ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity

Verifying that named switches UID

Browse Source 
This test runs only under root, which is required for the user-switch
`-u` option to work.

Closes #537.

(cherry picked from commit b00360537e)
This commit is contained in:
Michal Nowak
2019-11-27 11:52:08 +00:00
committed by Ondřej Surý
parent 0074d5542e
commit 412edf8982
5 changed files with 54 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
bin/tests/system/conf.sh.in
+4
View File
@@ -22,6 +22,9 @@ DEFAULT_ALGORITHM=RSASHA256
DEFAULT_ALGORITHM_NUMBER=8
DEFAULT_BITS=1280
# Provide TMPDIR variable for tests that need it.
TMPDIR=${TMPDIR:-/tmp}
# must be different from DEFAULT_ALGORITHM
ALTERNATIVE_ALGORITHM=RSASHA1
ALTERNATIVE_ALGORITHM_NUMBER=5
@@ -508,3 +511,4 @@ export RRCHECKER
export SAMPLEUPDATE
export SIGNER
export SUBDIRS
export TMPDIR
bin/tests/system/runtime/clean.sh
+1
View File
@@ -18,3 +18,4 @@ rm -f rndc.out*
[ -d ns2/nope ] && chmod 755 ns2/nope
rm -rf ns2/nope
rm -f ns2/dir ns2/nopedir ns2/mkd ns2/nopemkd
rm -rf ns2/tmp.*
bin/tests/system/runtime/ns2/named-alt9.conf.in
+18
View File
@@ -0,0 +1,18 @@
/*
* Copyright (C) Internet Systems Consortium, Inc. ("ISC")
*
* This Source Code Form is subject to the terms of the Mozilla Public
* License, v. 2.0. If a copy of the MPL was not distributed with this
* file, You can obtain one at http://mozilla.org/MPL/2.0/.
*
* See the COPYRIGHT file distributed with this work for additional
* information regarding copyright ownership.
*/
options {
port @PORT@;
pid-file "named9.pid";
listen-on { 127.0.0.1; };
listen-on-v6 { none; };
recursion no;
};
bin/tests/system/runtime/tests.sh
+30
View File
@@ -1,3 +1,5 @@
#!/bin/sh
#
# Copyright (C) Internet Systems Consortium, Inc. ("ISC")
#
# This Source Code Form is subject to the terms of the Mozilla Public
@@ -149,5 +151,33 @@ cd ..
if [ $ret != 0 ]; then echo_i "failed"; fi
status=`expr $status + $ret`
n=`expr $n + 1`
echo_i "verifying that named switches UID ($n)"
if [ "`id -u`" = 0 ] && [ ! "$CYGWIN" ]; then
ret=0
TEMP_NAMED_DIR=`mktemp -d`
if [ -d "${TEMP_NAMED_DIR}" ]; then
copy_setports ns2/named-alt9.conf.in "${TEMP_NAMED_DIR}/named-alt9.conf"
export SOFTHSM2_CONF="${TEMP_NAMED_DIR}/softhsm2.conf"
sh -x "$TOP/util/prepare-softhsm2.sh"
chown -R nobody "${TEMP_NAMED_DIR}"
chmod 0700 "${TEMP_NAMED_DIR}"
( cd "${TEMP_NAMED_DIR}" && $NAMED -u nobody -c named-alt9.conf -d 99 -g -U 4 >> named9.run 2>&1 & )
sleep 2
[ -s "${TEMP_NAMED_DIR}/named9.pid" ] || ret=1
grep "loading configuration: permission denied" "${TEMP_NAMED_DIR}/named9.run" > /dev/null && ret=1
pid=`cat "${TEMP_NAMED_DIR}/named9.pid" 2>/dev/null`
test "${pid:+set}" = set && $KILL -15 "${pid}" >/dev/null 2>&1
mv "${TEMP_NAMED_DIR}" ns2/
else
echo_i "mktemp failed"
ret=1
fi
if [ $ret != 0 ]; then echo_i "failed"; fi
status=`expr $status + $ret`
else
echo_i "skipped, not running as root or running on Windows"
fi
echo_i "exit status: $status"
[ $status -eq 0 ] || exit 1
util/copyrights
+1
View File
@@ -2210,6 +2210,7 @@
./bin/tests/system/runtime/ns2/named-alt4.conf.in CONF-C 2014,2016,2017,2018,2019
./bin/tests/system/runtime/ns2/named-alt5.conf.in CONF-C 2014,2016,2017,2018,2019
./bin/tests/system/runtime/ns2/named-alt6.conf.in CONF-C 2014,2016,2017,2018,2019
./bin/tests/system/runtime/ns2/named-alt9.conf.in CONF-C 2019
./bin/tests/system/runtime/ns2/named1.conf.in CONF-C 2014,2016,2017,2018,2019
./bin/tests/system/runtime/setup.sh SH 2015,2016,2017,2018,2019
./bin/tests/system/runtime/tests.sh SH 2014,2015,2016,2017,2018,2019