1*e7776783SApple OSS Distributions #pragma clang diagnostic ignored "-Wdeprecated-declarations" 2*e7776783SApple OSS Distributions 3*e7776783SApple OSS Distributions #include <sys/codesign.h> 4*e7776783SApple OSS Distributions #include <signal.h> 5*e7776783SApple OSS Distributions 6*e7776783SApple OSS Distributions #include <darwintest.h> 7*e7776783SApple OSS Distributions #include <darwintest_utils.h> 8*e7776783SApple OSS Distributions 9*e7776783SApple OSS Distributions T_GLOBAL_META(T_META_RUN_CONCURRENTLY(true)); 10*e7776783SApple OSS Distributions 11*e7776783SApple OSS Distributions T_DECL(static_binary, 12*e7776783SApple OSS Distributions "Verify that static binaries have CS_NO_UNTRUSTED_HELPERS set") { 13*e7776783SApple OSS Distributions int ret; 14*e7776783SApple OSS Distributions pid_t pid; 15*e7776783SApple OSS Distributions char *launch_argv[] = {"./static_binary", NULL}; 16*e7776783SApple OSS Distributions ret = dt_launch_tool(&pid, launch_argv, /*start_suspended*/ true, NULL, NULL); 17*e7776783SApple OSS Distributions T_QUIET; 18*e7776783SApple OSS Distributions T_ASSERT_POSIX_SUCCESS(ret, "dt_launch_tool on static binary"); 19*e7776783SApple OSS Distributions 20*e7776783SApple OSS Distributions uint32_t status = 0; 21*e7776783SApple OSS Distributions ret = csops(pid, CS_OPS_STATUS, &status, sizeof(status)); 22*e7776783SApple OSS Distributions T_QUIET; 23*e7776783SApple OSS Distributions T_EXPECT_POSIX_SUCCESS(ret, "request CS_OPS_STATUS on static binary"); 24*e7776783SApple OSS Distributions 25*e7776783SApple OSS Distributions if (!ret) { 26*e7776783SApple OSS Distributions T_EXPECT_BITS_SET(status, CS_NO_UNTRUSTED_HELPERS, "CS_NO_UNTRUSTED_HELPERS should be set on static binary"); 27*e7776783SApple OSS Distributions } 28*e7776783SApple OSS Distributions 29*e7776783SApple OSS Distributions ret = kill(pid, SIGCONT); 30*e7776783SApple OSS Distributions T_QUIET; 31*e7776783SApple OSS Distributions T_ASSERT_POSIX_SUCCESS(ret, "SIGCONT on static binary"); 32*e7776783SApple OSS Distributions 33*e7776783SApple OSS Distributions int exitstatus, signal; 34*e7776783SApple OSS Distributions dt_waitpid(pid, &exitstatus, &signal, 30); 35*e7776783SApple OSS Distributions T_QUIET; 36*e7776783SApple OSS Distributions T_ASSERT_EQ(signal, 0, "static binary exited"); 37*e7776783SApple OSS Distributions T_QUIET; 38*e7776783SApple OSS Distributions T_ASSERT_EQ(exitstatus, 42, "static binary exited with code 42"); 39*e7776783SApple OSS Distributions } 40