blob: 91e38a0055c0d5437c14ce8b82109608c7e280ae (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
|
# Copyright (c) 2026 The FreeBSD Foundation
#
# SPDX-License-Identifier: BSD-2-Clause
#
# This software was developed by Olivier Certner <olce@FreeBSD.org> at
# Kumacom SARL under sponsorship from the FreeBSD Foundation.
atf_test_case rule_no_target_part
rule_no_target_part_head()
{
atf_set descr "Missing target part in a rule"
}
rule_no_target_part_body()
{
sysctl_set_and_check_fails_rules "uid=0>"
sysctl_set_and_check_fails_rules "gid=0>"
sysctl_set_and_check_fails_rules "uid=0"
sysctl_set_and_check_fails_rules "gid=0"
}
atf_test_case rule_no_match_part
rule_no_match_part_head()
{
atf_set descr "Missing match part in a rule"
}
rule_no_match_part_body()
{
sysctl_set_and_check_fails_rules ">uid=0"
sysctl_set_and_check_fails_rules ">gid=0"
}
atf_test_case rule_space_between_flag_and_gid_fail
rule_space_between_flag_and_gid_fail_head()
{
atf_set descr "No space allowed between flag and GID"
}
rule_space_between_flag_and_gid_fail_body()
{
sysctl_set_and_check_fails_rules "uid=1001>uid=0,gid=0,+ gid=0"
}
atf_test_case rule_user_names_fail
rule_user_names_fail_head()
{
atf_set descr "Reject user names (only numerical IDs supported)"
}
rule_user_names_fail_body()
{
sysctl_set_and_check_fails_rules "uid=user>uid=0"
sysctl_set_and_check_fails_rules "uid=1001>uid=root"
}
atf_test_case rule_group_names_fail
rule_group_names_fail_head()
{
atf_set descr "Reject group names (only numerical IDs supported)"
}
rule_group_names_fail_body()
{
sysctl_set_and_check_fails_rules "gid=group>gid=0"
sysctl_set_and_check_fails_rules "gid=1001>gid=root"
sysctl_set_and_check_fails_rules "gid=1001>gid=0,+gid=operator"
}
atf_test_case rules_wrong_separator
rules_wrong_separator_head()
{
atf_set descr "Wrong rules separator"
}
rules_wrong_separator_body()
{
sysctl_set_and_check_fails_rules "uid=1001>gid=0:gid=1001>gid=5"
}
# Added after observing a panic() in this situation because of a double-free
# after introduction of "exec_paths".
atf_test_case non_first_rule_unparseable
non_first_rule_unparseable_head()
{
atf_set descr "Non-first rule wrong"
}
non_first_rule_unparseable_body()
{
sysctl_set_and_check_fails_rules "gid=1001>uid=0;hello"
}
atf_init_test_cases()
{
. "$(atf_get_srcdir)"/common.sh
atf_add_test_case rule_no_target_part
atf_add_test_case rule_no_match_part
atf_add_test_case rule_space_between_flag_and_gid_fail
atf_add_test_case rule_user_names_fail
atf_add_test_case rule_group_names_fail
atf_add_test_case rules_wrong_separator
atf_add_test_case non_first_rule_unparseable
}
|
