diff usr/src/test/zfs-tests/tests/functional/acl/nontrivial/zfs_acl_chmod_inherit_001_pos.ksh @ 13899:0bcf78798346

3311 Want a test framework for arbitrary OS unit tests 3312 Add a testrunner package for OS unit tests 3313 Add a testrunner package to convert ZFS tests from STF Reviewed by: Matt Ahrens <matthew.ahrens@delphix.com> Reviewed by: Will Guyette <will.guyette@delphix.com> Reviewed by: Dan Kimmel <dan.kimmel@delphix.com> Reviewed by: Adam Leventhal <ahl@delphix.com> Reviewed by: Henrik Mattson <henrik.mattson@delphix.com> Reviewed by: Sonu Pillai <sonu.pillai@delphix.com> Reviewed by: Christopher Siden <chris.siden@delphix.com> Reviewed by: George Wilson <george.wilson@delphix.com> Reviewed by: Richard Lowe <richlowe@richlowe.net> Approved by: Richard Lowe <richlowe@richlowe.net>
author John Wren Kennedy <john.kennedy@delphix.com>
date Wed, 05 Dec 2012 22:04:50 -0500
parents
children
line wrap: on
line diff
--- /dev/null	Thu Jan 01 00:00:00 1970 +0000
+++ b/usr/src/test/zfs-tests/tests/functional/acl/nontrivial/zfs_acl_chmod_inherit_001_pos.ksh	Wed Dec 05 22:04:50 2012 -0500
@@ -0,0 +1,173 @@
+#!/bin/ksh -p
+#
+# CDDL HEADER START
+#
+# The contents of this file are subject to the terms of the
+# Common Development and Distribution License (the "License").
+# You may not use this file except in compliance with the License.
+#
+# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
+# or http://www.opensolaris.org/os/licensing.
+# See the License for the specific language governing permissions
+# and limitations under the License.
+#
+# When distributing Covered Code, include this CDDL HEADER in each
+# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
+# If applicable, add the following below this CDDL HEADER, with the
+# fields enclosed by brackets "[]" replaced with your own identifying
+# information: Portions Copyright [yyyy] [name of copyright owner]
+#
+# CDDL HEADER END
+#
+
+#
+# Copyright 2009 Sun Microsystems, Inc.  All rights reserved.
+# Use is subject to license terms.
+#
+
+. $STF_SUITE/tests/functional/acl/acl_common.kshlib
+
+#
+# DESCRIPTION:
+#	Verify chmod have correct behaviour to directory and file when setting
+#	different inherit strategy to them.
+#
+# STRATEGY:
+#	1. Loop super user and non-super user to run the test case.
+#	2. Create basedir and a set of subdirectores and files within it.
+#	3. Separately chmod basedir with different inherite options.
+#	4. Then create nested directories and files like the following.
+#
+#                                                   _ odir4
+#                                                  |_ ofile4
+#                                         _ odir3 _|
+#                                        |_ ofile3
+#                               _ odir1 _|
+#                              |_ ofile2
+#                     basefile |
+#          chmod -->  basedir -|
+#                              |_ nfile1
+#                              |_ ndir1 _
+#                                        |_ nfile2
+#                                        |_ ndir2 _
+#                                                  |_ nfile3
+#                                                  |_ ndir3
+#
+#	5. Verify each directories and files have the correct access control
+#	   capability.
+#
+
+verify_runnable "both"
+
+function cleanup
+{
+	if [[ -f $basefile ]]; then
+		log_must $RM -f $basefile
+	fi
+	if [[ -d $basedir ]]; then
+		log_must $RM -rf $basedir
+	fi
+}
+
+log_assert "Verify chmod have correct behaviour to directory and file when " \
+	"setting different inherit strategies to them."
+log_onexit cleanup
+
+# Define inherit flag
+set -A object_flag file_inherit dir_inherit file_inherit/dir_inherit
+set -A strategy_flag "" inherit_only no_propagate inherit_only/no_propagate
+
+# Defile the based directory and file
+basedir=$TESTDIR/basedir;  basefile=$TESTDIR/basefile
+
+# Define the existed files and directories before chmod
+odir1=$basedir/odir1; odir2=$odir1/odir2; odir3=$odir2/odir3
+ofile1=$basedir/ofile1; ofile2=$odir1/ofile2; ofile3=$odir2/ofile3
+
+# Define the files and directories will be created after chmod
+ndir1=$basedir/ndir1; ndir2=$ndir1/ndir2; ndir3=$ndir2/ndir3
+nfile1=$basedir/nfile1; nfile2=$ndir1/nfile2; nfile3=$ndir2/nfile3
+
+# Verify all the node have expected correct access control
+allnodes="$basedir $ndir1 $ndir2 $ndir3 $nfile1 $nfile2 $nfile3"
+allnodes="$allnodes $odir1 $odir2 $odir3 $ofile1 $ofile2 $ofile3"
+
+#
+# According to inherited flag, verify subdirectories and files within it has
+# correct inherited access control.
+#
+function verify_inherit #<object> [strategy]
+{
+	# Define the nodes which will be affected by inherit.
+	typeset inherit_nodes
+	typeset obj=$1
+	typeset str=$2
+
+	log_must usr_exec $MKDIR -p $ndir3
+	log_must usr_exec $TOUCH $nfile1 $nfile2 $nfile3
+
+	# Except for inherit_only, the basedir was affected always.
+	if [[ $str != *"inherit_only"* ]]; then
+		inherit_nodes="$inherit_nodes $basedir"
+	fi
+	# Get the files which inherited ACE.
+	if [[ $obj == *"file_inherit"* ]]; then
+		inherit_nodes="$inherit_nodes $nfile1"
+
+		if [[ $str != *"no_propagate"* ]]; then
+			inherit_nodes="$inherit_nodes $nfile2 $nfile3"
+		fi
+	fi
+	# Get the directores which inherited ACE.
+	if [[ $obj == *"dir_inherit"* ]]; then
+		inherit_nodes="$inherit_nodes $ndir1"
+
+		if [[ $str != *"no_propagate"* ]]; then
+			inherit_nodes="$inherit_nodes $ndir2 $ndir3"
+		fi
+	fi
+
+	for node in $allnodes; do
+		if [[ " $inherit_nodes " == *" $node "* ]]; then
+			log_mustnot chgusr_exec $ZFS_ACL_OTHER1 $LS -vd $node \
+				> /dev/null 2>&1
+		else
+			log_must chgusr_exec $ZFS_ACL_OTHER1 $LS -vd $node \
+				> /dev/null 2>&1
+		fi
+	done
+}
+
+for user in root $ZFS_ACL_STAFF1; do
+	log_must set_cur_usr $user
+
+	for obj in "${object_flag[@]}"; do
+		for str in "${strategy_flag[@]}"; do
+			typeset inh_opt=$obj
+			(( ${#str} != 0 )) && inh_opt=$inh_opt/$str
+			aclspec="A+user:$ZFS_ACL_OTHER1:read_acl:$inh_opt:deny"
+
+			log_must usr_exec $MKDIR $basedir
+			log_must usr_exec $TOUCH $basefile
+			log_must usr_exec $MKDIR -p $odir3
+			log_must usr_exec $TOUCH $ofile1 $ofile2 $ofile3
+
+			#
+			# Inherit flag can only be placed on a directory,
+			# otherwise it will fail.
+			#
+			log_must usr_exec $CHMOD $aclspec $basefile
+
+			#
+			# Place on a directory should succeed.
+			#
+			log_must usr_exec $CHMOD $aclspec $basedir
+
+			verify_inherit $obj $str
+
+			log_must usr_exec $RM -rf $basefile $basedir
+		done
+	done
+done
+
+log_pass "Verify chmod inherit behaviour passed."