1 #include <darwintest.h>
2
3 #include <sys/kauth.h>
4 #include <sys/persona.h>
5 #include <uuid/uuid.h>
6
7 T_GLOBAL_META(
8 T_META_NAMESPACE("xnu.persona"),
9 T_META_CHECK_LEAKS(false),
10 T_META_RUN_CONCURRENTLY(true),
11 T_META_ENABLED(!TARGET_OS_WATCH) // rdar://81809878
12 );
13
14 static uid_t
_create_persona(int persona_type,uint32_t persona_info_version)15 _create_persona(int persona_type, uint32_t persona_info_version)
16 {
17 struct kpersona_info pinfo = {
18 .persona_info_version = persona_info_version,
19 .persona_type = persona_type,
20 };
21
22 uuid_t uuid;
23 uuid_generate(uuid);
24 uuid_string_t uuid_string;
25 uuid_unparse(uuid, uuid_string);
26 snprintf(pinfo.persona_name, MAXLOGNAME, "persona_test.%s", uuid_string);
27
28 uid_t persona_id = 0;
29 int ret = kpersona_alloc(&pinfo, &persona_id);
30 T_WITH_ERRNO; T_ASSERT_EQ(ret, 0, NULL);
31 T_ASSERT_GT(persona_id, 0, NULL);
32
33 return persona_id;
34 }
35
36 T_DECL(mutlipe_system_personas, "create multiple PERSONA_SYSTEM", T_META_TAG_VM_PREFERRED)
37 {
38 uid_t first = _create_persona(PERSONA_SYSTEM, PERSONA_INFO_V1);
39 uid_t second = _create_persona(PERSONA_SYSTEM, PERSONA_INFO_V1);
40
41 T_ASSERT_NE(first, second, NULL);
42
43 T_ASSERT_EQ(kpersona_dealloc(first), 0, NULL);
44 T_ASSERT_EQ(kpersona_dealloc(second), 0, NULL);
45 }
46
47 T_DECL(mutlipe_system_proxy_personas, "create multiple PERSONA_SYSTEM_PROXY", T_META_TAG_VM_PREFERRED)
48 {
49 uid_t first = _create_persona(PERSONA_SYSTEM_PROXY, PERSONA_INFO_V1);
50 uid_t second = _create_persona(PERSONA_SYSTEM_PROXY, PERSONA_INFO_V1);
51
52 T_ASSERT_NE(first, second, NULL);
53
54 T_ASSERT_EQ(kpersona_dealloc(first), 0, NULL);
55 T_ASSERT_EQ(kpersona_dealloc(second), 0, NULL);
56 }
57
58 T_DECL(persona_info_v2, "create and query persona PERSONA_INFO_V2", T_META_TAG_VM_PREFERRED)
59 {
60 uid_t persona = _create_persona(PERSONA_MANAGED, PERSONA_INFO_V2);
61
62 for (uint32_t version = PERSONA_INFO_V1; version <= PERSONA_INFO_V2; version++) {
63 struct kpersona_info info = {
64 .persona_info_version = version,
65 };
66 int error = kpersona_info(persona, &info);
67 T_ASSERT_EQ(error, 0, "kpersona_info(v%d) error", version);
68 T_ASSERT_EQ(info.persona_type, PERSONA_MANAGED, "kpersona_info(v%d) type", version);
69 T_ASSERT_EQ(info.persona_info_version, version, "kpersona_info(v%d) version", version);
70 }
71
72 T_ASSERT_EQ(kpersona_dealloc(persona), 0, NULL);
73 }
74
75 T_DECL(persona_uid, "create a persona with a uid and fetch it", T_META_TAG_VM_PREFERRED)
76 {
77 uid_t persona_uid = 501;
78 struct kpersona_info pinfo = {
79 .persona_info_version = PERSONA_INFO_V2,
80 .persona_type = PERSONA_MANAGED,
81 .persona_uid = persona_uid,
82 };
83
84 uuid_t uuid;
85 uuid_generate(uuid);
86 uuid_string_t uuid_string;
87 uuid_unparse(uuid, uuid_string);
88 snprintf(pinfo.persona_name, MAXLOGNAME, "persona_test.%s", uuid_string);
89
90 uid_t persona_id = 0;
91 int ret = kpersona_alloc(&pinfo, &persona_id);
92 T_WITH_ERRNO; T_ASSERT_EQ(ret, 0, NULL);
93 T_ASSERT_GT(persona_id, 0, NULL);
94
95 struct kpersona_info fetched_persona = {
96 .persona_info_version = PERSONA_INFO_V2,
97 };
98 int error = kpersona_info(persona_id, &fetched_persona);
99 T_ASSERT_EQ(error, 0, NULL);
100 T_ASSERT_EQ(fetched_persona.persona_uid, persona_uid, NULL);
101
102 T_ASSERT_EQ(kpersona_dealloc(persona_id), 0, NULL);
103 }
104
105 T_DECL(persona_v1_uid_is_unset, "create PERSONA_INFO_V1 and make sure its UID is unset", T_META_TAG_VM_PREFERRED)
106 {
107 uid_t persona = _create_persona(PERSONA_MANAGED, PERSONA_INFO_V1);
108
109 struct kpersona_info info = {
110 .persona_info_version = PERSONA_INFO_V2,
111 };
112 int error = kpersona_info(persona, &info);
113
114 T_ASSERT_EQ(error, 0, NULL);
115 T_ASSERT_EQ(info.persona_uid, KAUTH_UID_NONE, NULL);
116 T_ASSERT_EQ(kpersona_dealloc(persona), 0, NULL);
117 }
118