/* * Copyright (c) 2014-2015 Dmitry V. Levin * All rights reserved. * * Redistribution and use in source and binary forms, with or without * modification, are permitted provided that the following conditions * are met: * 1. Redistributions of source code must retain the above copyright * notice, this list of conditions and the following disclaimer. * 2. Redistributions in binary form must reproduce the above copyright * notice, this list of conditions and the following disclaimer in the * documentation and/or other materials provided with the distribution. * 3. The name of the author may not be used to endorse or promote products * derived from this software without specific prior written permission. * * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. */ #ifdef HAVE_CONFIG_H # include "config.h" #endif #include #include #include #include #include int main(void) { #if (defined __NR_getuid || defined __NR_getxuid) \ && defined(__NR_setuid) \ && defined(__NR_getresuid) \ && defined(__NR_setreuid) \ && defined(__NR_setresuid) \ && defined(__NR_fchown) \ && defined(__NR_getgroups) int uid; int size; int *list = 0; #ifndef __NR_getuid # define __NR_getuid __NR_getxuid #endif uid = syscall(__NR_getuid); (void) close(0); if (open("/proc/sys/kernel/overflowuid", O_RDONLY) == 0) { /* we trust the kernel */ char buf[sizeof(int)*3]; int n = read(0, buf, sizeof(buf) - 1); if (n) { buf[n] = '\0'; n = atoi(buf); if (uid == n) return 77; } (void) close(0); } assert(syscall(__NR_setuid, uid) == 0); { /* * uids returned by getresuid should be ignored * to avoid 16bit vs 32bit issues. */ int r, e, s; assert(syscall(__NR_getresuid, &r, &e, &s) == 0); } assert(syscall(__NR_setreuid, -1, -1L) == 0); assert(syscall(__NR_setresuid, uid, -1, -1L) == 0); assert(syscall(__NR_fchown, 1, -1, -1L) == 0); assert((size = syscall(__NR_getgroups, 0, list)) >= 0); assert(list = calloc(size + 1, sizeof(*list))); assert(syscall(__NR_getgroups, size, list) == size); return 0; #else return 77; #endif }