Alexander Afanasyev | 49343f6 | 2015-01-26 21:58:07 -0800 | [diff] [blame] | 1 | /* -*- Mode:C++; c-file-style:"gnu"; indent-tabs-mode:nil; -*- */ |
Davide Pesavento | 7015694 | 2018-09-15 18:40:21 -0400 | [diff] [blame] | 2 | /* |
Davide Pesavento | cf7db2f | 2019-03-24 23:17:28 -0400 | [diff] [blame] | 3 | * Copyright (c) 2014-2019, Regents of the University of California, |
Alexander Afanasyev | 49343f6 | 2015-01-26 21:58:07 -0800 | [diff] [blame] | 4 | * Arizona Board of Regents, |
| 5 | * Colorado State University, |
| 6 | * University Pierre & Marie Curie, Sorbonne University, |
| 7 | * Washington University in St. Louis, |
| 8 | * Beijing Institute of Technology, |
| 9 | * The University of Memphis. |
| 10 | * |
| 11 | * This file is part of NFD (Named Data Networking Forwarding Daemon). |
| 12 | * See AUTHORS.md for complete list of NFD authors and contributors. |
| 13 | * |
| 14 | * NFD is free software: you can redistribute it and/or modify it under the terms |
| 15 | * of the GNU General Public License as published by the Free Software Foundation, |
| 16 | * either version 3 of the License, or (at your option) any later version. |
| 17 | * |
| 18 | * NFD is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; |
| 19 | * without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR |
| 20 | * PURPOSE. See the GNU General Public License for more details. |
| 21 | * |
| 22 | * You should have received a copy of the GNU General Public License along with |
| 23 | * NFD, e.g., in COPYING.md file. If not, see <http://www.gnu.org/licenses/>. |
| 24 | */ |
| 25 | |
Davide Pesavento | 2cae8ca | 2019-04-18 20:48:05 -0400 | [diff] [blame] | 26 | #include "common/privilege-helper.hpp" |
Alexander Afanasyev | 49343f6 | 2015-01-26 21:58:07 -0800 | [diff] [blame] | 27 | |
Alexander Afanasyev | 49343f6 | 2015-01-26 21:58:07 -0800 | [diff] [blame] | 28 | #include "tests/test-common.hpp" |
| 29 | |
| 30 | namespace nfd { |
| 31 | namespace tests { |
| 32 | |
Davide Pesavento | cf7db2f | 2019-03-24 23:17:28 -0400 | [diff] [blame] | 33 | BOOST_AUTO_TEST_SUITE(TestPrivilegeHelper) |
Alexander Afanasyev | 49343f6 | 2015-01-26 21:58:07 -0800 | [diff] [blame] | 34 | |
| 35 | BOOST_AUTO_TEST_CASE(DropRaise) |
| 36 | { |
Alexander Afanasyev | e0d71b0 | 2016-05-25 11:39:13 -0700 | [diff] [blame] | 37 | #ifdef HAVE_PRIVILEGE_DROP_AND_ELEVATE |
Davide Pesavento | 231ddd7 | 2016-09-02 22:20:00 +0000 | [diff] [blame] | 38 | SKIP_IF_NOT_SUPERUSER(); |
Alexander Afanasyev | 49343f6 | 2015-01-26 21:58:07 -0800 | [diff] [blame] | 39 | |
Davide Pesavento | 7015694 | 2018-09-15 18:40:21 -0400 | [diff] [blame] | 40 | // The following assumes that daemon:daemon is present on the test system |
| 41 | PrivilegeHelper::initialize("daemon", "daemon"); |
Alexander Afanasyev | 49343f6 | 2015-01-26 21:58:07 -0800 | [diff] [blame] | 42 | BOOST_CHECK_EQUAL(::geteuid(), 0); |
Davide Pesavento | 7015694 | 2018-09-15 18:40:21 -0400 | [diff] [blame] | 43 | BOOST_CHECK_EQUAL(::getegid(), 0); |
Alexander Afanasyev | 49343f6 | 2015-01-26 21:58:07 -0800 | [diff] [blame] | 44 | |
Davide Pesavento | 7015694 | 2018-09-15 18:40:21 -0400 | [diff] [blame] | 45 | PrivilegeHelper::drop(); |
Alexander Afanasyev | 49343f6 | 2015-01-26 21:58:07 -0800 | [diff] [blame] | 46 | BOOST_CHECK_NE(::geteuid(), 0); |
Davide Pesavento | 7015694 | 2018-09-15 18:40:21 -0400 | [diff] [blame] | 47 | BOOST_CHECK_NE(::getegid(), 0); |
Alexander Afanasyev | 49343f6 | 2015-01-26 21:58:07 -0800 | [diff] [blame] | 48 | |
Alexander Afanasyev | 49343f6 | 2015-01-26 21:58:07 -0800 | [diff] [blame] | 49 | PrivilegeHelper::runElevated([] { |
Davide Pesavento | 231ddd7 | 2016-09-02 22:20:00 +0000 | [diff] [blame] | 50 | BOOST_CHECK_EQUAL(::geteuid(), 0); |
Davide Pesavento | 7015694 | 2018-09-15 18:40:21 -0400 | [diff] [blame] | 51 | BOOST_CHECK_EQUAL(::getegid(), 0); |
Davide Pesavento | 231ddd7 | 2016-09-02 22:20:00 +0000 | [diff] [blame] | 52 | }); |
Alexander Afanasyev | 49343f6 | 2015-01-26 21:58:07 -0800 | [diff] [blame] | 53 | BOOST_CHECK_NE(::geteuid(), 0); |
Davide Pesavento | 7015694 | 2018-09-15 18:40:21 -0400 | [diff] [blame] | 54 | BOOST_CHECK_NE(::getegid(), 0); |
Alexander Afanasyev | 49343f6 | 2015-01-26 21:58:07 -0800 | [diff] [blame] | 55 | |
Davide Pesavento | 7015694 | 2018-09-15 18:40:21 -0400 | [diff] [blame] | 56 | BOOST_CHECK_THROW(PrivilegeHelper::runElevated(std::function<void()>{}), |
| 57 | std::bad_function_call); |
| 58 | BOOST_CHECK_NE(::geteuid(), 0); |
| 59 | BOOST_CHECK_NE(::getegid(), 0); |
| 60 | |
| 61 | PrivilegeHelper::raise(); |
Alexander Afanasyev | 49343f6 | 2015-01-26 21:58:07 -0800 | [diff] [blame] | 62 | BOOST_CHECK_EQUAL(::geteuid(), 0); |
Davide Pesavento | 7015694 | 2018-09-15 18:40:21 -0400 | [diff] [blame] | 63 | BOOST_CHECK_EQUAL(::getegid(), 0); |
| 64 | |
Alexander Afanasyev | e0d71b0 | 2016-05-25 11:39:13 -0700 | [diff] [blame] | 65 | #else |
Davide Pesavento | 231ddd7 | 2016-09-02 22:20:00 +0000 | [diff] [blame] | 66 | BOOST_TEST_MESSAGE("Dropping/raising privileges not supported on this platform, skipping"); |
Alexander Afanasyev | e0d71b0 | 2016-05-25 11:39:13 -0700 | [diff] [blame] | 67 | #endif // HAVE_PRIVILEGE_DROP_AND_ELEVATE |
Alexander Afanasyev | 49343f6 | 2015-01-26 21:58:07 -0800 | [diff] [blame] | 68 | } |
| 69 | |
Davide Pesavento | 7015694 | 2018-09-15 18:40:21 -0400 | [diff] [blame] | 70 | BOOST_AUTO_TEST_SUITE_END() // TestPrivilegeHelper |
Alexander Afanasyev | 49343f6 | 2015-01-26 21:58:07 -0800 | [diff] [blame] | 71 | |
| 72 | } // namespace tests |
| 73 | } // namespace nfd |