test-bus-policy.c revision 20725d929ff566e53d7a857d6f0ee94aa8383469
/*-*- Mode: C; c-basic-offset: 8; indent-tabs-mode: nil -*-*/
/***
This file is part of systemd.
Copyright 2014 Daniel Mack
systemd is free software; you can redistribute it and/or modify it
under the terms of the GNU Lesser General Public License as published by
the Free Software Foundation; either version 2.1 of the License, or
(at your option) any later version.
systemd is distributed in the hope that it will be useful, but
WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
Lesser General Public License for more details.
You should have received a copy of the GNU Lesser General Public License
along with systemd; If not, see <http://www.gnu.org/licenses/>.
***/
#include <sys/socket.h>
#include <sys/un.h>
#include <sys/types.h>
#include <fcntl.h>
#include <unistd.h>
#include <string.h>
#include <errno.h>
#include <sys/poll.h>
#include <stddef.h>
#include <getopt.h>
#include "log.h"
#include "util.h"
#include "sd-bus.h"
#include "bus-internal.h"
#include "bus-message.h"
#include "bus-util.h"
#include "bus-internal.h"
#include "build.h"
#include "strv.h"
#include "def.h"
#include "capability.h"
#include <bus-proxyd/bus-policy.h>
static int make_name_request(sd_bus *bus,
const char *name,
sd_bus_message **ret) {
int r;
sd_bus_message *m = NULL;
r = sd_bus_message_new_method_call(bus, &m, "org.freedesktop.DBus", "/org/freedesktop/DBus", "org.freedesktop.DBus", "RequestName");
if (r < 0)
return r;
r = sd_bus_message_append_basic(m, 's', name);
if (r < 0)
return r;
m->sealed = 1;
sd_bus_message_rewind(m, true);
*ret = m;
return 0;
}
int main(int argc, char *argv[]) {
Policy p = {};
sd_bus_message *m;
struct ucred ucred = {};
_cleanup_bus_close_unref_ sd_bus *bus = NULL;;
assert_se(sd_bus_default_system(&bus) >= 0);
/* Fake pid for policy checks */
ucred.pid = 1;
/* Ownership tests */
assert_se(policy_load(&p, STRV_MAKE("test/bus-policy/ownerships.conf")) == 0);
assert_se(make_name_request(bus, "org.test.test1", &m) == 0);
ucred.uid = 0;
assert_se(policy_check(&p, m, &ucred) == true);
ucred.uid = 1;
assert_se(policy_check(&p, m, &ucred) == true);
assert_se(sd_bus_message_unref(m) == 0);
assert_se(make_name_request(bus, "org.test.test2", &m) == 0);
ucred.uid = 0;
assert_se(policy_check(&p, m, &ucred) == true);
ucred.uid = 1;
assert_se(policy_check(&p, m, &ucred) == false);
assert_se(sd_bus_message_unref(m) == 0);
assert_se(make_name_request(bus, "org.test.test3", &m) == 0);
ucred.uid = 0;
assert_se(policy_check(&p, m, &ucred) == false);
ucred.uid = 1;
assert_se(policy_check(&p, m, &ucred) == false);
assert_se(sd_bus_message_unref(m) == 0);
assert_se(make_name_request(bus, "org.test.test4", &m) == 0);
ucred.uid = 0;
assert_se(policy_check(&p, m, &ucred) == false);
ucred.uid = 1;
assert_se(policy_check(&p, m, &ucred) == true);
assert_se(sd_bus_message_unref(m) == 0);
policy_free(&p);
/* Signal test */
assert_se(policy_load(&p, STRV_MAKE("test/bus-policy/signals.conf")) == 0);
assert_se(sd_bus_message_new_signal(bus, &m, "/an/object/path", "bli.bla.blubb", "Name") == 0);
ucred.uid = 0;
assert_se(policy_check(&p, m, &ucred) == true);
ucred.uid = 1;
assert_se(policy_check(&p, m, &ucred) == false);
assert_se(sd_bus_message_unref(m) == 0);
policy_free(&p);
/* Method calls */
assert_se(policy_load(&p, STRV_MAKE("test/bus-policy/methods.conf")) == 0);
ucred.uid = 0;
assert_se(sd_bus_message_new_method_call(bus, &m, "org.foo.bar", "/an/object/path", "bli.bla.blubb", "Member") == 0);
assert_se(policy_check(&p, m, &ucred) == false);
assert_se(sd_bus_message_new_method_call(bus, &m, "org.test.test1", "/an/object/path", "bli.bla.blubb", "Member") == 0);
assert_se(policy_check(&p, m, &ucred) == false);
bus->is_kernel = 1;
assert_se(sd_bus_message_new_method_call(bus, &m, "org.test.test1", "/an/object/path", "org.test.int1", "Member") == 0);
assert_se(policy_check(&p, m, &ucred) == true);
assert_se(sd_bus_message_new_method_call(bus, &m, "org.test.test1", "/an/object/path", "org.test.int2", "Member") == 0);
assert_se(policy_check(&p, m, &ucred) == true);
policy_free(&p);
/* User and groups */
assert_se(policy_load(&p, STRV_MAKE("test/bus-policy/hello.conf")) == 0);
assert_se(sd_bus_message_new_method_call(bus, &m, "org.freedesktop.DBus", "/org/freedesktop/DBus", "org.freedesktop.DBus", "Hello") == 0);
policy_dump(&p);
ucred.uid = 0;
assert_se(policy_check(&p, m, &ucred) == true);
ucred.uid = 1;
assert_se(policy_check(&p, m, &ucred) == false);
ucred.uid = 0;
ucred.gid = 1;
assert_se(policy_check(&p, m, &ucred) == false);
policy_free(&p);
return EXIT_SUCCESS;
}