3 # Show all commands when run with environment variable VERBOSE=yes.
4 test -z "$VERBOSE" || set -x
8 echo "Skipping test: insufficient ACL support"
13 # creates a temporary directory.
15 # - tmp pathname of freshly created temporary directory
18 # Use the environment variable TMPDIR, falling back to /tmp. This allows
19 # users to specify a different temporary directory, for example, if their
20 # /tmp is filled up or too small.
23 # Use the mktemp program if available. If not available, hide the error
25 tmp=`(umask 077 && mktemp -d "$TMPDIR/glXXXXXX") 2>/dev/null` &&
26 test -n "$tmp" && test -d "$tmp"
29 # Use a simple mkdir command. It is guaranteed to fail if the directory
30 # already exists. $RANDOM is bash specific and expands to empty in shells
31 # other than bash, ksh and zsh. Its use does not increase security;
32 # rather, it minimizes the probability of failure in a very cluttered /tmp
34 tmp=$TMPDIR/gl$$-$RANDOM
35 (umask 077 && mkdir "$tmp")
38 echo "$0: cannot create a temporary directory in $TMPDIR" >&2
47 echo "$0: cannot determine build directory (unreadable parent dir?)" >&2
50 # Switch to a temporary directory, to increase the likelihood that ACLs are
51 # supported on the current file system. (/tmp is usually locally mounted,
52 # whereas the build dir is sometimes NFS-mounted.)
56 rm -f tmpfile[0-9] tmpaclout[0-2]
57 echo "Simple contents" > tmpfile0
60 # Classification of the platform according to the programs available for
62 # Possible values are:
63 # linux, cygwin, freebsd, solaris, hpux, osf1, aix, macosx, irix, none.
64 # TODO: Support also native Win32 platforms (mingw).
66 if (getfacl tmpfile0 >/dev/null) 2>/dev/null; then
67 # Platforms with the getfacl and setfacl programs.
68 # Linux, FreeBSD, Solaris, Cygwin.
69 if (setfacl --help >/dev/null) 2>/dev/null; then
71 if (LC_ALL=C setfacl --help | grep ' --set-file' >/dev/null) 2>/dev/null; then
79 if (LC_ALL=C setfacl 2>&1 | grep '\-x entries' >/dev/null) 2>/dev/null; then
88 if (lsacl / >/dev/null) 2>/dev/null; then
89 # Platforms with the lsacl and chacl programs.
90 # HP-UX, sometimes also IRIX.
93 if (getacl tmpfile0 >/dev/null) 2>/dev/null; then
97 if (aclget tmpfile0 >/dev/null) 2>/dev/null; then
101 if (fsaclctl -v >/dev/null) 2>/dev/null; then
105 if test -f /sbin/chacl; then
115 # Define a function to test for the same ACLs, from the point of view of
117 # func_test_same_acls file1 file2
119 linux | cygwin | freebsd | solaris)
120 func_test_same_acls ()
122 getfacl "$1" | sed -e "s/$1/FILENAME/g" > tmpaclout1
123 getfacl "$2" | sed -e "s/$2/FILENAME/g" > tmpaclout2
124 cmp tmpaclout1 tmpaclout2 > /dev/null
128 func_test_same_acls ()
130 lsacl "$1" | sed -e "s/$1/FILENAME/g" > tmpaclout1
131 lsacl "$2" | sed -e "s/$2/FILENAME/g" > tmpaclout2
132 cmp tmpaclout1 tmpaclout2 > /dev/null
136 func_test_same_acls ()
138 getacl "$1" | sed -e "s/$1/FILENAME/g" > tmpaclout1
139 getacl "$2" | sed -e "s/$2/FILENAME/g" > tmpaclout2
140 cmp tmpaclout1 tmpaclout2 > /dev/null
144 func_test_same_acls ()
146 aclget "$1" > tmpaclout1
147 aclget "$2" > tmpaclout2
148 cmp tmpaclout1 tmpaclout2 > /dev/null
152 func_test_same_acls ()
154 /bin/ls -le "$1" | sed -e "s/$1/FILENAME/g" > tmpaclout1
155 /bin/ls -le "$2" | sed -e "s/$2/FILENAME/g" > tmpaclout2
156 cmp tmpaclout1 tmpaclout2 > /dev/null
160 func_test_same_acls ()
162 /bin/ls -lD "$1" | sed -e "s/$1/FILENAME/g" > tmpaclout1
163 /bin/ls -lD "$2" | sed -e "s/$2/FILENAME/g" > tmpaclout2
164 cmp tmpaclout1 tmpaclout2 > /dev/null
168 func_test_same_acls ()
175 # func_test_copy file1 file2
176 # copies file1 to file2 and verifies the permissions and ACLs are the same
180 echo "Simple contents" > "$2"
182 "$builddir"/test-copy-acl${EXEEXT} "$1" "$2" || exit 1
183 "$builddir"/test-sameacls${EXEEXT} "$1" "$2" || exit 1
184 func_test_same_acls "$1" "$2" || exit 1
187 func_test_copy tmpfile0 tmpfile1
189 if test $acl_flavor != none; then
190 # Use a user and group id different from the current one, to avoid
191 # redundant/ambiguous ACLs.
195 if test "$auid" = "$myuid"; then auid=2; fi
197 if test "$agid" = "$mygid"; then agid=2; fi
200 linux | freebsd | solaris)
202 # Set an ACL for a user.
203 setfacl -m user:$auid:1 tmpfile0
205 func_test_copy tmpfile0 tmpfile2
207 # Set an ACL for a group.
208 setfacl -m group:$agid:4 tmpfile0
210 func_test_copy tmpfile0 tmpfile3
212 # Set an ACL for other.
214 freebsd) setfacl -m other::4 tmpfile0 ;;
215 solaris) chmod o+r tmpfile0 ;;
216 *) setfacl -m other:4 tmpfile0 ;;
219 func_test_copy tmpfile0 tmpfile4
221 # Remove the ACL for the user.
223 linux) setfacl -x user:$auid tmpfile0 ;;
224 freebsd) setfacl -x user:$auid:1 tmpfile0 ;;
225 *) setfacl -d user:$auid:1 tmpfile0 ;;
228 func_test_copy tmpfile0 tmpfile5
230 # Remove the ACL for other.
232 linux | solaris) ;; # impossible
233 freebsd) setfacl -x other::4 tmpfile0 ;;
234 *) setfacl -d other:4 tmpfile0 ;;
237 func_test_copy tmpfile0 tmpfile6
239 # Remove the ACL for the group.
241 linux) setfacl -x group:$agid tmpfile0 ;;
242 freebsd) setfacl -x group:$agid:4 tmpfile0 ;;
243 *) setfacl -d group:$agid:4 tmpfile0 ;;
246 func_test_copy tmpfile0 tmpfile7
248 # Delete all optional ACLs.
251 setfacl -m user:$auid:1 tmpfile0
255 setfacl -s user::6,group::0,other:0 tmpfile0 ;;
258 func_test_copy tmpfile0 tmpfile8
260 # Copy ACLs from a file that has no ACLs.
264 linux) getfacl tmpfile9 | setfacl --set-file=- tmpfile0 ;;
266 *) getfacl tmpfile9 | setfacl -f - tmpfile0 ;;
270 func_test_copy tmpfile0 tmpfile9
276 # Set an ACL for a group.
277 setfacl -m group:0:1 tmpfile0
279 func_test_copy tmpfile0 tmpfile2
281 # Set an ACL for other.
282 setfacl -m other:4 tmpfile0
284 func_test_copy tmpfile0 tmpfile4
286 # Remove the ACL for the group.
287 setfacl -d group:0 tmpfile0
289 func_test_copy tmpfile0 tmpfile5
291 # Remove the ACL for other.
292 setfacl -d other:4 tmpfile0
294 func_test_copy tmpfile0 tmpfile6
296 # Delete all optional ACLs.
297 setfacl -s user::6,group::0,other:0 tmpfile0
299 func_test_copy tmpfile0 tmpfile8
301 # Copy ACLs from a file that has no ACLs.
304 getfacl tmpfile9 | setfacl -f - tmpfile0
307 func_test_copy tmpfile0 tmpfile9
313 # Set an ACL for a user.
314 orig=`lsacl tmpfile0 | sed -e 's/ tmpfile0$//'`
315 chacl -r "${orig}($auid.%,--x)" tmpfile0
317 func_test_copy tmpfile0 tmpfile2
319 # Set an ACL for a group.
320 orig=`lsacl tmpfile0 | sed -e 's/ tmpfile0$//'`
321 chacl -r "${orig}(%.$agid,r--)" tmpfile0
323 func_test_copy tmpfile0 tmpfile3
325 # Set an ACL for other.
326 orig=`lsacl tmpfile0 | sed -e 's/ tmpfile0$//'`
327 chacl -r "${orig}(%.%,r--)" tmpfile0
329 func_test_copy tmpfile0 tmpfile4
331 # Remove the ACL for the user.
332 chacl -d "($auid.%,--x)" tmpfile0
334 func_test_copy tmpfile0 tmpfile5
336 # Remove the ACL for the group.
337 chacl -d "(%.$agid,r--)" tmpfile0
339 func_test_copy tmpfile0 tmpfile6
341 # Delete all optional ACLs.
344 func_test_copy tmpfile0 tmpfile8
346 # Copy ACLs from a file that has no ACLs.
349 orig=`lsacl tmpfile9 | sed -e 's/ tmpfile9$//'`
351 chacl -r "${orig}" tmpfile0
353 func_test_copy tmpfile0 tmpfile9
359 # Set an ACL for a user.
360 setacl -u user:$auid:1 tmpfile0
362 func_test_copy tmpfile0 tmpfile2
364 # Set an ACL for a group.
365 setacl -u group:$agid:4 tmpfile0
367 func_test_copy tmpfile0 tmpfile3
369 # Set an ACL for other.
370 setacl -u other::4 tmpfile0
372 func_test_copy tmpfile0 tmpfile4
374 # Remove the ACL for the user.
375 setacl -x user:$auid:1 tmpfile0
377 func_test_copy tmpfile0 tmpfile5
379 if false; then # would give an error "can't set ACL: Invalid argument"
380 # Remove the ACL for other.
381 setacl -x other::4 tmpfile0
383 func_test_copy tmpfile0 tmpfile6
386 # Remove the ACL for the group.
387 setacl -x group:$agid:4 tmpfile0
389 func_test_copy tmpfile0 tmpfile7
391 # Delete all optional ACLs.
392 setacl -u user:$auid:1 tmpfile0
395 func_test_copy tmpfile0 tmpfile8
397 # Copy ACLs from a file that has no ACLs.
400 getacl tmpfile9 > tmpaclout0
401 setacl -b -U tmpaclout0 tmpfile0
404 func_test_copy tmpfile0 tmpfile9
410 # Set an ACL for a user.
411 { aclget tmpfile0 | sed -e 's/disabled$/enabled/'; echo " permit --x u:$auid"; } | aclput tmpfile0
413 func_test_copy tmpfile0 tmpfile2
415 # Set an ACL for a group.
416 { aclget tmpfile0 | sed -e 's/disabled$/enabled/'; echo " permit r-- g:$agid"; } | aclput tmpfile0
418 func_test_copy tmpfile0 tmpfile3
420 # Set an ACL for other.
423 func_test_copy tmpfile0 tmpfile4
425 # Remove the ACL for the user.
426 aclget tmpfile0 | grep -v ' u:[^ ]*$' | aclput tmpfile0
428 func_test_copy tmpfile0 tmpfile5
430 # Remove the ACL for the group.
431 aclget tmpfile0 | grep -v ' g:[^ ]*$' | aclput tmpfile0
433 func_test_copy tmpfile0 tmpfile7
435 # Delete all optional ACLs.
436 aclget tmpfile0 | sed -e 's/enabled$/disabled/' | sed -e '/disabled$/q' | aclput tmpfile0
438 func_test_copy tmpfile0 tmpfile8
440 # Copy ACLs from a file that has no ACLs.
443 aclget tmpfile9 | aclput tmpfile0
446 func_test_copy tmpfile0 tmpfile9
452 # Set an ACL for a user.
453 /bin/chmod +a "user:daemon allow execute" tmpfile0
455 func_test_copy tmpfile0 tmpfile2
457 # Set an ACL for a group.
458 /bin/chmod +a "group:daemon allow read" tmpfile0
460 func_test_copy tmpfile0 tmpfile3
462 # Set an ACL for other.
465 func_test_copy tmpfile0 tmpfile4
467 # Remove the ACL for the user.
468 /bin/chmod -a "user:daemon allow execute" tmpfile0
470 func_test_copy tmpfile0 tmpfile5
472 # Remove the ACL for the group.
473 /bin/chmod -a "group:daemon allow read" tmpfile0
475 func_test_copy tmpfile0 tmpfile7
477 # Delete all optional ACLs.
478 /bin/chmod -N tmpfile0
480 func_test_copy tmpfile0 tmpfile8
482 # Copy ACLs from a file that has no ACLs.
485 { /bin/ls -le tmpfile9 | sed -n -e 's/^ [0-9][0-9]*: //p'; echo; } | /bin/chmod -E tmpfile0
488 func_test_copy tmpfile0 tmpfile9
494 # Set an ACL for a user.
495 /sbin/chacl user::rw-,group::---,other::---,user:$auid:--x tmpfile0
497 func_test_copy tmpfile0 tmpfile2
499 # Set an ACL for a group.
500 /sbin/chacl user::rw-,group::---,other::---,user:$auid:--x,group:$agid:r-- tmpfile0
502 func_test_copy tmpfile0 tmpfile3
504 # Set an ACL for other.
505 /sbin/chacl user::rw-,group::---,user:$auid:--x,group:$agid:r--,other::r-- tmpfile0
507 func_test_copy tmpfile0 tmpfile4
509 # Remove the ACL for the user.
510 /sbin/chacl user::rw-,group::---,group:$agid:r--,other::r-- tmpfile0
512 func_test_copy tmpfile0 tmpfile5
514 # Remove the ACL for the group.
515 /sbin/chacl user::rw-,group::---,other::r-- tmpfile0
517 func_test_copy tmpfile0 tmpfile7
524 rm -f tmpfile[0-9] tmpaclout[0-2]