1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
|
/****************************************************************************
**
** Copyright (C) 2021 The Qt Company Ltd.
** Copyright (C) 2019 Luxoft Sweden AB
** Copyright (C) 2018 Pelagicore AG
** Contact: https://www.qt.io/licensing/
**
** This file is part of the QtApplicationManager module of the Qt Toolkit.
**
** $QT_BEGIN_LICENSE:GPL-EXCEPT$
** Commercial License Usage
** Licensees holding valid commercial Qt licenses may use this file in
** accordance with the commercial license agreement provided with the
** Software or, alternatively, in accordance with the terms contained in
** a written agreement between you and The Qt Company. For licensing terms
** and conditions see https://www.qt.io/terms-conditions. For further
** information use the contact form at https://www.qt.io/contact-us.
**
** GNU General Public License Usage
** Alternatively, this file may be used under the terms of the GNU
** General Public License version 3 as published by the Free Software
** Foundation with exceptions as appearing in the file LICENSE.GPL3-EXCEPT
** included in the packaging of this file. Please review the following
** information to ensure the GNU General Public License requirements will
** be met: https://www.gnu.org/licenses/gpl-3.0.html.
**
** $QT_END_LICENSE$
**
****************************************************************************/
#include <QtTest>
#if !defined(Q_OS_LINUX)
# error "This test is Linux specific!"
#endif
#include "utilities.h"
#include "sudo.h"
QT_USE_NAMESPACE_AM
static int processTimeout = 3000;
static bool startedSudoServer = false;
static QString sudoServerError;
// sudo RAII style
class ScopedRootPrivileges
{
public:
ScopedRootPrivileges()
{
m_uid = getuid();
m_gid = getgid();
if (setresuid(0, 0, 0) || setresgid(0, 0, 0))
QFAIL("cannot re-gain root privileges");
}
~ScopedRootPrivileges()
{
if (setresgid(m_gid, m_gid, 0) || setresuid(m_uid, m_uid, 0))
QFAIL("cannot drop root privileges");
}
private:
uid_t m_uid;
gid_t m_gid;
};
class tst_Sudo : public QObject
{
Q_OBJECT
public:
tst_Sudo(QObject *parent = nullptr);
~tst_Sudo();
private slots:
void initTestCase();
void cleanupTestCase();
void privileges();
private:
SudoClient *m_sudo = nullptr;
};
tst_Sudo::tst_Sudo(QObject *parent)
: QObject(parent)
{ }
tst_Sudo::~tst_Sudo()
{ }
void tst_Sudo::initTestCase()
{
processTimeout *= timeoutFactor();
QVERIFY2(startedSudoServer, qPrintable(sudoServerError));
m_sudo = SudoClient::instance();
QVERIFY(m_sudo);
if (m_sudo->isFallbackImplementation())
QSKIP("Not running with root privileges - neither directly, or SUID-root, or sudo");
}
void tst_Sudo::privileges()
{
ScopedRootPrivileges sudo;
}
void tst_Sudo::cleanupTestCase()
{
// the real cleanup happens in ~tst_Installer, since we also need
// to call this cleanup from the crash handler
}
static tst_Sudo *tstSudo = nullptr;
int main(int argc, char **argv)
{
try {
Sudo::forkServer(Sudo::DropPrivilegesRegainable);
startedSudoServer = true;
} catch (...) { }
QCoreApplication a(argc, argv);
tstSudo = new tst_Sudo(&a);
#ifdef Q_OS_LINUX
auto crashHandler = [](int sigNum) -> void {
// we are doing very unsafe things from a within a signal handler, but
// we've crashed anyway at this point and the alternative is that we are
// leaking mounts and attached loopback devices.
tstSudo->~tst_Sudo();
if (sigNum != -1)
exit(1);
};
signal(SIGABRT, crashHandler);
signal(SIGSEGV, crashHandler);
signal(SIGINT, crashHandler);
#endif // Q_OS_LINUX
return QTest::qExec(tstSudo, argc, argv);
}
#include "tst_sudo.moc"
|
