
|
if (action != CHECK_AFTER)
|
|
|
|
check_prev_gid (tno);
|
|
|
|
|
|
|
|
if (action == SET && setregid (nobody_gid, nobody_gid) < 0)
|
|
|
|
{
|
|
|
|
printf ("setregid failed: %m\n");
|
|
|
|
exit (1);
|
|
|
|
}
|
|
|
|
|
|
|
|
if (action != CHECK_BEFORE)
|
|
|
|
{
|
|
|
|
gid_t rgid, egid, sgid;
|
|
|
|
if (getresgid (&rgid, &egid, &sgid) < 0)
|
|
|
|
{
|
|
|
|
printf ("getresgid failed: %d %m\n", tno);
|
|
|
|
exit (1);
|
|
|
|
}
|
|
|
|
|
|
|
|
if (rgid != nobody_gid || egid != nobody_gid || sgid != nobody_gid)
|
|
|
|
{
|
|
|
|
printf ("after setregid %d (%d %d %d) != (%d %d %d)\n", tno,
|
|
|
|
rgid, egid, sgid, nobody_gid, nobody_gid, nobody_gid);
|
|
|
|
exit (1);
|
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
static void
|
|
|
|
test_setregid4 (enum ACTION action, int tno)
|
|
|
|
{
|
|
|
|
if (action == PREPARE)
|
|
|
|
{
|
|
|
|
if (setresgid (nobody_gid, nobody_gid, -1) < 0)
|
|
|
|
{
|
|
|
|
printf ("setresgid failed: %m\n");
|
|
|
|
exit (1);
|
|
|
|
}
|
|
|
|
|
|
|
|
prev_rgid = nobody_gid;
|
|
|
|
prev_egid = nobody_gid;
|
|
|
|
nobody_gid = prev_sgid;
|
|
|
|
return;
|
|
|
|
}
|
|
|
|
|
|
|
|
test_setregid1 (action, tno);
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
static void
|
|
|
|
test_setresgid1 (enum ACTION action, int tno)
|
|
|
|
{
|
|
|
|
if (action == PREPARE)
|
|
|
|
return;
|
|
|
|
|
|
|
|
if (action != CHECK_AFTER)
|
|
|
|
check_prev_gid (tno);
|
|
|
|
|
|
|
|
if (action == SET && setresgid (-1, nobody_gid, -1) < 0)
|
|
|
|
{
|
|
|
|
printf ("setresgid failed: %m\n");
|
|
|
|
exit (1);
|
|
|
|
}
|
|
|
|
|
|
|
|
if (action != CHECK_BEFORE)
|
|
|
|
{
|
|
|
|
gid_t rgid, egid, sgid;
|
|
|
|
if (getresgid (&rgid, &egid, &sgid) < 0)
|
|
|
|
{
|
|
|
|
printf ("getresgid failed: %d %m\n", tno);
|
|
|
|
exit (1);
|
|
|
|
}
|
|
|
|
|
|
|
|
if (rgid != prev_rgid || egid != nobody_gid || sgid != prev_sgid)
|
|
|
|
{
|
|
|
|
printf ("after setresgid %d (%d %d %d) != (%d %d %d)\n", tno,
|
|
|
|
rgid, egid, sgid, prev_rgid, nobody_gid, prev_sgid);
|
|
|
|
exit (1);
|
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
static void
|
|
|
|
test_setresgid2 (enum ACTION action, int tno)
|
|
|
|
{
|
|
|
|
if (action == PREPARE)
|
|
|
|
return;
|
|
|
|
|
|
|
|
if (action != CHECK_AFTER)
|
|
|
|
check_prev_gid (tno);
|
|
|
|
|
|
|
|
if (action == SET && setresgid (prev_egid, nobody_gid, nobody_gid) < 0)
|
|
|
|
{
|
|
|
|
printf ("setresgid failed: %m\n");
|
|
|
|
exit (1);
|
|
|
|
}
|
|
|
|
|
|
|
|
if (action != CHECK_BEFORE)
|
|
|
|
{
|
|
|
|
gid_t rgid, egid, sgid;
|
|
|
|
if (getresgid (&rgid, &egid, &sgid) < 0)
|
|
|
|
{
|
|
|
|
printf ("getresgid failed: %d %m\n", tno);
|
|
|
|
exit (1);
|
|
|
|
}
|
|
|
|
|
|
|
|
if (rgid != prev_egid || egid != nobody_gid || sgid != nobody_gid)
|
|
|
|
{
|
|
|
|
printf ("after setresgid %d (%d %d %d) != (%d %d %d)\n", tno,
|
|
|
|
rgid, egid, sgid, prev_egid, nobody_gid, nobody_gid);
|
|
|
|
exit (1);
|
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
static void
|
|
|
|
test_setresgid3 (enum ACTION action, int tno)
|
|
|
|
{
|
|
|
|
if (action == PREPARE)
|
|
|
|
return;
|
|
|
|
|
|
|
|
if (action != CHECK_AFTER)
|
|
|
|
check_prev_gid (tno);
|
|
|
|
|
|
|
|
if (action == SET && setresgid (nobody_gid, nobody_gid, nobody_gid) < 0)
|
|
|
|
{
|
|
|
|
printf ("setresgid failed: %m\n");
|
|
|
|
exit (1);
|
|
|
|
}
|
|
|
|
|
|
|
|
if (action != CHECK_BEFORE)
|
|
|
|
{
|
|
|
|
gid_t rgid, egid, sgid;
|
|
|
|
if (getresgid (&rgid, &egid, &sgid) < 0)
|
|
|
|
{
|
|
|
|
printf ("getresgid failed: %d %m\n", tno);
|
|
|
|
exit (1);
|
|
|
|
}
|
|
|
|
|
|
|
|
if (rgid != nobody_gid || egid != nobody_gid || sgid != nobody_gid)
|
|
|
|
{
|
|
|
|
printf ("after setresgid %d (%d %d %d) != (%d %d %d)\n", tno,
|
|
|
|
rgid, egid, sgid, nobody_gid, nobody_gid, nobody_gid);
|
|
|
|
exit (1);
|
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
static void
|
|
|
|
test_setresgid4 (enum ACTION action, int tno)
|
|
|
|
{
|
|
|
|
if (action == PREPARE)
|
|
|
|
{
|
|
|
|
if (setresgid (nobody_gid, nobody_gid, -1) < 0)
|
|
|
|
{
|
|
|
|
printf ("setresgid failed: %m\n");
|
|
|
|
exit (1);
|
|
|
|
}
|
|
|
|
|
|
|
|
prev_rgid = nobody_gid;
|
|
|
|
prev_egid = nobody_gid;
|
|
|
|
nobody_gid = prev_sgid;
|
|
|
|
return;
|
|
|
|
}
|
|
|
|
|
|
|
|
test_setresgid1 (action, tno);
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
static struct setuid_test
|
|
|
|
{
|
|
|
|
const char *name;
|
|
|
|
void (*test) (enum ACTION, int tno);
|
|
|
|
} setuid_tests[] =
|
|
|
|
{
|
|
|
|
{ "setuid1", test_setuid1 },
|
|
|
|
{ "setuid2", test_setuid2 },
|
|
|
|
{ "seteuid1", test_seteuid1 },
|
|
|
|
{ "seteuid2", test_seteuid2 },
|
|
|
|
{ "setreuid1", test_setreuid1 },
|
|
|
|
{ "setreuid2", test_setreuid2 },
|
|
|
|
{ "setreuid3", test_setreuid3 },
|
|
|
|
{ "setreuid4", test_setreuid4 },
|
|
|
|
{ "setresuid1", test_setresuid1 },
|
|
|
|
{ "setresuid2", test_setresuid2 },
|
|
|
|
{ "setresuid3", test_setresuid3 },
|
|
|
|
{ "setresuid4", test_setresuid4 },
|
|
|
|
{ "setgid1", test_setgid1 },
|
|
|
|
{ "setgid2", test_setgid2 },
|
|
|
|
{ "setegid1", test_setegid1 },
|
|
|
|
{ "setegid2", test_setegid2 },
|
|
|
|
{ "setregid1", test_setregid1 },
|
|
|
|
{ "setregid2", test_setregid2 },
|
|
|
|
{ "setregid3", test_setregid3 },
|
|
|
|
{ "setregid4", test_setregid4 },
|
|
|
|
{ "setresgid1", test_setresgid1 },
|
|
|
|
{ "setresgid2", test_setresgid2 },
|
|
|
|
{ "setresgid3", test_setresgid3 },
|
|
|
|
{ "setresgid4", test_setresgid4 }
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
|
|
static void *
|
|
|
|
tf2 (void *arg)
|
|
|
|
{
|
|
|
|
int e = pthread_barrier_wait (&b4);
|
|
|
|
if (e != 0 && e != PTHREAD_BARRIER_SERIAL_THREAD)
|
|
|
|
{
|
|
|
|
puts ("barrier_wait failed");
|
|
|
|
exit (1);
|
|
|
|
}
|
|
|
|
|
|
|
|
setuid_tests[TESTNO (arg)].test (CHECK_AFTER, THREADNO (arg));
|
|
|
|
return NULL;
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
static void *
|
|
|
|
tf (void *arg)
|
|
|
|
{
|
|
|
|
setuid_tests[TESTNO (arg)].test (CHECK_BEFORE, THREADNO (arg));
|
|
|
|
|
|
|
|
int e = pthread_barrier_wait (&b3);
|
|
|
|
if (e != 0 && e != PTHREAD_BARRIER_SERIAL_THREAD)
|
|
|
|
{
|
|
|
|
puts ("barrier_wait failed");
|
|
|
|
exit (1);
|
|
|
|
}
|
|
|
|
|
|
|
|
return tf2 (arg);
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
static int
|
|
|
|
do_one_test (long int testno)
|
|
|
|
{
|
|
|
|
printf ("%s test\n", setuid_tests[testno].name);
|
|
|
|
|
|
|
|
pid_t pid = fork ();
|
|
|
|
if (pid == 0)
|
|
|
|
{
|
|
|
|
setuid_tests[testno].test (PREPARE, 0);
|
|
|
|
setuid_tests[testno].test (SET, 0);
|
|
|
|
exit (0);
|
|
|
|
}
|
|
|
|
|
|
|
|
if (pid < 0)
|
|
|
|
{
|
|
|
|
printf ("fork failed: %m\n");
|
|
|
|
exit (1);
|
|
|
|
}
|
|
|
|
|
|
|
|
int status;
|
|
|
|
if (waitpid (pid, &status, 0) < 0)
|
|
|
|
{
|
|
|
|
printf ("waitpid failed: %m\n");
|
|
|
|
exit (1);
|
|
|
|
}
|
|
|
|
|
|
|
|
if (!WIFEXITED (status))
|
|
|
|
{
|
|
|
|
puts ("child did not exit");
|
|
|
|
exit (1);
|
|
|
|
}
|
|
|
|
|
|
|
|
if (WEXITSTATUS (status))
|
|
|
|
{
|
|
|
|
printf ("skipping %s test\n", setuid_tests[testno].name);
|
|
|
|
return 0;
|
|
|
|
}
|
|
|
|
|
|
|
|
pid = fork ();
|
|
|
|
if (pid == 0)
|
|
|
|
{
|
|
|
|
setuid_tests[testno].test (PREPARE, 0);
|
|
|
|
|
|
|
|
pthread_t th;
|
|
|
|
int e = pthread_create (&th, NULL, tf, (void *) (testno | 0x100L));
|
|
|
|
if (e != 0)
|
|
|
|
{
|
|
|
|
printf ("create failed: %m\n");
|
|
|
|
exit (1);
|
|
|
|
}
|
|
|
|
|
|
|
|
pthread_t th2;
|
|
|
|
e = pthread_create (&th2, NULL, tf, (void *) (testno | 0x200L));
|
|
|
|
if (e != 0)
|
|
|
|
{
|
|
|
|
printf ("create failed: %m\n");
|
|
|
|
exit (1);
|
|
|
|
}
|
|
|
|
|
|
|
|
e = pthread_barrier_wait (&b3);
|
|
|
|
if (e != 0 && e != PTHREAD_BARRIER_SERIAL_THREAD)
|
|
|
|
{
|
|
|
|
puts ("barrier_wait failed");
|
|
|
|
exit (1);
|
|
|
|
}
|
|
|
|
|
|
|
|
setuid_tests[testno].test (SET, 0);
|
|
|
|
|
|
|
|
pthread_t th3;
|
|
|
|
e = pthread_create (&th3, NULL, tf2, (void *) (testno | 0x300L));
|
|
|
|
if (e != 0)
|
|
|
|
{
|
|
|
|
printf ("create failed: %m\n");
|
|
|
|
exit (1);
|
|
|
|
}
|
|
|
|
|
|
|
|
e = pthread_barrier_wait (&b4);
|
|
|
|
if (e != 0 && e != PTHREAD_BARRIER_SERIAL_THREAD)
|
|
|
|
{
|
|
|
|
puts ("barrier_wait failed");
|
|
|
|
exit (1);
|
|
|
|
}
|
|
|
|
|
|
|
|
exit (0);
|
|
|
|
}
|
|
|
|
|
|
|
|
if (pid < 0)
|
|
|
|
{
|
|
|
|
printf ("fork failed: %m\n");
|
|
|
|
exit (1);
|
|
|
|
}
|
|
|
|
|
|
|
|
if (waitpid (pid, &status, 0) < 0)
|
|
|
|
{
|
|
|
|
printf ("waitpid failed: %m\n");
|
|
|
|
exit (1);
|
|
|
|
}
|
|
|
|
|
|
|
|
if (!WIFEXITED (status))
|
|
|
|
{
|
|
|
|
puts ("second child did not exit");
|
|
|
|
exit (1);
|
|
|
|
}
|
|
|
|
|
|
|
|
if (WEXITSTATUS (status))
|
|
|
|
exit (WEXITSTATUS (status));
|
|
|
|
|
|
|
|
return 0;
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
static int
|
|
|
|
do_test (void)
|
|
|
|
{
|
|
|
|
struct passwd *pwd = getpwnam ("nobody");
|
|
|
|
if (pwd == NULL)
|
|
|
|
{
|
|
|
|
puts ("User nobody doesn't exist");
|
|
|
|
return 0;
|
|
|
|
}
|
|
|
|
nobody_uid = pwd->pw_uid;
|
|
|
|
nobody_gid = pwd->pw_gid;
|
|
|
|
|
|
|
|
if (getresuid (&prev_ruid, &prev_euid, &prev_suid) < 0)
|
|
|
|
{
|
|
|
|
printf ("getresuid failed: %m\n");
|
|
|
|
exit (1);
|
|
|
|
}
|
|
|
|
|
|
|
|
if (getresgid (&prev_rgid, &prev_egid, &prev_sgid) < 0)
|
|
|
|
{
|
|
|
|
printf ("getresgid failed: %m\n");
|
|
|
|
exit (1);
|
|
|
|
}
|
|
|
|
|
|
|
|
if (prev_ruid == nobody_uid || prev_euid == nobody_uid
|
|
|
|
|| prev_suid == nobody_uid)
|
|
|
|
{
|
|
|
|
puts ("already running as user nobody, skipping tests");
|
|
|
|
exit (0);
|
|
|
|
}
|
|
|
|
|
|
|
|
if (prev_rgid == nobody_gid || prev_egid == nobody_gid
|
|
|
|
|| prev_sgid == nobody_gid)
|
|
|
|
{
|
|
|
|
puts ("already running as group nobody, skipping tests");
|
|
|
|
exit (0);
|
|
|
|
}
|
|
|
|
|
|
|
|
if (pthread_barrier_init (&b3, NULL, 3) != 0)
|
|
|
|
{
|
|
|
|
puts ("barrier_init failed");
|
|
|
|
exit (1);
|
|
|
|
}
|
|
|
|
|
|
|
|
if (pthread_barrier_init (&b4, NULL, 4) != 0)
|
|
|
|
{
|
|
|
|
puts ("barrier_init failed");
|
|
|
|
exit (1);
|
|
|
|
}
|
|
|
|
|
|
|
|
for (unsigned long int testno = 0;
|
|
|
|
testno < sizeof (setuid_tests) / sizeof (setuid_tests[0]);
|
|
|
|
++testno)
|
|
|
|
do_one_test (testno);
|
|
|
|
return 0;
|
|
|
|
}
|
|
|
|
|
|
|
|
#define TEST_FUNCTION do_test ()
|
|
|
|
#include "../test-skeleton.c"
|