mirror of
https://github.com/RGBCube/serenity
synced 2025-10-26 15:42:07 +00:00
1682f0b760
SPDX License Identifiers are a more compact / standardized way of representing file license information. See: https://spdx.dev/resources/use/#identifiers This was done with the `ambr` search and replace tool. ambr --no-parent-ignore --key-from-file --rep-from-file key.txt rep.txt *
80 lines
1.8 KiB
C++
80 lines
1.8 KiB
C++
/*
|
|
* Copyright (c) 2020, the SerenityOS developers.
|
|
*
|
|
* SPDX-License-Identifier: BSD-2-Clause
|
|
*/
|
|
|
|
#include <stdio.h>
|
|
#include <unistd.h>
|
|
|
|
int main()
|
|
{
|
|
int res = unveil("/etc", "r");
|
|
if (res < 0) {
|
|
fprintf(stderr, "FAIL, unveil read only failed\n");
|
|
return 1;
|
|
}
|
|
|
|
res = unveil("/etc", "w");
|
|
if (res >= 0) {
|
|
fprintf(stderr, "FAIL, unveil write permitted after unveil read only\n");
|
|
return 1;
|
|
}
|
|
|
|
res = unveil("/etc", "x");
|
|
if (res >= 0) {
|
|
fprintf(stderr, "FAIL, unveil execute permitted after unveil read only\n");
|
|
return 1;
|
|
}
|
|
|
|
res = unveil("/etc", "c");
|
|
if (res >= 0) {
|
|
fprintf(stderr, "FAIL, unveil create permitted after unveil read only\n");
|
|
return 1;
|
|
}
|
|
|
|
res = unveil("/tmp/doesnotexist", "c");
|
|
if (res < 0) {
|
|
fprintf(stderr, "FAIL, unveil create on non-existent path failed\n");
|
|
return 1;
|
|
}
|
|
|
|
res = unveil("/home", "b");
|
|
if (res < 0) {
|
|
fprintf(stderr, "FAIL, unveil browse failed\n");
|
|
return 1;
|
|
}
|
|
|
|
res = unveil("/home", "w");
|
|
if (res >= 0) {
|
|
fprintf(stderr, "FAIL, unveil write permitted after unveil browse only\n");
|
|
return 1;
|
|
}
|
|
|
|
res = unveil("/home", "x");
|
|
if (res >= 0) {
|
|
fprintf(stderr, "FAIL, unveil execute permitted after unveil browse only\n");
|
|
return 1;
|
|
}
|
|
|
|
res = unveil("/home", "c");
|
|
if (res >= 0) {
|
|
fprintf(stderr, "FAIL, unveil create permitted after unveil browse only\n");
|
|
return 1;
|
|
}
|
|
|
|
res = unveil(nullptr, nullptr);
|
|
if (res < 0) {
|
|
fprintf(stderr, "FAIL, unveil state lock failed\n");
|
|
return 1;
|
|
}
|
|
|
|
res = unveil("/bin", "w");
|
|
if (res >= 0) {
|
|
fprintf(stderr, "FAIL, unveil permitted after unveil state locked\n");
|
|
return 1;
|
|
}
|
|
|
|
printf("PASS\n");
|
|
return 0;
|
|
}
|