#!/bin/sh # Verify that --preserve-root works. # Copyright (C) 2006 Free Software Foundation, Inc. # This program is free software; you can redistribute it and/or modify # it under the terms of the GNU General Public License as published by # the Free Software Foundation; either version 2 of the License, or # (at your option) any later version. # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # You should have received a copy of the GNU General Public License # along with this program; if not, write to the Free Software # Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA # 02110-1301, USA. if test "$VERBOSE" = yes; then set -x chown --version fi . $srcdir/../envvar-check . $srcdir/../lang-default PRIV_CHECK_ARG=require-non-root . $srcdir/../priv-check pwd=`pwd` t0=`echo "$0"|sed 's,.*/,,'`.tmp; tmp=$t0/$$ trap 'status=$?; cd "$pwd" && chmod -R u+rwx $t0 && rm -rf $t0 && exit $status' 0 trap '(exit $?); exit $?' 1 2 13 15 framework_failure=0 mkdir -p $tmp || framework_failure=1 cd $tmp || framework_failure=1 mkdir d && ln -s / d/slink-to-root if test $framework_failure = 1; then echo "$0: failure in testing framework" 1>&2 (exit 1); exit 1 fi fail=0 # Even if --preserve-root were to malfunction, allowing the chown or # chgrp to traverse through "/", since we're running as non-root, # they would be very unlikely to cause any changes. chown -R --preserve-root 0 / > out 2>&1 && fail=1 chgrp -R --preserve-root 0 / >> out 2>&1 && fail=1 # Here, if --preserve-root were to malfunction, chmod could make changes, # but only to files owned and unreadable by the user running this test, # and then, only to make them readable by owner. chmod -R --preserve-root u+r / >> out 2>&1 && fail=1 # With -RHh, --preserve-root should trigger nothing, # since the symlink in question is not a command line argument. # Contrary to the above commands, these two should succeed. echo '==== test -RHh' >> out chown -RHh --preserve-root `id -u` d >> out 2>&1 || fail=1 chgrp -RHh --preserve-root `id -g` d >> out 2>&1 || fail=1 # These must fail. echo '==== test -RLh' >> out chown -RLh --preserve-root `id -u` d >> out 2>&1 && fail=1 chgrp -RLh --preserve-root `id -g` d >> out 2>&1 && fail=1 cat <<\EOF > exp || fail=1 chown: it is dangerous to operate recursively on `/' chown: use --no-preserve-root to override this failsafe chgrp: it is dangerous to operate recursively on `/' chgrp: use --no-preserve-root to override this failsafe chmod: it is dangerous to operate recursively on `/' chmod: use --no-preserve-root to override this failsafe ==== test -RHh ==== test -RLh chown: it is dangerous to operate recursively on `d/slink-to-root' (same as `/') chown: use --no-preserve-root to override this failsafe chgrp: it is dangerous to operate recursively on `d/slink-to-root' (same as `/') chgrp: use --no-preserve-root to override this failsafe EOF cmp out exp || fail=1 test $fail = 1 && diff out exp 2> /dev/null (exit $fail); exit $fail