// RUN: %clangxx -O0 -g %s -o %t && %run %t 2>&1 | FileCheck %s #include #include #include #include #include #include #include #include void test_cap_ioctls() { cap_rights_t rights; unsigned long ncmds[] = {TIOCGETA, TIOCGWINSZ, FIODTYPE}; unsigned long rcmds = 0; cap_rights_t *rptr = cap_rights_init(&rights, CAP_IOCTL, CAP_READ); assert(rptr); int rv = cap_rights_limit(STDIN_FILENO, &rights); assert(rv == 0); rv = cap_ioctls_limit(STDIN_FILENO, ncmds, 3); assert(rv == 0); ssize_t rz = cap_ioctls_get(STDIN_FILENO, &rcmds, 3); assert(rz == 3); printf("ioctls test: %ld commands authorized\n", rz); } void test_cap_rights() { cap_rights_t rights, little, remove, grights; cap_rights_t *rptr = cap_rights_init(&rights, CAP_IOCTL, CAP_READ); assert(rptr); cap_rights_t *gptr = cap_rights_init(&remove, CAP_IOCTL); assert(gptr); cap_rights_t *sptr = cap_rights_init(&little, CAP_READ); assert(sptr); bool hasit = cap_rights_contains(rptr, sptr); assert(hasit == true); cap_rights_t *pptr = cap_rights_remove(&rights, gptr); hasit = cap_rights_contains(pptr, sptr); assert(hasit == true); cap_rights_t *aptr = cap_rights_merge(&rights, gptr); assert(aptr); bool correct = cap_rights_is_valid(&rights); assert(correct == true); int rv = cap_rights_limit(STDIN_FILENO, &rights); assert(rv == 0); rv = cap_rights_get(STDIN_FILENO, &grights); assert(rv == 0); assert(memcmp(&grights, &rights, sizeof(grights)) == 0); cap_rights_t *iptr = cap_rights_set(&rights, CAP_IOCTL); assert(iptr); cap_rights_t *eptr = cap_rights_clear(&rights, CAP_READ); assert(eptr); hasit = cap_rights_is_set(&rights, CAP_IOCTL); assert(hasit == true); printf("rights test: %d\n", rv); } int main(void) { test_cap_ioctls(); test_cap_rights(); // CHECK: ioctls test: {{.*}} commands authorized // CHECK: rights test: {{.*}} }