mirror of
https://github.com/linux-apfs/apfstests.git
synced 2026-05-01 15:01:44 -07:00
Filipe Manana
2b5cf241ec
Starting with version 2.41 of libcap, the output of the getcap program changed and therefore some existing tests fail when the installed version of libcap is >= 2.41 (the latest version available at the moment is 2.44). The change was made by the following commit of libcap: commit 177cd418031b1acfcf73fe3b1af9f3279828681c Author: Andrew G. Morgan <morgan@kernel.org> Date: Tue Jul 21 22:58:05 2020 -0700 A more compact form for the text representation of capabilities. While this does not change anything about the supported range of equivalent text specifications for capabilities, as accepted by cap_from_text(), this does alter the preferred output format of cap_to_text() to be two characters shorter in most cases. That is, what used to be summarized as: "= cap_foo+..." is now converted to the equivalent text: "cap_foo=..." which is also more intuitive. So add a filter to change the old format to the new one, an helper that calls getcap with that filter, make existing tests use the new helper and update their golden output to match the new output format of getcap. Signed-off-by: Filipe Manana <fdmanana@suse.com> Reviewed-by: Eryu Guan <guaneryu@gmail.com> Signed-off-by: Eryu Guan <guaneryu@gmail.com>
81 lines
1.7 KiB
Bash
Executable File
81 lines
1.7 KiB
Bash
Executable File
#! /bin/bash
|
|
# SPDX-License-Identifier: GPL-2.0
|
|
# Copyright (c) 2000-2004 Silicon Graphics, Inc. All Rights Reserved.
|
|
# Copyright (c) 2017 Google, Inc. All Rights Reserved.
|
|
#
|
|
# FS QA Test No. 093
|
|
#
|
|
# Test clearing of capabilities on write.
|
|
#
|
|
seq=`basename $0`
|
|
seqres=$RESULT_DIR/$seq
|
|
|
|
here=`pwd`
|
|
tmp=/tmp/$$
|
|
status=1 # FAILure is the default!
|
|
trap "_cleanup; exit \$status" 0 1 2 3 15
|
|
|
|
# get standard environment, filters and checks
|
|
. ./common/rc
|
|
. ./common/filter
|
|
. ./common/attr
|
|
|
|
_cleanup()
|
|
{
|
|
[ -n "$TEST_DIR" ] && rm -f $file
|
|
}
|
|
|
|
filefilter()
|
|
{
|
|
sed -e "s#$file#file#"
|
|
}
|
|
|
|
# real QA test starts here
|
|
_supported_fs generic
|
|
|
|
_require_test
|
|
_require_attrs security
|
|
_require_user
|
|
_require_test_program "writemod"
|
|
_require_command "$SETCAP_PROG" "setcap"
|
|
_require_command "$GETCAP_PROG" "getcap"
|
|
|
|
rm -f $seqres.full
|
|
|
|
echo "QA output created by $seq"
|
|
echo ""
|
|
file=$TEST_DIR/$seq.file
|
|
|
|
rm -f $file
|
|
touch $file
|
|
|
|
echo "**** Verifying that appending to file clears capabilities ****"
|
|
$SETCAP_PROG cap_chown+ep $file
|
|
_getcap $file | filefilter
|
|
echo data1 >> $file
|
|
cat $file
|
|
_getcap $file | filefilter
|
|
echo
|
|
|
|
echo "**** Verifying that appending to file doesn't clear other xattrs ****"
|
|
$SETCAP_PROG cap_chown+ep $file
|
|
$SETFATTR_PROG -n trusted.name -v value $file
|
|
echo data2 >> $file
|
|
cat $file
|
|
_getfattr -m '^trusted\.*' --absolute-names $file | filefilter
|
|
|
|
echo "**** Verifying that chmod doesn't affect open file descriptors ****"
|
|
rm -f $file
|
|
touch $file
|
|
chown $qa_user $file
|
|
chmod ugo+w $TEST_DIR
|
|
# don't use $here/src/writemod, as we're running it as a regular user, and
|
|
# $here may contain path component that a regular user doesn't have search
|
|
# permission
|
|
su $qa_user -c "src/writemod $file" | filefilter
|
|
cat $file
|
|
|
|
# success, all done
|
|
status=0
|
|
exit
|