b00360537e
This test runs only under root, which is required for the user-switch `-u` option to work. Closes #537.
192 lines
6.9 KiB
Bash
192 lines
6.9 KiB
Bash
#!/bin/sh
|
|
#
|
|
# Copyright (C) Internet Systems Consortium, Inc. ("ISC")
|
|
#
|
|
# This Source Code Form is subject to the terms of the Mozilla Public
|
|
# License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
# file, You can obtain one at http://mozilla.org/MPL/2.0/.
|
|
#
|
|
# See the COPYRIGHT file distributed with this work for additional
|
|
# information regarding copyright ownership.
|
|
|
|
SYSTEMTESTTOP=..
|
|
. $SYSTEMTESTTOP/conf.sh
|
|
|
|
RNDCCMD="$RNDC -c $SYSTEMTESTTOP/common/rndc.conf -p ${CONTROLPORT} -s"
|
|
|
|
status=0
|
|
n=0
|
|
|
|
n=`expr $n + 1`
|
|
echo_i "verifying that named started normally ($n)"
|
|
ret=0
|
|
[ -s ns2/named.pid ] || ret=1
|
|
grep "unable to listen on any configured interface" ns2/named.run > /dev/null && ret=1
|
|
grep "another named process" ns2/named.run > /dev/null && ret=1
|
|
if [ $ret != 0 ]; then echo_i "failed"; fi
|
|
status=`expr $status + $ret`
|
|
|
|
n=`expr $n + 1`
|
|
echo_i "verifying that named checks for conflicting named processes ($n)"
|
|
ret=0
|
|
(cd ns2; $NAMED -c named-alt2.conf -D runtime-ns2-extra-2 -X named.lock -m record,size,mctx -d 99 -g -U 4 >> named3.run 2>&1 & )
|
|
sleep 2
|
|
grep "another named process" ns2/named3.run > /dev/null || ret=1
|
|
pid=`cat ns2/named3.pid 2>/dev/null`
|
|
test "${pid:+set}" = set && $KILL -15 ${pid} >/dev/null 2>&1
|
|
if [ $ret != 0 ]; then echo_i "failed"; fi
|
|
status=`expr $status + $ret`
|
|
|
|
n=`expr $n + 1`
|
|
echo_i "verifying that 'lock-file none' disables process check ($n)"
|
|
ret=0
|
|
(cd ns2; $NAMED -c named-alt3.conf -D runtime-ns2-extra-3 -m record,size,mctx -d 99 -g -U 4 >> named4.run 2>&1 & )
|
|
sleep 2
|
|
grep "another named process" ns2/named4.run > /dev/null && ret=1
|
|
pid=`cat ns2/named4.pid 2>/dev/null`
|
|
test "${pid:+set}" = set && $KILL -15 ${pid} >/dev/null 2>&1
|
|
if [ $ret != 0 ]; then echo_i "failed"; fi
|
|
status=`expr $status + $ret`
|
|
|
|
n=`expr $n + 1`
|
|
echo_i "checking that named refuses to reconfigure if working directory is not writable ($n)"
|
|
ret=0
|
|
copy_setports ns2/named-alt4.conf.in ns2/named.conf
|
|
$RNDCCMD 10.53.0.2 reconfig > rndc.out.$n 2>&1
|
|
grep "failed: permission denied" rndc.out.$n > /dev/null 2>&1 || ret=1
|
|
sleep 1
|
|
grep "[^-]directory './nope' is not writable" ns2/named.run > /dev/null 2>&1 || ret=1
|
|
if [ $ret != 0 ]; then echo_i "failed"; fi
|
|
status=`expr $status + $ret`
|
|
|
|
n=`expr $n + 1`
|
|
echo_i "checking that named refuses to reconfigure if managed-keys-directory is not writable ($n)"
|
|
ret=0
|
|
copy_setports ns2/named-alt5.conf.in ns2/named.conf
|
|
$RNDCCMD 10.53.0.2 reconfig > rndc.out.$n 2>&1
|
|
grep "failed: permission denied" rndc.out.$n > /dev/null 2>&1 || ret=1
|
|
sleep 1
|
|
grep "managed-keys-directory './nope' is not writable" ns2/named.run > /dev/null 2>&1 || ret=1
|
|
if [ $ret != 0 ]; then echo_i "failed"; fi
|
|
status=`expr $status + $ret`
|
|
|
|
n=`expr $n + 1`
|
|
echo_i "checking that named refuses to reconfigure if new-zones-directory is not writable ($n)"
|
|
ret=0
|
|
copy_setports ns2/named-alt6.conf.in ns2/named.conf
|
|
$RNDCCMD 10.53.0.2 reconfig > rndc.out.$n 2>&1
|
|
grep "failed: permission denied" rndc.out.$n > /dev/null 2>&1 || ret=1
|
|
sleep 1
|
|
grep "new-zones-directory './nope' is not writable" ns2/named.run > /dev/null 2>&1 || ret=1
|
|
if [ $ret != 0 ]; then echo_i "failed"; fi
|
|
status=`expr $status + $ret`
|
|
|
|
n=`expr $n + 1`
|
|
echo_i "checking that named refuses to start if working directory is not writable ($n)"
|
|
ret=0
|
|
cd ns2
|
|
$NAMED -c named-alt4.conf -D runtime-ns2-extra-4 -d 99 -g > named4.run 2>&1 &
|
|
sleep 2
|
|
grep "exiting (due to fatal error)" named4.run > /dev/null || ret=1
|
|
# pidfile could be in either place depending on whether the directory
|
|
# successfully changed.
|
|
pid=`cat named.pid 2>/dev/null`
|
|
test "${pid:+set}" = set && $KILL -15 ${pid} >/dev/null 2>&1
|
|
pid=`cat ../named.pid 2>/dev/null`
|
|
test "${pid:+set}" = set && $KILL -15 ${pid} >/dev/null 2>&1
|
|
cd ..
|
|
if [ $ret != 0 ]; then echo_i "failed"; fi
|
|
status=`expr $status + $ret`
|
|
|
|
n=`expr $n + 1`
|
|
echo_i "checking that named refuses to start if managed-keys-directory is not writable ($n)"
|
|
ret=0
|
|
cd ns2
|
|
$NAMED -c named-alt5.conf -D runtime-ns2-extra-5 -d 99 -g > named5.run 2>&1 &
|
|
sleep 2
|
|
grep "exiting (due to fatal error)" named5.run > /dev/null || ret=1
|
|
# pidfile could be in either place depending on whether the directory
|
|
# successfully changed.
|
|
pid=`cat named.pid 2>/dev/null`
|
|
test "${pid:+set}" = set && $KILL -15 ${pid} >/dev/null 2>&1
|
|
pid=`cat ../named.pid 2>/dev/null`
|
|
test "${pid:+set}" = set && $KILL -15 ${pid} >/dev/null 2>&1
|
|
cd ..
|
|
if [ $ret != 0 ]; then echo_i "failed"; fi
|
|
status=`expr $status + $ret`
|
|
|
|
n=`expr $n + 1`
|
|
echo_i "checking that named logs control characters in octal notation ($n)"
|
|
ret=0
|
|
SPEC_DIR=`cat ctrl-char-dir-name`
|
|
mkdir "ns2/${SPEC_DIR}"
|
|
copy_setports ns2/named-alt7.conf.in "ns2/${SPEC_DIR}/named.conf"
|
|
cd ns2
|
|
$NAMED -c "${SPEC_DIR}/named.conf" -d 99 -g > named6.run 2>&1 &
|
|
sleep 2
|
|
grep 'running as.*\\177\\033' named6.run > /dev/null || ret=1
|
|
pid=`cat named7.pid 2>/dev/null`
|
|
test "${pid:+set}" = set && $KILL -15 ${pid} >/dev/null 2>&1
|
|
cd ..
|
|
if [ $ret != 0 ]; then echo_i "failed"; fi
|
|
status=`expr $status + $ret`
|
|
|
|
n=`expr $n + 1`
|
|
echo_i "checking that named escapes special characters in the logs ($n)"
|
|
ret=0
|
|
SPEC_DIR="$;"
|
|
mkdir "ns2/${SPEC_DIR}"
|
|
copy_setports ns2/named-alt7.conf.in "ns2/${SPEC_DIR}/named.conf"
|
|
cd ns2
|
|
$NAMED -c "${SPEC_DIR}/named.conf" -d 99 -g > named7.run 2>&1 &
|
|
sleep 2
|
|
grep 'running as.*\\$\\;' named7.run > /dev/null || ret=1
|
|
pid=`cat named7.pid 2>/dev/null`
|
|
test "${pid:+set}" = set && $KILL -15 ${pid} >/dev/null 2>&1
|
|
cd ..
|
|
if [ $ret != 0 ]; then echo_i "failed"; fi
|
|
status=`expr $status + $ret`
|
|
|
|
n=`expr $n + 1`
|
|
echo_i "checking that named logs an ellipsis when the command line is larger than 8k bytes ($n)"
|
|
ret=0
|
|
SPEC_DIR=`yes | head -10000 | tr -d '\n'`
|
|
cd ns2
|
|
$NAMED -c "${SPEC_DIR}/named.conf" -d 99 -g > named8.run 2>&1 &
|
|
sleep 2
|
|
grep "running as.*\.\.\.$" named8.run > /dev/null || ret=1
|
|
pid=`cat named7.pid 2>/dev/null`
|
|
test "${pid:+set}" = set && $KILL -15 ${pid} >/dev/null 2>&1
|
|
cd ..
|
|
if [ $ret != 0 ]; then echo_i "failed"; fi
|
|
status=`expr $status + $ret`
|
|
|
|
n=`expr $n + 1`
|
|
echo_i "verifying that named switches UID ($n)"
|
|
if [ "`id -u`" = 0 ] && [ ! "$CYGWIN" ]; then
|
|
ret=0
|
|
TEMP_NAMED_DIR=`mktemp -d`
|
|
if [ -d "${TEMP_NAMED_DIR}" ]; then
|
|
copy_setports ns2/named-alt9.conf.in "${TEMP_NAMED_DIR}/named-alt9.conf"
|
|
chown -R nobody "${TEMP_NAMED_DIR}"
|
|
chmod 0700 "${TEMP_NAMED_DIR}"
|
|
( cd "${TEMP_NAMED_DIR}" && $NAMED -u nobody -c named-alt9.conf -d 99 -g -U 4 >> named9.run 2>&1 & )
|
|
sleep 2
|
|
[ -s "${TEMP_NAMED_DIR}/named9.pid" ] || ret=1
|
|
grep "loading configuration: permission denied" "${TEMP_NAMED_DIR}/named9.run" > /dev/null && ret=1
|
|
pid=`cat "${TEMP_NAMED_DIR}/named9.pid" 2>/dev/null`
|
|
test "${pid:+set}" = set && $KILL -15 "${pid}" >/dev/null 2>&1
|
|
mv "${TEMP_NAMED_DIR}" ns2/
|
|
else
|
|
echo_i "mktemp failed"
|
|
ret=1
|
|
fi
|
|
if [ $ret != 0 ]; then echo_i "failed"; fi
|
|
status=`expr $status + $ret`
|
|
else
|
|
echo_i "skipped, not running as root or running on Windows"
|
|
fi
|
|
|
|
echo_i "exit status: $status"
|
|
[ $status -eq 0 ] || exit 1
|