reference, declaration → definition
definition → references, declarations, derived classes, virtual overrides
reference to multiple definitions → definitions
unreferenced

    1
    2
    3
    4
    5
    6
    7
    8
    9
   10
   11
   12
   13
   14
   15
   16
   17
   18
   19
   20
   21
   22
   23
   24
   25
   26
   27
   28
   29
   30
   31
   32
   33
   34
   35
   36
   37
   38
   39
   40
   41
   42
   43
   44
   45
   46
   47
   48
   49
   50
   51
   52
   53
   54
   55
   56
   57
   58
   59
   60
   61
   62
   63
   64
   65
   66
   67
   68

// RUN: %clangxx -O0 -g %s -o %t && %run %t 2>&1 | FileCheck %s

#include <sys/capsicum.h>
#include <sys/ioctl.h>

#include <assert.h>
#include <errno.h>
#include <stdio.h>
#include <string.h>
#include <termios.h>
#include <unistd.h>

void test_cap_ioctls() {
  cap_rights_t rights;
  unsigned long ncmds[] = {TIOCGETA, TIOCGWINSZ, FIODTYPE};
  unsigned long rcmds = 0;
  cap_rights_t *rptr = cap_rights_init(&rights, CAP_IOCTL, CAP_READ);
  assert(rptr);

  int rv = cap_rights_limit(STDIN_FILENO, &rights);
  assert(rv == 0);
  rv = cap_ioctls_limit(STDIN_FILENO, ncmds, 3);
  assert(rv == 0);
  ssize_t rz = cap_ioctls_get(STDIN_FILENO, &rcmds, 3);
  assert(rz == 3);
  printf("ioctls test: %ld commands authorized\n", rz);
}

void test_cap_rights() {
  cap_rights_t rights, little, remove, grights;
  cap_rights_t *rptr = cap_rights_init(&rights, CAP_IOCTL, CAP_READ);
  assert(rptr);
  cap_rights_t *gptr = cap_rights_init(&remove, CAP_IOCTL);
  assert(gptr);
  cap_rights_t *sptr = cap_rights_init(&little, CAP_READ);
  assert(sptr);
  bool hasit = cap_rights_contains(rptr, sptr);
  assert(hasit == true);
  cap_rights_t *pptr = cap_rights_remove(&rights, gptr);
  hasit = cap_rights_contains(pptr, sptr);
  assert(hasit == true);
  cap_rights_t *aptr = cap_rights_merge(&rights, gptr);
  assert(aptr);
  bool correct = cap_rights_is_valid(&rights);
  assert(correct == true);

  int rv = cap_rights_limit(STDIN_FILENO, &rights);
  assert(rv == 0);
  rv = cap_rights_get(STDIN_FILENO, &grights);
  assert(rv == 0);
  assert(memcmp(&grights, &rights, sizeof(grights)) == 0);
  cap_rights_t *iptr = cap_rights_set(&rights, CAP_IOCTL);
  assert(iptr);
  cap_rights_t *eptr = cap_rights_clear(&rights, CAP_READ);
  assert(eptr);
  hasit = cap_rights_is_set(&rights, CAP_IOCTL);
  assert(hasit == true);
  printf("rights test: %d\n", rv);
}

int main(void) {
  test_cap_ioctls();

  test_cap_rights();

  // CHECK: ioctls test: {{.*}} commands authorized
  // CHECK: rights test: {{.*}}
}