mirror of
https://sourceware.org/git/glibc.git
synced 2024-11-30 13:13:43 +08:00
c43e69db62
Use the support_capture_subprogram_self_sgid to spawn an sgid child.
Reviewed-by: Carlos O'Donell <carlos@redhat.com>
(cherry picked from commit ca33528106)
128 lines
2.9 KiB
C
128 lines
2.9 KiB
C
/* Copyright (C) 2012-2018 Free Software Foundation, Inc.
|
|
This file is part of the GNU C Library.
|
|
|
|
The GNU C Library is free software; you can redistribute it and/or
|
|
modify it under the terms of the GNU Lesser General Public
|
|
License as published by the Free Software Foundation; either
|
|
version 2.1 of the License, or (at your option) any later version.
|
|
|
|
The GNU C Library is distributed in the hope that it will be useful,
|
|
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
Lesser General Public License for more details.
|
|
|
|
You should have received a copy of the GNU Lesser General Public
|
|
License along with the GNU C Library; if not, see
|
|
<http://www.gnu.org/licenses/>. */
|
|
|
|
/* Verify that tunables correctly filter out unsafe environment variables like
|
|
MALLOC_CHECK_ and MALLOC_MMAP_THRESHOLD_ but also retain
|
|
MALLOC_MMAP_THRESHOLD_ in an unprivileged child. */
|
|
|
|
#include <errno.h>
|
|
#include <fcntl.h>
|
|
#include <stdlib.h>
|
|
#include <stdint.h>
|
|
#include <stdio.h>
|
|
#include <string.h>
|
|
#include <sys/stat.h>
|
|
#include <sys/wait.h>
|
|
#include <unistd.h>
|
|
|
|
#include <support/check.h>
|
|
#include <support/support.h>
|
|
#include <support/test-driver.h>
|
|
#include <support/capture_subprocess.h>
|
|
|
|
static char SETGID_CHILD[] = "setgid-child";
|
|
|
|
#ifndef test_child
|
|
static int
|
|
test_child (void)
|
|
{
|
|
if (getenv ("MALLOC_CHECK_") != NULL)
|
|
{
|
|
printf ("MALLOC_CHECK_ is still set\n");
|
|
return 1;
|
|
}
|
|
|
|
if (getenv ("MALLOC_MMAP_THRESHOLD_") == NULL)
|
|
{
|
|
printf ("MALLOC_MMAP_THRESHOLD_ lost\n");
|
|
return 1;
|
|
}
|
|
|
|
if (getenv ("LD_HWCAP_MASK") != NULL)
|
|
{
|
|
printf ("LD_HWCAP_MASK still set\n");
|
|
return 1;
|
|
}
|
|
|
|
return 0;
|
|
}
|
|
#endif
|
|
|
|
#ifndef test_parent
|
|
static int
|
|
test_parent (void)
|
|
{
|
|
if (getenv ("MALLOC_CHECK_") == NULL)
|
|
{
|
|
printf ("MALLOC_CHECK_ lost\n");
|
|
return 1;
|
|
}
|
|
|
|
if (getenv ("MALLOC_MMAP_THRESHOLD_") == NULL)
|
|
{
|
|
printf ("MALLOC_MMAP_THRESHOLD_ lost\n");
|
|
return 1;
|
|
}
|
|
|
|
if (getenv ("LD_HWCAP_MASK") == NULL)
|
|
{
|
|
printf ("LD_HWCAP_MASK lost\n");
|
|
return 1;
|
|
}
|
|
|
|
return 0;
|
|
}
|
|
#endif
|
|
|
|
static int
|
|
do_test (int argc, char **argv)
|
|
{
|
|
/* Setgid child process. */
|
|
if (argc == 2 && strcmp (argv[1], SETGID_CHILD) == 0)
|
|
{
|
|
if (getgid () == getegid ())
|
|
/* This can happen if the file system is mounted nosuid. */
|
|
FAIL_UNSUPPORTED ("SGID failed: GID and EGID match (%jd)\n",
|
|
(intmax_t) getgid ());
|
|
|
|
int ret = test_child ();
|
|
|
|
if (ret != 0)
|
|
exit (1);
|
|
|
|
exit (EXIT_SUCCESS);
|
|
}
|
|
else
|
|
{
|
|
if (test_parent () != 0)
|
|
exit (1);
|
|
|
|
int status = support_capture_subprogram_self_sgid (SETGID_CHILD);
|
|
|
|
if (WEXITSTATUS (status) == EXIT_UNSUPPORTED)
|
|
return EXIT_UNSUPPORTED;
|
|
|
|
if (!WIFEXITED (status))
|
|
FAIL_EXIT1 ("Unexpected exit status %d from child process\n", status);
|
|
|
|
return 0;
|
|
}
|
|
}
|
|
|
|
#define TEST_FUNCTION_ARGV do_test
|
|
#include <support/test-driver.c>
|