execpromise regress

diff --git a/regress/sys/kern/pledge/execpromise/Makefile b/regress/sys/kern/pledge/execpromise/Makefile
new file mode 100644 (file)
index 0000000..cfa4db6
--- /dev/null
+++ b/regress/sys/kern/pledge/execpromise/Makefile
@@ -0,0 +1,39 @@
+#      $OpenBSD: Makefile,v 1.1 2017/12/16 11:00:49 florian Exp $
+
+PROG=  execpromise
+
+test_normal: ${PROG}
+       @echo '\n======== $@ ========'
+       ${.OBJDIR}/${PROG} "stdio rpath inet" "stdio inet"
+REGRESS_TARGETS+=      test_normal
+
+test_no_child_pledge: ${PROG}
+       @echo '\n======== $@ ========'
+       ${.OBJDIR}/${PROG} "stdio rpath inet"
+REGRESS_TARGETS+=      test_no_child_pledge
+
+test_abort_child: ${PROG}
+       @echo '\n======== $@ ========'
+       -${.OBJDIR}/${PROG} "stdio rpath"; \
+       if [[ $$? == 134 ]] ; then echo OK; else false; fi
+REGRESS_TARGETS+=      test_abort_child
+
+test_ENOSYS_child: ${PROG}
+       @echo '\n======== $@ ========'
+       -${.OBJDIR}/${PROG} "stdio rpath error"; \
+       if [[ $$? == 23 ]] ; then echo OK; else false; fi
+REGRESS_TARGETS+=      test_ENOSYS_child
+
+test_upgrade_fail: ${PROG}
+       @echo '\n======== $@ ========'
+       -${.OBJDIR}/${PROG} "stdio rpath inet" "stdio inet wpath"; \
+       if [[ $$? == 24 ]] ; then echo OK; else false; fi
+REGRESS_TARGETS+=      test_upgrade_fail
+
+test_upgrade_ignore: ${PROG}
+       @echo '\n======== $@ ========'
+       ${.OBJDIR}/${PROG} "stdio rpath inet error" "stdio rpath wpath inet"
+REGRESS_TARGETS+=      test_upgrade_ignore
+
+
+.include <bsd.regress.mk>

diff --git a/regress/sys/kern/pledge/execpromise/execpromise.c b/regress/sys/kern/pledge/execpromise/execpromise.c
new file mode 100644 (file)
index 0000000..50ba587
--- /dev/null
+++ b/regress/sys/kern/pledge/execpromise/execpromise.c
@@ -0,0 +1,82 @@
+/*     $OpenBSD: execpromise.c,v 1.1 2017/12/16 11:00:49 florian Exp $ */
+/*
+ * Copyright (c) 2017 Florian Obser <florian@openbsd.org>
+ *
+ * Permission to use, copy, modify, and distribute this software for any
+ * purpose with or without fee is hereby granted, provided that the above
+ * copyright notice and this permission notice appear in all copies.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+ * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+ * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+ * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
+ * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+ */
+
+#include <sys/cdefs.h>
+#include <sys/socket.h>
+
+#include <err.h>
+#include <errno.h>
+#include <stdio.h>
+#include <stdlib.h>
+#include <unistd.h>
+
+int
+main(int argc, char **argv)
+{
+       int ch, child = 0, s;
+       char **oargv = argv;
+
+       while ((ch = getopt(argc, argv, "C")) != -1) {
+               switch (ch) {
+               case 'C':
+                       child = 1;
+                       break;
+               default:
+                       errx(1, "");
+               }
+       }
+       argc -= optind;
+       argv += optind;
+
+       if (child ==1) {
+               warnx("child");
+               if (argc > 1)
+                       errx(1, "argc: %d", argc);
+               if (argc == 1) {
+                       warnx("plege(\"%s\",\"\")", argv[0]);
+                       if (pledge(argv[0], "") == -1)
+                               err(24, "child pledge");
+               }
+
+               warnx("trying to open socket");
+
+               s = socket(AF_INET, SOCK_DGRAM, 0);
+               if (s == -1)
+                       err(23, "open");
+               else
+                       warnx("opened socket");
+
+               close(s);
+               exit(0);
+       } else {
+               warnx("parent");
+               if (argc == 2)
+                       warnx("execpromise: \"%s\", child pledge: \"%s\"",
+                           argv[0], argv[1]);
+               else if (argc == 1)
+                       warnx("execpromise: \"%s\"", argv[0]);
+               else
+                       errx(1, "argc out of range");
+
+               if (pledge("stdio exec", argv[0]) == -1)
+                       err(1, "parent pledge");
+
+               oargv[1] = "-C";
+               execvp(oargv[0], &oargv[0]);
+               err((errno == ENOENT) ? 127 : 126, "%s", argv[0]);
+       }
+}