1 /* Copyright (C) 2012-2022 Free Software Foundation, Inc.
2    This file is part of the GNU C Library.
3 
4    The GNU C Library is free software; you can redistribute it and/or
5    modify it under the terms of the GNU Lesser General Public
6    License as published by the Free Software Foundation; either
7    version 2.1 of the License, or (at your option) any later version.
8 
9    The GNU C Library is distributed in the hope that it will be useful,
10    but WITHOUT ANY WARRANTY; without even the implied warranty of
11    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
12    Lesser General Public License for more details.
13 
14    You should have received a copy of the GNU Lesser General Public
15    License along with the GNU C Library; if not, see
16    <https://www.gnu.org/licenses/>.  */
17 
18 /* Test that secure_getenv works by invoking the test as a SGID
19    program with a group ID from the supplementary group list.  This
20    test can fail spuriously if the user is not a member of a suitable
21    supplementary group.  */
22 
23 #include <errno.h>
24 #include <fcntl.h>
25 #include <stdlib.h>
26 #include <stdint.h>
27 #include <stdio.h>
28 #include <string.h>
29 #include <sys/stat.h>
30 #include <sys/wait.h>
31 #include <unistd.h>
32 
33 #include <support/check.h>
34 #include <support/support.h>
35 #include <support/capture_subprocess.h>
36 #include <support/test-driver.h>
37 
38 static char MAGIC_ARGUMENT[] = "run-actual-test";
39 
40 static int
do_test(void)41 do_test (void)
42 {
43   if (getenv ("PATH") == NULL)
44     {
45       printf ("PATH not set\n");
46       exit (1);
47     }
48   if (secure_getenv ("PATH") == NULL)
49     {
50       printf ("PATH not set according to secure_getenv\n");
51       exit (1);
52     }
53   if (strcmp (getenv ("PATH"), secure_getenv ("PATH")) != 0)
54     {
55       printf ("PATH mismatch (%s, %s)\n",
56 	      getenv ("PATH"), secure_getenv ("PATH"));
57       exit (1);
58     }
59 
60   int status = support_capture_subprogram_self_sgid (MAGIC_ARGUMENT);
61 
62   if (WEXITSTATUS (status) == EXIT_UNSUPPORTED)
63     return EXIT_UNSUPPORTED;
64 
65   if (!WIFEXITED (status))
66     FAIL_EXIT1 ("Unexpected exit status %d from child process\n", status);
67 
68   return 0;
69 }
70 
71 static void
alternative_main(int argc,char ** argv)72 alternative_main (int argc, char **argv)
73 {
74   if (argc == 2 && strcmp (argv[1], MAGIC_ARGUMENT) == 0)
75     {
76       if (getgid () == getegid ())
77 	/* This can happen if the file system is mounted nosuid.  */
78 	FAIL_UNSUPPORTED ("SGID failed: GID and EGID match (%jd)\n",
79 		   (intmax_t) getgid ());
80       if (getenv ("PATH") == NULL)
81 	FAIL_EXIT (3, "PATH variable not present\n");
82       if (secure_getenv ("PATH") != NULL)
83 	FAIL_EXIT (4, "PATH variable not filtered out\n");
84 
85       exit (EXIT_SUCCESS);
86     }
87 }
88 
89 #define PREPARE alternative_main
90 #include <support/test-driver.c>
91