d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy#!/bin/ksh -p
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy#
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy# CDDL HEADER START
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy#
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy# The contents of this file are subject to the terms of the
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy# Common Development and Distribution License (the "License").
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy# You may not use this file except in compliance with the License.
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy#
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy# or http://www.opensolaris.org/os/licensing.
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy# See the License for the specific language governing permissions
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy# and limitations under the License.
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy#
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy# When distributing Covered Code, include this CDDL HEADER in each
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy# If applicable, add the following below this CDDL HEADER, with the
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy# fields enclosed by brackets "[]" replaced with your own identifying
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy# information: Portions Copyright [yyyy] [name of copyright owner]
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy#
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy# CDDL HEADER END
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy#
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy#
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy# Copyright 2009 Sun Microsystems, Inc. All rights reserved.
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy# Use is subject to license terms.
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy#
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy#
1d32ba663e202c24a5a1f2e5aef83fffb447cb7fJohn Wren Kennedy# Copyright (c) 2012, 2016 by Delphix. All rights reserved.
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy#
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy. $STF_SUITE/tests/functional/acl/acl_common.kshlib
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy#
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy# DESCRIPTION:
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy# Verify chmod permission settings on files and directories, as both root
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy# and non-root users.
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy#
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy# STRATEGY:
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy# 1. Loop root and $ZFS_ACL_STAFF1 as root and non-root users.
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy# 2. Create test file and directory in zfs filesystem.
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy# 3. Execute 'chmod' with specified options.
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy# 4. Check 'ls -l' output and compare with expect results.
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy#
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy# NOTE:
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy# The test does not work for default "discard" aclmode property.
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy# The test is modified to run with "passthrough" aclmode property.
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedyverify_runnable "both"
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedyfunction cleanup
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy{
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy # reset aclmode=discard
1d32ba663e202c24a5a1f2e5aef83fffb447cb7fJohn Wren Kennedy log_must zfs set aclmode=discard $TESTPOOL/$TESTFS
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy}
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy# "init_map" "options" "expect_map"
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedyset -A argv \
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy "000" "a+rw" "rw-rw-rw-" "000" "a+rwx" "rwxrwxrwx" \
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy "000" "u+xr" "r-x------" "000" "gu-xw" "---------" \
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy "644" "a-r" "-w-------" "644" "augo-x" "rw-r--r--" \
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy "644" "=x" "--x--x--x" "644" "u-rw" "---r--r--" \
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy "644" "uo+x" "rwxr--r-x" "644" "ga-wr" "---------" \
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy "777" "augo+x" "rwxrwxrwx" "777" "go-xr" "rwx-w--w-" \
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy "777" "o-wx" "rwxrwxr--" "777" "ou-rx" "-w-rwx-w-" \
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy "777" "a+rwx" "rwxrwxrwx" "777" "u=rw" "rw-rwxrwx" \
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy "000" "123" "--x-w--wx" "000" "412" "r----x-w-" \
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy "231" "562" "r-xrw--w-" "712" "000" "---------" \
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy "777" "121" "--x-w---x" "123" "775" "rwxrwxr-x"
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedylog_assert " Verify chmod permission settings on files and directories"
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedylog_onexit cleanup
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy#
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy# Verify file or directory have correct map after chmod
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy#
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy# $1 file or directory
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy#
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedyfunction test_chmod_mapping #<file-dir>
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy{
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy typeset node=$1
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy typeset -i i=0
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy while ((i < ${#argv[@]})); do
1d32ba663e202c24a5a1f2e5aef83fffb447cb7fJohn Wren Kennedy usr_exec chmod ${argv[i]} $node
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy if (($? != 0)); then
1d32ba663e202c24a5a1f2e5aef83fffb447cb7fJohn Wren Kennedy log_note "usr_exec chmod ${argv[i]} $node"
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy return 1
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy fi
1d32ba663e202c24a5a1f2e5aef83fffb447cb7fJohn Wren Kennedy usr_exec chmod ${argv[((i + 1))]} $node
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy if (($? != 0)); then
1d32ba663e202c24a5a1f2e5aef83fffb447cb7fJohn Wren Kennedy log_note "usr_exec chmod ${argv[((i + 1))]} $node"
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy return 1
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy fi
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy typeset mode
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy mode=$(get_mode ${node})
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy if [[ $mode != "-${argv[((i + 2))]}"* && \
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy $mode != "d${argv[((i + 2))]}"* ]]
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy then
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy log_fail "FAIL: '${argv[i]}' '${argv[((i + 1))]}' \
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy '${argv[((i + 2))]}'"
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy fi
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy ((i += 3))
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy done
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy return 0
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy}
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy# set aclmode=passthrough
1d32ba663e202c24a5a1f2e5aef83fffb447cb7fJohn Wren Kennedylog_must zfs set aclmode=passthrough $TESTPOOL/$TESTFS
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedyfor user in root $ZFS_ACL_STAFF1; do
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy log_must set_cur_usr $user
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy # Test file
1d32ba663e202c24a5a1f2e5aef83fffb447cb7fJohn Wren Kennedy log_must usr_exec touch $testfile
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy log_must test_chmod_mapping $testfile
1d32ba663e202c24a5a1f2e5aef83fffb447cb7fJohn Wren Kennedy log_must usr_exec chmod A+user:$ZFS_ACL_STAFF2:write_acl:allow $testfile
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy # Test directory
1d32ba663e202c24a5a1f2e5aef83fffb447cb7fJohn Wren Kennedy log_must usr_exec mkdir $testdir
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy log_must test_chmod_mapping $testdir
1d32ba663e202c24a5a1f2e5aef83fffb447cb7fJohn Wren Kennedy log_must usr_exec chmod A+user:$ZFS_ACL_STAFF2:write_acl:allow $testdir
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy # Grant privileges of write_acl and retest the chmod commands.
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy log_must set_cur_usr $ZFS_ACL_STAFF2
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy log_must test_chmod_mapping $testfile
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy log_must test_chmod_mapping $testdir
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy log_must set_cur_usr $user
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy
1d32ba663e202c24a5a1f2e5aef83fffb447cb7fJohn Wren Kennedy log_must usr_exec rm $testfile
1d32ba663e202c24a5a1f2e5aef83fffb447cb7fJohn Wren Kennedy log_must usr_exec rm -rf $testdir
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedydone
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedy
d583b39bfb4e2571d3e41097c5c357ffe353ad45John Wren Kennedylog_pass "Setting permissions using 'chmod' completed successfully."