1 | /* Copyright (C) 2012-2022 Free Software Foundation, Inc. |
2 | This file is part of the GNU C Library. |
3 | |
4 | The GNU C Library is free software; you can redistribute it and/or |
5 | modify it under the terms of the GNU Lesser General Public |
6 | License as published by the Free Software Foundation; either |
7 | version 2.1 of the License, or (at your option) any later version. |
8 | |
9 | The GNU C Library is distributed in the hope that it will be useful, |
10 | but WITHOUT ANY WARRANTY; without even the implied warranty of |
11 | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU |
12 | Lesser General Public License for more details. |
13 | |
14 | You should have received a copy of the GNU Lesser General Public |
15 | License along with the GNU C Library; if not, see |
16 | <https://www.gnu.org/licenses/>. */ |
17 | |
18 | /* Test that secure_getenv works by invoking the test as a SGID |
19 | program with a group ID from the supplementary group list. This |
20 | test can fail spuriously if the user is not a member of a suitable |
21 | supplementary group. */ |
22 | |
23 | #include <errno.h> |
24 | #include <fcntl.h> |
25 | #include <stdlib.h> |
26 | #include <stdint.h> |
27 | #include <stdio.h> |
28 | #include <string.h> |
29 | #include <sys/stat.h> |
30 | #include <sys/wait.h> |
31 | #include <unistd.h> |
32 | |
33 | #include <support/check.h> |
34 | #include <support/support.h> |
35 | #include <support/capture_subprocess.h> |
36 | #include <support/test-driver.h> |
37 | |
38 | static char MAGIC_ARGUMENT[] = "run-actual-test" ; |
39 | |
40 | static int |
41 | do_test (void) |
42 | { |
43 | if (getenv ("PATH" ) == NULL) |
44 | { |
45 | printf (format: "PATH not set\n" ); |
46 | exit (1); |
47 | } |
48 | if (secure_getenv (name: "PATH" ) == NULL) |
49 | { |
50 | printf (format: "PATH not set according to secure_getenv\n" ); |
51 | exit (1); |
52 | } |
53 | if (strcmp (getenv ("PATH" ), secure_getenv (name: "PATH" )) != 0) |
54 | { |
55 | printf (format: "PATH mismatch (%s, %s)\n" , |
56 | getenv ("PATH" ), secure_getenv (name: "PATH" )); |
57 | exit (1); |
58 | } |
59 | |
60 | int status = support_capture_subprogram_self_sgid (child_id: MAGIC_ARGUMENT); |
61 | |
62 | if (WEXITSTATUS (status) == EXIT_UNSUPPORTED) |
63 | return EXIT_UNSUPPORTED; |
64 | |
65 | if (!WIFEXITED (status)) |
66 | FAIL_EXIT1 ("Unexpected exit status %d from child process\n" , status); |
67 | |
68 | return 0; |
69 | } |
70 | |
71 | static void |
72 | alternative_main (int argc, char **argv) |
73 | { |
74 | if (argc == 2 && strcmp (argv[1], MAGIC_ARGUMENT) == 0) |
75 | { |
76 | if (getgid () == getegid ()) |
77 | /* This can happen if the file system is mounted nosuid. */ |
78 | FAIL_UNSUPPORTED ("SGID failed: GID and EGID match (%jd)\n" , |
79 | (intmax_t) getgid ()); |
80 | if (getenv ("PATH" ) == NULL) |
81 | FAIL_EXIT (3, "PATH variable not present\n" ); |
82 | if (secure_getenv (name: "PATH" ) != NULL) |
83 | FAIL_EXIT (4, "PATH variable not filtered out\n" ); |
84 | |
85 | exit (EXIT_SUCCESS); |
86 | } |
87 | } |
88 | |
89 | #define PREPARE alternative_main |
90 | #include <support/test-driver.c> |
91 | |