#! /bin/bash # SPDX-License-Identifier: GPL-2.0 # Copyright (c) 2022 Oracle. All Rights Reserved. # # FS QA Test No. 727 # # Functional test for dropping capability bits as part of an atomic file # commit. # . ./common/preamble _begin_fstest auto fiexchange swapext quick # Override the default cleanup function. # _cleanup() # { # cd / # rm -r -f $tmp.* # } # Import common functions. . ./common/filter . ./common/attr # real QA test starts here # Modify as appropriate. _supported_fs generic _require_user _require_command "$GETCAP_PROG" getcap _require_command "$SETCAP_PROG" setcap _require_xfs_io_command swapext '-v exchrange -a' _require_xfs_io_command startupdate _require_scratch _require_attrs security _scratch_mkfs >> $seqres.full _scratch_mount _require_congruent_file_oplen $SCRATCH_MNT 1048576 chmod a+rw $SCRATCH_MNT/ setup_testfile() { rm -f $SCRATCH_MNT/a $SCRATCH_MNT/b _pwrite_byte 0x58 0 1m $SCRATCH_MNT/a >> $seqres.full _pwrite_byte 0x57 0 1m $SCRATCH_MNT/b >> $seqres.full chmod a+rw $SCRATCH_MNT/a $SCRATCH_MNT/b $SETCAP_PROG cap_setgid,cap_setuid+ep $SCRATCH_MNT/a sync } commit_and_check() { local user="$1" md5sum $SCRATCH_MNT/a | _filter_scratch stat -c '%a %A %n' $SCRATCH_MNT/a | _filter_scratch _getcap -v $SCRATCH_MNT/a | _filter_scratch local cmd="$XFS_IO_PROG -c 'startupdate' -c 'pwrite -S 0x57 0 1m' -c 'commitupdate' $SCRATCH_MNT/a" if [ -n "$user" ]; then su - "$user" -c "$cmd" >> $seqres.full else $SHELL -c "$cmd" >> $seqres.full fi _scratch_cycle_mount md5sum $SCRATCH_MNT/a | _filter_scratch stat -c '%a %A %n' $SCRATCH_MNT/a | _filter_scratch _getcap -v $SCRATCH_MNT/a | _filter_scratch # Blank line in output echo } # Commit by an unprivileged user clears capability bits. echo "Test 1 - qa_user" setup_testfile commit_and_check "$qa_user" # Commit by root leaves capability bits. echo "Test 2 - root" setup_testfile commit_and_check # success, all done status=0 exit