xref: /xnu-11417.140.69/tests/sr_entitlement.c (revision 43a90889846e00bfb5cf1d255cdc0a701a1e05a4)
1*43a90889SApple OSS Distributions #include <stdlib.h>
2*43a90889SApple OSS Distributions #include <unistd.h>
3*43a90889SApple OSS Distributions #include <sys/sysctl.h>
4*43a90889SApple OSS Distributions 
5*43a90889SApple OSS Distributions #include <darwintest.h>
6*43a90889SApple OSS Distributions #include <darwintest_utils.h>
7*43a90889SApple OSS Distributions 
8*43a90889SApple OSS Distributions T_GLOBAL_META(T_META_RUN_CONCURRENTLY(false));
9*43a90889SApple OSS Distributions 
10*43a90889SApple OSS Distributions static int after_regions = 0;
11*43a90889SApple OSS Distributions 
12*43a90889SApple OSS Distributions /*
13*43a90889SApple OSS Distributions  * No system(3c) on watchOS, so provide our own.
14*43a90889SApple OSS Distributions  */
15*43a90889SApple OSS Distributions static int
my_system(const char * command)16*43a90889SApple OSS Distributions my_system(const char *command)
17*43a90889SApple OSS Distributions {
18*43a90889SApple OSS Distributions 	pid_t pid;
19*43a90889SApple OSS Distributions 	int status = 0;
20*43a90889SApple OSS Distributions 	const char *argv[] = {
21*43a90889SApple OSS Distributions 		"/bin/sh",
22*43a90889SApple OSS Distributions 		"-c",
23*43a90889SApple OSS Distributions 		command,
24*43a90889SApple OSS Distributions 		NULL
25*43a90889SApple OSS Distributions 	};
26*43a90889SApple OSS Distributions 
27*43a90889SApple OSS Distributions 	if (dt_launch_tool(&pid, (char **)(void *)argv, FALSE, NULL, NULL)) {
28*43a90889SApple OSS Distributions 		return -1;
29*43a90889SApple OSS Distributions 	}
30*43a90889SApple OSS Distributions 	sleep(2); /* let the child start running */
31*43a90889SApple OSS Distributions 
32*43a90889SApple OSS Distributions 	size_t size = sizeof(after_regions);
33*43a90889SApple OSS Distributions 	int ret = sysctlbyname("vm.shared_region_pager_count", &after_regions, &size, NULL, 0);
34*43a90889SApple OSS Distributions 	T_QUIET; T_EXPECT_POSIX_SUCCESS(ret, "get shared_region_pager_count after");
35*43a90889SApple OSS Distributions 
36*43a90889SApple OSS Distributions 	if (!dt_waitpid(pid, &status, NULL, 30)) {
37*43a90889SApple OSS Distributions 		if (status != 0) {
38*43a90889SApple OSS Distributions 			return status;
39*43a90889SApple OSS Distributions 		}
40*43a90889SApple OSS Distributions 		return -1;
41*43a90889SApple OSS Distributions 	}
42*43a90889SApple OSS Distributions 	return status;
43*43a90889SApple OSS Distributions }
44*43a90889SApple OSS Distributions 
45*43a90889SApple OSS Distributions /*
46*43a90889SApple OSS Distributions  * If shared regions by entitlement was not originally active, turn it back off.
47*43a90889SApple OSS Distributions  */
48*43a90889SApple OSS Distributions static int orig_setting = 0;
49*43a90889SApple OSS Distributions static void
cleanup(void)50*43a90889SApple OSS Distributions cleanup(void)
51*43a90889SApple OSS Distributions {
52*43a90889SApple OSS Distributions 	int ret;
53*43a90889SApple OSS Distributions 	int off = 0;
54*43a90889SApple OSS Distributions 	size_t size_off = sizeof(off);
55*43a90889SApple OSS Distributions 
56*43a90889SApple OSS Distributions 	if (orig_setting == 0) {
57*43a90889SApple OSS Distributions 		ret = sysctlbyname("vm.vm_shared_region_by_entitlement", NULL, NULL, &off, size_off);
58*43a90889SApple OSS Distributions 		T_QUIET; T_EXPECT_POSIX_SUCCESS(ret, "turning sysctl back off");
59*43a90889SApple OSS Distributions 	}
60*43a90889SApple OSS Distributions }
61*43a90889SApple OSS Distributions 
62*43a90889SApple OSS Distributions /*
63*43a90889SApple OSS Distributions  * This test:
64*43a90889SApple OSS Distributions  * - looks at the number of shared region pagers,
65*43a90889SApple OSS Distributions  * - launches a helper app that has entitlement for unique signing
66*43a90889SApple OSS Distributions  * - gets the number of shared region pagers again.
67*43a90889SApple OSS Distributions  * It expects to see additional shared region pager(s) to exist.
68*43a90889SApple OSS Distributions  *
69*43a90889SApple OSS Distributions  */
70*43a90889SApple OSS Distributions T_DECL(sr_entitlement, "shared region by entitlement test")
71*43a90889SApple OSS Distributions {
72*43a90889SApple OSS Distributions 	int ret;
73*43a90889SApple OSS Distributions 	size_t size;
74*43a90889SApple OSS Distributions 	int before_regions = 0;
75*43a90889SApple OSS Distributions 	int on = 1;
76*43a90889SApple OSS Distributions 	size_t size_on = sizeof(on);
77*43a90889SApple OSS Distributions 
78*43a90889SApple OSS Distributions #if !__arm64e__
79*43a90889SApple OSS Distributions 	T_SKIP("No pointer authentication support");
80*43a90889SApple OSS Distributions #endif
81*43a90889SApple OSS Distributions 
82*43a90889SApple OSS Distributions 	/*
83*43a90889SApple OSS Distributions 	 * Check if the sysctl vm_shared_region_by_entitlement exists and if so make
84*43a90889SApple OSS Distributions 	 * sure it is set.
85*43a90889SApple OSS Distributions 	 */
86*43a90889SApple OSS Distributions 	size = sizeof(orig_setting);
87*43a90889SApple OSS Distributions 	ret = sysctlbyname("vm.vm_shared_region_by_entitlement", &orig_setting, &size, &on, size_on);
88*43a90889SApple OSS Distributions 	if (ret != 0) {
89*43a90889SApple OSS Distributions 		T_SKIP("No pointer authentication support");
90*43a90889SApple OSS Distributions 	}
91*43a90889SApple OSS Distributions 
92*43a90889SApple OSS Distributions 	T_ATEND(cleanup);
93*43a90889SApple OSS Distributions 
94*43a90889SApple OSS Distributions 	size = sizeof(before_regions);
95*43a90889SApple OSS Distributions 	ret = sysctlbyname("vm.shared_region_pager_count", &before_regions, &size, NULL, 0);
96*43a90889SApple OSS Distributions 	T_QUIET; T_EXPECT_POSIX_SUCCESS(ret, "get shared_region_pager_count before");
97*43a90889SApple OSS Distributions 	T_QUIET; T_EXPECT_GE_INT(before_regions, 1, "invalid before number of regions");
98*43a90889SApple OSS Distributions 
99*43a90889SApple OSS Distributions 	ret = my_system("./sr_entitlement_helper");
100*43a90889SApple OSS Distributions 	if (ret != 0) {
101*43a90889SApple OSS Distributions 		T_ASSERT_FAIL("Couldn't run helper first time ret = %d", ret);
102*43a90889SApple OSS Distributions 	}
103*43a90889SApple OSS Distributions 
104*43a90889SApple OSS Distributions 	T_EXPECT_GT_INT(after_regions, before_regions, "expected additional SR pagers after running helper");
105*43a90889SApple OSS Distributions }
106