summaryrefslogtreecommitdiffstats
path: root/regress/sys/kern/unveil/syscalls.c (follow)
Commit message (Collapse)AuthorAgeFilesLines
* Do not create /hooray as part of the regress test. Regress testsclaudio2020-04-071-2/+1
| | | | | should not create random files in the root partition. OK beck@
* For open with O_CREAT pass a mask of 0644 with else files are createdclaudio2020-04-071-37/+37
| | | | | with somewhat random filemodes. OK beck@
* Fix unveil for relative lookups in the non AT_FDCWD casebeck2019-09-111-3/+2
| | | | | | | | | | | | | Issue spotted by Benjamin Baier <programmer@netzbasis.de> with relative path lookups from openat(2). Lacking a current working directory unveil, operations using the *at functions could fail when not crossing an unveil, since an initial covering unveil was not found. This corrects this so we walk up from the directory vnode to find a covering unveil at the start of non AT_FDCWD lookups, and adds regress for this case. ok bluhm@
* Pull out and expand openat tests into their own routine.beck2019-09-081-7/+56
|
* Add a regression test for path discovery outside of unveil() whichbeck2019-05-151-1/+19
| | | | we should eventually fix
* Make stat(2) and access(2) need UNVEIL_READ instead of UNVEIL_INSPECTbeck2019-03-241-11/+11
| | | | | | | | | | | | | | | UNVEIL_INSPECT is a hack we added to get chrome/glib working. It silently adds permission for stat(2), access(2), and readlink(2) to be used on all path components of any unveil'ed path. robert@ has sucessfully now fixed chrome/glib to not require exessive TOC vs TOU stat(2) and access(2) calls on the paths it uses, so that this no longer needed there. readlink(2) is the sole call that is now permitted by UNVEIL_INSPECT, and this is only needed so that realpath(3) can work. Going forward we will likely make a realpath(2), after which we can completely deprecate UNVEIL_INSPECT. ok deraadt@
* "non-existant" is one of those words that don't exist, so use "non-existent"phessler2019-02-101-4/+4
| | | | | | | instead From Pamela Mosiejczuk, many thanks! OK phessler@ deraadt@
* Unveil fixes:beck2019-01-171-3/+3
| | | | | | | | | 1) Correctly notice covering unveil when using .. - fix crash noticed by visa@ 2) Notice when v_mount is NULL to not crash when unveil vnodes are on a forcibly unmounted filesystem, noticed by yasuoka@ 3) Add a flag to ni_data so that failures from unveil flag mismatches in covering unveils return the correct EACCESS instead of ENOENT (noticed by brynet@) ok deraadt@
* Fix unveil issue noticed by kn@ where unveil does not notice coveringbeck2019-01-141-1/+19
| | | | | unveil matches when .. is used correctly. Also adds regress based upon his test program for the same issue.
* Correctly deal with upper level unveil's by keeping track of the coveringbeck2018-10-281-8/+16
| | | | | | | unveil for each unveil in the process at unveil() time, and refactoring the handling of current directory and ISDOTDOT to be much more sensible. Worked out at ns2k18 with guenther@. ok deraadt@
* Add regress test of stat all the way to a nonexistant terminalbeck2018-08-281-1/+21
|
* Add regress test to ensure that chmod fails when unveiled with "r"beck2018-08-041-3/+8
| | | | (problem noticed by semarie@ - fix forthcoming)
* Test messing with "." both when having . unveiled for an operation, andbeck2018-08-021-2/+9
| | | | | | with . veiled without the right flags for an operation, since these come out of namei differently and . is the bane of the special LOCKPARENT corner cases - this tests a panic found by anton@
* Add regress for ensuring .. is appropriately *not* used as abeck2018-07-291-1/+21
| | | | descending match
* add regress for unveil of "." now that I fixed thisbeck2018-07-271-1/+15
|
* Make the BYPASSUNVEIL test actually test BYPASSUNVEIL with tmppathbeck2018-07-271-3/+14
|
* add regress test for "bypassunveil" where a path should be unveil'd byrobert2018-07-201-1/+17
| | | | | | specific pledge(2) calls ok beck@
* Add regress test for inheritance of unveil's across fork to childrenbeck2018-07-191-25/+33
|
* tests for next steps in unveilbeck2018-07-131-1/+37
|
* symlinks make my cry.. thanks robert.. don't you care about my feelings?beck2018-07-121-2/+11
|
* Add regress test for realpath and modify behavior appropriatelybeck2018-07-121-6/+22
|
* regress to check nested subdirs and ..'sbeck2018-07-111-2/+36
|
* test changed stat lying semantics - we don't lie about filesbeck2018-07-111-3/+3
|
* Regress update to match changes for chromebeck2018-07-111-6/+24
|
* rename all the pledgepath bits to unveilbeck2018-07-071-249/+248
|
* regress changes for new stuff. - allow walking .., return EPERMbeck2018-05-011-46/+93
| | | | on flag mismatch, ENOENT for files with no unveil flags at all
* regress for unveilbeck2018-04-281-0/+616
Copyright © 1996 – 2023 Jason A. Donenfeld. All Rights Reverse Engineered.