diff options
| -rw-r--r-- | source4/torture/config.mk | 1 | ||||
| -rw-r--r-- | source4/torture/raw/samba3hide.c | 321 | ||||
| -rw-r--r-- | source4/torture/torture.c | 1 |
3 files changed, 323 insertions, 0 deletions
diff --git a/source4/torture/config.mk b/source4/torture/config.mk index 71679418c4d..0eb93857494 100644 --- a/source4/torture/config.mk +++ b/source4/torture/config.mk @@ -88,6 +88,7 @@ OBJ_FILES = \ raw/streams.o \ raw/acls.o \ raw/seek.o \ + raw/samba3hide.o \ raw/composite.o PUBLIC_DEPENDENCIES = \ LIBCLI_SMB LIBCLI_LSA LIBCLI_SMB_COMPOSITE \ diff --git a/source4/torture/raw/samba3hide.c b/source4/torture/raw/samba3hide.c new file mode 100644 index 00000000000..8f47816504a --- /dev/null +++ b/source4/torture/raw/samba3hide.c @@ -0,0 +1,321 @@ +/* + Unix SMB/CIFS implementation. + Test samba3 hide unreadable/unwriteable + Copyright (C) Volker Lendecke 2006 + + This program is free software; you can redistribute it and/or modify + it under the terms of the GNU General Public License as published by + the Free Software Foundation; either version 2 of the License, or + (at your option) any later version. + + This program is distributed in the hope that it will be useful, + but WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + GNU General Public License for more details. + + You should have received a copy of the GNU General Public License + along with this program; if not, write to the Free Software + Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA. +*/ + +#include "includes.h" +#include "torture/torture.h" +#include "libcli/raw/libcliraw.h" +#include "system/time.h" +#include "system/filesys.h" +#include "libcli/libcli.h" +#include "torture/util.h" + +static void init_unixinfo_nochange(union smb_setfileinfo *info) +{ + ZERO_STRUCTP(info); + info->unix_basic.level = RAW_SFILEINFO_UNIX_BASIC; + info->unix_basic.in.mode = SMB_MODE_NO_CHANGE; + + info->unix_basic.in.end_of_file = SMB_SIZE_NO_CHANGE_HI; + info->unix_basic.in.end_of_file <<= 32; + info->unix_basic.in.end_of_file |= SMB_SIZE_NO_CHANGE_LO; + + info->unix_basic.in.num_bytes = SMB_SIZE_NO_CHANGE_HI; + info->unix_basic.in.num_bytes <<= 32; + info->unix_basic.in.num_bytes |= SMB_SIZE_NO_CHANGE_LO; + + info->unix_basic.in.status_change_time = SMB_TIME_NO_CHANGE_HI; + info->unix_basic.in.status_change_time <<= 32; + info->unix_basic.in.status_change_time = SMB_TIME_NO_CHANGE_LO; + + info->unix_basic.in.access_time = SMB_TIME_NO_CHANGE_HI; + info->unix_basic.in.access_time <<= 32; + info->unix_basic.in.access_time = SMB_TIME_NO_CHANGE_LO; + + info->unix_basic.in.change_time = SMB_TIME_NO_CHANGE_HI; + info->unix_basic.in.change_time <<= 32; + info->unix_basic.in.change_time = SMB_TIME_NO_CHANGE_LO; + + info->unix_basic.in.uid = SMB_UID_NO_CHANGE; + info->unix_basic.in.gid = SMB_GID_NO_CHANGE; +} + +struct list_state { + const char *fname; + BOOL visible; +}; + +static void set_visible(struct clilist_file_info *i, const char *mask, + void *priv) +{ + struct list_state *state = priv; + + if (strcasecmp_m(state->fname, i->name) == 0) + state->visible = True; +} + +static BOOL is_visible(struct smbcli_tree *tree, const char *fname) +{ + struct list_state state; + + state.visible = False; + state.fname = fname; + + if (smbcli_list(tree, "*.*", 0, set_visible, &state) < 0) { + return False; + } + return state.visible; +} + +static BOOL is_readable(struct smbcli_tree *tree, const char *fname) +{ + int fnum; + fnum = smbcli_open(tree, fname, O_RDONLY, DENY_NONE); + if (fnum < 0) { + return False; + } + smbcli_close(tree, fnum); + return True; +} + +static BOOL is_writeable(TALLOC_CTX *mem_ctx, struct smbcli_tree *tree, + const char *fname) +{ + int fnum; + fnum = smbcli_open(tree, fname, O_WRONLY, DENY_NONE); + if (fnum < 0) { + return False; + } + smbcli_close(tree, fnum); + return True; +} + +/* + * This is not an exact method because there's a ton of reasons why a getatr + * might fail. But for our purposes it's sufficient. + */ + +static BOOL smbcli_file_exists(struct smbcli_tree *tree, const char *fname) +{ + return NT_STATUS_IS_OK(smbcli_getatr(tree, fname, NULL, NULL, NULL)); +} + +static NTSTATUS smbcli_chmod(struct smbcli_tree *tree, const char *fname, + uint64_t permissions) +{ + union smb_setfileinfo sfinfo; + init_unixinfo_nochange(&sfinfo); + sfinfo.unix_basic.in.file.path = fname; + sfinfo.unix_basic.in.permissions = permissions; + return smb_raw_setpathinfo(tree, &sfinfo); +} + +static NTSTATUS second_tcon(TALLOC_CTX *mem_ctx, + struct smbcli_session *session, + const char *sharename, + struct smbcli_tree **res) +{ + union smb_tcon tcon; + struct smbcli_tree *result; + TALLOC_CTX *tmp_ctx; + NTSTATUS status; + + if ((tmp_ctx = talloc_new(mem_ctx)) == NULL) { + return NT_STATUS_NO_MEMORY; + } + + result = smbcli_tree_init(session, tmp_ctx, False); + if (result == NULL) { + talloc_free(tmp_ctx); + return NT_STATUS_NO_MEMORY; + } + + tcon.generic.level = RAW_TCON_TCONX; + tcon.tconx.in.flags = 0; + + /* Ignore share mode security here */ + tcon.tconx.in.password = data_blob(NULL, 0); + tcon.tconx.in.path = sharename; + tcon.tconx.in.device = "????"; + + status = smb_raw_tcon(result, tmp_ctx, &tcon); + if (!NT_STATUS_IS_OK(status)) { + talloc_free(tmp_ctx); + return status; + } + + result->tid = tcon.tconx.out.tid; + *res = talloc_steal(mem_ctx, result); + talloc_free(tmp_ctx); + return NT_STATUS_OK; +} + +BOOL torture_samba3_hide(struct torture_context *torture) +{ + struct smbcli_state *cli; + BOOL ret = False; + TALLOC_CTX *mem_ctx; + const char *fname = "test.txt"; + int fnum; + NTSTATUS status; + struct smbcli_tree *hideunread; + struct smbcli_tree *hideunwrite; + + mem_ctx = talloc_init("torture_samba3_unixinfo"); + if (mem_ctx == NULL) { + d_printf("talloc_init failed\n"); + return False; + } + + if (!torture_open_connection_share( + mem_ctx, &cli, lp_parm_string(-1, "torture", "host"), + lp_parm_string(-1, "torture", "share"), NULL)) { + d_printf("torture_open_connection_share failed\n"); + goto done; + } + + status = second_tcon(mem_ctx, cli->session, "hideunread", + &hideunread); + if (!NT_STATUS_IS_OK(status)) { + d_printf("second_tcon(hideunread) failed: %s\n", + nt_errstr(status)); + goto done; + } + + status = second_tcon(mem_ctx, cli->session, "hideunwrite", + &hideunwrite); + if (!NT_STATUS_IS_OK(status)) { + d_printf("second_tcon(hideunwrite) failed: %s\n", + nt_errstr(status)); + goto done; + } + + status = smbcli_unlink(cli->tree, fname); + if (NT_STATUS_EQUAL(status, NT_STATUS_CANNOT_DELETE)) { + smbcli_setatr(cli->tree, fname, 0, -1); + smbcli_unlink(cli->tree, fname); + } + + fnum = smbcli_open(cli->tree, fname, O_RDWR|O_CREAT, DENY_NONE); + if (fnum == -1) { + d_printf("Failed to create %s - %s\n", fname, + smbcli_errstr(cli->tree)); + goto done; + } + + smbcli_close(cli->tree, fnum); + + if (!smbcli_file_exists(cli->tree, fname)) { + d_printf("%s does not exist\n", fname); + goto done; + } + + /* R/W file should be visible everywhere */ + + status = smbcli_chmod(cli->tree, fname, UNIX_R_USR|UNIX_W_USR); + if (!NT_STATUS_IS_OK(status)) { + d_printf("smbcli_chmod failed: %s\n", nt_errstr(status)); + goto done; + } + if (!is_writeable(mem_ctx, cli->tree, fname)) { + d_printf("File not writable\n"); + goto done; + } + if (!is_readable(cli->tree, fname)) { + d_printf("File not readable\n"); + goto done; + } + if (!is_visible(cli->tree, fname)) { + d_printf("r/w file not visible via normal share\n"); + goto done; + } + if (!is_visible(hideunread, fname)) { + d_printf("r/w file not visible via hide unreadable\n"); + goto done; + } + if (!is_visible(hideunwrite, fname)) { + d_printf("r/w file not visible via hide unwriteable\n"); + goto done; + } + + /* R/O file should not be visible via hide unwriteable files */ + + status = smbcli_chmod(cli->tree, fname, UNIX_R_USR); + + if (!NT_STATUS_IS_OK(status)) { + d_printf("smbcli_chmod failed: %s\n", nt_errstr(status)); + goto done; + } + if (is_writeable(mem_ctx, cli->tree, fname)) { + d_printf("r/o is writable\n"); + goto done; + } + if (!is_readable(cli->tree, fname)) { + d_printf("r/o not readable\n"); + goto done; + } + if (!is_visible(cli->tree, fname)) { + d_printf("r/o file not visible via normal share\n"); + goto done; + } + if (!is_visible(hideunread, fname)) { + d_printf("r/o file not visible via hide unreadable\n"); + goto done; + } + if (is_visible(hideunwrite, fname)) { + d_printf("r/o file visible via hide unwriteable\n"); + goto done; + } + + /* inaccessible file should be only visible on normal share */ + + status = smbcli_chmod(cli->tree, fname, 0); + if (!NT_STATUS_IS_OK(status)) { + d_printf("smbcli_chmod failed: %s\n", nt_errstr(status)); + goto done; + } + if (is_writeable(mem_ctx, cli->tree, fname)) { + d_printf("inaccessible file is writable\n"); + goto done; + } + if (is_readable(cli->tree, fname)) { + d_printf("inaccessible file is readable\n"); + goto done; + } + if (!is_visible(cli->tree, fname)) { + d_printf("inaccessible file not visible via normal share\n"); + goto done; + } + if (is_visible(hideunread, fname)) { + d_printf("inaccessible file visible via hide unreadable\n"); + goto done; + } + if (is_visible(hideunwrite, fname)) { + d_printf("inaccessible file visible via hide unwriteable\n"); + goto done; + } + + + ret = True; + + done: + talloc_free(mem_ctx); + return ret; +} + diff --git a/source4/torture/torture.c b/source4/torture/torture.c index 9962fbb9f87..66f37d51f52 100644 --- a/source4/torture/torture.c +++ b/source4/torture/torture.c @@ -613,6 +613,7 @@ static struct { {"RAW-STREAMS", torture_raw_streams, 0}, {"RAW-ACLS", torture_raw_acls, 0}, {"RAW-COMPOSITE", torture_raw_composite, 0}, + {"RAW-SAMBA3HIDE", torture_samba3_hide, 0}, /* SMB2 tests */ {"SMB2-CONNECT", torture_smb2_connect, 0}, |