1*43a90889SApple OSS Distributions #include <darwintest.h> 2*43a90889SApple OSS Distributions 3*43a90889SApple OSS Distributions #include <errno.h> 4*43a90889SApple OSS Distributions #include <libproc.h> 5*43a90889SApple OSS Distributions #include <signal.h> 6*43a90889SApple OSS Distributions #include <spawn.h> 7*43a90889SApple OSS Distributions #include <spawn_private.h> 8*43a90889SApple OSS Distributions #include <stdbool.h> 9*43a90889SApple OSS Distributions #include <stdint.h> 10*43a90889SApple OSS Distributions #include <stdio.h> 11*43a90889SApple OSS Distributions #include <stdlib.h> 12*43a90889SApple OSS Distributions #include <string.h> 13*43a90889SApple OSS Distributions #include <sys/kauth.h> 14*43a90889SApple OSS Distributions #include <sys/proc_info.h> 15*43a90889SApple OSS Distributions #include <sys/spawn_internal.h> 16*43a90889SApple OSS Distributions #include <sys/sysctl.h> 17*43a90889SApple OSS Distributions #include <sysexits.h> 18*43a90889SApple OSS Distributions #include <unistd.h> 19*43a90889SApple OSS Distributions 20*43a90889SApple OSS Distributions T_GLOBAL_META(T_META_RUN_CONCURRENTLY(true)); 21*43a90889SApple OSS Distributions 22*43a90889SApple OSS Distributions T_DECL(posix_spawn_posix_cred, "Check posix_spawnattr for POSIX creds", 23*43a90889SApple OSS Distributions T_META_ASROOT(true), T_META_TAG_VM_PREFERRED) 24*43a90889SApple OSS Distributions { 25*43a90889SApple OSS Distributions posix_spawnattr_t attr; 26*43a90889SApple OSS Distributions int ret; 27*43a90889SApple OSS Distributions 28*43a90889SApple OSS Distributions ret = posix_spawnattr_init(&attr); 29*43a90889SApple OSS Distributions T_QUIET; 30*43a90889SApple OSS Distributions T_ASSERT_POSIX_SUCCESS(ret, "posix_spawnattr_init"); 31*43a90889SApple OSS Distributions 32*43a90889SApple OSS Distributions ret = posix_spawnattr_setflags(&attr, POSIX_SPAWN_START_SUSPENDED); 33*43a90889SApple OSS Distributions T_QUIET; 34*43a90889SApple OSS Distributions T_ASSERT_POSIX_SUCCESS(ret, "posix_spawnattr_setflags"); 35*43a90889SApple OSS Distributions 36*43a90889SApple OSS Distributions ret = posix_spawnattr_setflags(&attr, POSIX_SPAWN_SETSID); 37*43a90889SApple OSS Distributions T_ASSERT_POSIX_SUCCESS(ret, "posix_spawnattr_setflags(POSIX_SPAWN_SETSID)"); 38*43a90889SApple OSS Distributions 39*43a90889SApple OSS Distributions ret = posix_spawnattr_set_uid_np(&attr, 502); 40*43a90889SApple OSS Distributions T_ASSERT_POSIX_SUCCESS(ret, "posix_spawnattr_set_uid_np"); 41*43a90889SApple OSS Distributions 42*43a90889SApple OSS Distributions ret = posix_spawnattr_set_gid_np(&attr, 501); 43*43a90889SApple OSS Distributions T_ASSERT_POSIX_SUCCESS(ret, "posix_spawnattr_set_gid_np"); 44*43a90889SApple OSS Distributions 45*43a90889SApple OSS Distributions gid_t groups[3] = { 501, 250, 299 }; 46*43a90889SApple OSS Distributions ret = posix_spawnattr_set_groups_np(&attr, 3, &groups, KAUTH_UID_NONE); 47*43a90889SApple OSS Distributions T_ASSERT_POSIX_SUCCESS(ret, "posix_spawnattr_set_groups_np"); 48*43a90889SApple OSS Distributions 49*43a90889SApple OSS Distributions ret = posix_spawnattr_set_login_np(&attr, "fake-name"); 50*43a90889SApple OSS Distributions T_ASSERT_POSIX_SUCCESS(ret, "posix_spawnattr_set_login_np"); 51*43a90889SApple OSS Distributions 52*43a90889SApple OSS Distributions char * const prog = "/bin/sh"; 53*43a90889SApple OSS Distributions char * const argv_child[] = { prog, 54*43a90889SApple OSS Distributions "-c", 55*43a90889SApple OSS Distributions "test $(logname) = \"fake-name\" -a \"$(id -G)\" = \"501 250 299\"", 56*43a90889SApple OSS Distributions NULL, }; 57*43a90889SApple OSS Distributions pid_t child_pid; 58*43a90889SApple OSS Distributions extern char **environ; 59*43a90889SApple OSS Distributions 60*43a90889SApple OSS Distributions ret = posix_spawn(&child_pid, prog, NULL, &attr, argv_child, environ); 61*43a90889SApple OSS Distributions T_ASSERT_POSIX_SUCCESS(ret, "posix_spawn"); 62*43a90889SApple OSS Distributions 63*43a90889SApple OSS Distributions T_LOG("parent: spawned child with pid %d\n", child_pid); 64*43a90889SApple OSS Distributions 65*43a90889SApple OSS Distributions ret = posix_spawnattr_destroy(&attr); 66*43a90889SApple OSS Distributions T_QUIET; 67*43a90889SApple OSS Distributions T_ASSERT_POSIX_SUCCESS(ret, "posix_spawnattr_destroy"); 68*43a90889SApple OSS Distributions 69*43a90889SApple OSS Distributions struct proc_bsdinfo info; 70*43a90889SApple OSS Distributions 71*43a90889SApple OSS Distributions ret = proc_pidinfo(child_pid, PROC_PIDTBSDINFO, 1, &info, sizeof(info)); 72*43a90889SApple OSS Distributions T_QUIET; 73*43a90889SApple OSS Distributions T_ASSERT_EQ(ret, (int)sizeof(info), "proc_pidinfo(PROC_PIDTBSDINFO)"); 74*43a90889SApple OSS Distributions 75*43a90889SApple OSS Distributions T_EXPECT_TRUE((bool)(info.pbi_flags & PROC_FLAG_SLEADER), 76*43a90889SApple OSS Distributions "check setsid happened"); 77*43a90889SApple OSS Distributions T_EXPECT_EQ(info.pbi_uid, 502, "UID was set"); 78*43a90889SApple OSS Distributions T_EXPECT_EQ(info.pbi_gid, 501, "GID was set"); 79*43a90889SApple OSS Distributions 80*43a90889SApple OSS Distributions ret = kill(child_pid, SIGCONT); 81*43a90889SApple OSS Distributions T_ASSERT_POSIX_SUCCESS(ret, "kill(signal)"); 82*43a90889SApple OSS Distributions 83*43a90889SApple OSS Distributions T_LOG("parent: waiting for child process\n"); 84*43a90889SApple OSS Distributions 85*43a90889SApple OSS Distributions int status = 0; 86*43a90889SApple OSS Distributions int waitpid_result = waitpid(child_pid, &status, 0); 87*43a90889SApple OSS Distributions T_ASSERT_POSIX_SUCCESS(waitpid_result, "waitpid"); 88*43a90889SApple OSS Distributions T_ASSERT_EQ(waitpid_result, child_pid, "waitpid should return child we spawned"); 89*43a90889SApple OSS Distributions T_ASSERT_EQ(WIFEXITED(status), 1, "child should have exited normally"); 90*43a90889SApple OSS Distributions T_ASSERT_EQ(WEXITSTATUS(status), EX_OK, "child should have exited with success"); 91*43a90889SApple OSS Distributions } 92