#! /bin/sh
# FS QA Test No. 193
#
# Test permission checks in ->setattr
#
#-----------------------------------------------------------------------
# Copyright (c) 2008 Christoph Hellwig.
#
# This program is free software; you can redistribute it and/or
# modify it under the terms of the GNU General Public License as
# published by the Free Software Foundation.
#
# This program is distributed in the hope that it would be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write the Free Software Foundation,
# Inc.,  51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
#-----------------------------------------------------------------------
#
# creator
owner=hch@lst.de

seq=`basename $0`
echo "QA output created by $seq"

here=`pwd`
tmp=/tmp/$$
status=1	# failure is the default!
trap "_cleanup_files; exit \$status" 0 1 2 3 15
tag="added by qa $seq"

#
# For some tests we need a secondary group for the qa_user.  Currently
# that's not available in the framework, so the tests using it are
# commented out.
#
#group2=foo

#
# Create two files, one owned by root, one by the qa_user
#
_create_files()
{
	touch test.root
	touch test.${qa_user}
	chown ${qa_user}:${qa_user} test.${qa_user}
}

#
# Remove our files again
#
_cleanup_files()
{
	rm -f test.${qa_user}
	rm -f test.root
}

# get standard environment, filters and checks
. ./common.rc
. ./common.filter

# real QA test starts here
_supported_fs generic
_supported_os Linux

_require_user
_need_to_be_root


#
# make sure we have a normal umask set
#
umask 022


#
# Test the ATTR_UID case
#
echo
echo "testing ATTR_UID"
echo

_create_files

echo "user: chown root owned file to qa_user (should fail)"
su ${qa_user} -c "chown ${qa_user} test.root"

echo "user: chown root owned file to root (should fail)"
su ${qa_user} -c "chown root test.root"

echo "user: chown qa_user owned file to qa_user (should succeed)"
su ${qa_user} -c "chown ${qa_user} test.${qa_user}"

# this would work without _POSIX_CHOWN_RESTRICTED
echo "user: chown qa_user owned file to root (should fail)"
su ${qa_user} -c "chown root test.${qa_user}"

_cleanup_files

#
# Test the ATTR_GID case
#
echo
echo "testing ATTR_GID"
echo

_create_files

echo "user: chgrp root owned file to root (should fail)"
su ${qa_user} -c "chgrp root test.root"

echo "user: chgrp qa_user owned file to root (should fail)"
su ${qa_user} -c "chgrp root test.${qa_user}"

echo "user: chgrp root owned file to qa_user (should fail)"
su ${qa_user} -c "chgrp ${qa_user} test.root"

echo "user: chgrp qa_user owned file to qa_user (should succeed)"
su ${qa_user} -c "chgrp ${qa_user} test.${qa_user}"

#echo "user: chgrp qa_user owned file to secondary group (should succeed)"
#su ${qa_user} -c "chgrp ${group2} test.${qa_user}"

_cleanup_files


#
# Test the ATTR_MODE case
#
echo
echo "testing ATTR_MODE"
echo

_create_files

echo "user: chmod a+r on qa_user owned file (should succeed)"
su ${qa_user} -c "chmod a+r test.${qa_user}"

echo "user: chmod a+r on root owned file (should fail)"
su ${qa_user} -c "chmod a+r test.root"

#
# Setup a file owned by the qa_user, but with a group ID that
# is not present in the qa_users group list (use root to make it easier for it)
# and mark it with set sgid bit
#
# From Posix (www.opengroup.org) for chmod:
#	"If the calling process does not have appropriate privileges, and
#	if the group ID of the file does not match the effective group ID
#	or one of the supplementary group IDs and if the file is a regular
#	file, bit S_ISGID (set-group-ID on execution) in the file's mode
#	shall be cleared upon successful return from chmod()."
# i.e.
# reg file + file's gid not in process' group set + no approp. privileges -> clear sgid
#
echo "check that the sgid bit is cleared"
chown ${qa_user}:root test.${qa_user}
chmod g+s test.${qa_user}

# and let the qa_user change permission bits
su ${qa_user} -c "chmod a+w test.${qa_user}"
stat -c '%A' test.${qa_user}

#
# Setup a file owned by the qa_user and with the suid bit set.
# A chmod by root should not clear the suid bit.
# There is nothing in Posix that says it should but just checking.
#
echo "check that suid bit is not cleared"
chmod u+s test.${qa_user}
chmod a+w test.${qa_user}
stat -c '%A' test.${qa_user}

_cleanup_files

_create_files
# Now test out the clear of suid/sgid for chown
#
# From Posix (www.opengroup.org) for chown:
#	"If the specified file is a regular file, one or more of the S_IXUSR,
#	S_IXGRP, or S_IXOTH bits of the file mode are set, and the process
#	does not have appropriate privileges, the set-user-ID (S_ISUID) and
#	set-group-ID (S_ISGID) bits of the file mode shall be cleared upon
#	successful return from chown(). If the specified file is a regular
#	file, one or more of the S_IXUSR, S_IXGRP, or S_IXOTH bits of the
#	file mode are set, and the process has appropriate privileges, it
#	is implementation-defined whether the set-user-ID and set-group-ID
#	bits are altered. If the chown() function is successfully invoked
#	on a file that is not a regular file and one or more of the S_IXUSR,
#	S_IXGRP, or S_IXOTH bits of the file mode are set, the set-user-ID
#	and set-group-ID bits may be cleared."
# i.e.
# reg file + exec-mode-bits set + no appropriate privileges -> clear suid,sgid
# reg file + exec-mode-bits set + appropriate privileges -> maybe clear suid,sgid
# non reg file + exec-mode-bits set + chown success on file (??) -> maybe clear suid/sgid
#
echo "check that suid/sgid bits are cleared after successful chown..."

echo "with no exec perm"
chmod ug+s test.${qa_user}
echo -n "before: "; stat -c '%A' test.${qa_user}
chown root test.${qa_user}
echo -n "after:  "; stat -c '%A' test.${qa_user}

echo "with user exec perm"
chmod ug+s test.${qa_user}
chmod u+x test.${qa_user}
echo -n "before: "; stat -c '%A' test.${qa_user}
chown root test.${qa_user}
echo -n "after:  "; stat -c '%A' test.${qa_user}

echo "with group exec perm"
chmod ug+s test.${qa_user}
chmod g+x test.${qa_user}
chmod u-x test.${qa_user}
echo -n "before: "; stat -c '%A' test.${qa_user}
chown root test.${qa_user}
echo -n "after:  "; stat -c '%A' test.${qa_user}

echo "with user+group exec perm"
chmod ug+s test.${qa_user}
chmod ug+x test.${qa_user}
echo -n "before: "; stat -c '%A' test.${qa_user}
chown root test.${qa_user}
echo -n "after:  "; stat -c '%A' test.${qa_user}

_cleanup_files


#
# Test ATTR_*TIMES_SET
#
echo
echo "testing ATTR_*TIMES_SET"
echo

_create_files

echo "user: touch qa_user file (should succeed)"
su ${qa_user} -c "touch test.${qa_user}"

echo "user: touch root file (should fail)"
su ${qa_user} -c "touch test.root"

_cleanup_files

# success, all done
echo "*** done"
rm -f $seq.full
status=0