Book a Demo!
CoCalc Logo Icon
StoreFeaturesDocsShareSupportNewsAboutPoliciesSign UpSign In
freebsd
GitHub Repository: freebsd/freebsd-src
 Path: blob/main/tests/sys/mac/portacl/nobody_test.sh
107436 views
1
#!/bin/sh

2


3
dir=`dirname $0`

4
. ${dir}/misc.sh

5


6
echo "1..64"

7


8
# security.mac.portacl.suser_exempt value doesn't affect unprivileged users

9
# behaviour.

10
# mac_portacl has no impact on ports <= net.inet.ip.portrange.reservedhigh.

11


12
trap restore_settings EXIT INT TERM

13


14
sysctl security.mac.portacl.suser_exempt=1 >/dev/null

15
sysctl net.inet.ip.portrange.reservedhigh=78 >/dev/null

16
sysctl security.mac.portacl.enabled=1 >/dev/null

17


18
bind_test fl fl uid nobody tcp 77

19
bind_test ok ok uid nobody tcp 7777

20
bind_test fl fl uid nobody udp 77

21
bind_test ok ok uid nobody udp 7777

22


23
bind_test fl fl gid nobody tcp 77

24
bind_test ok ok gid nobody tcp 7777

25
bind_test fl fl gid nobody udp 77

26
bind_test ok ok gid nobody udp 7777

27


28
sysctl security.mac.portacl.suser_exempt=0 >/dev/null

29


30
bind_test fl fl uid nobody tcp 77

31
bind_test ok ok uid nobody tcp 7777

32
bind_test fl fl uid nobody udp 77

33
bind_test ok ok uid nobody udp 7777

34


35
bind_test fl fl gid nobody tcp 77

36
bind_test ok ok gid nobody tcp 7777

37
bind_test fl fl gid nobody udp 77

38
bind_test ok ok gid nobody udp 7777

39


40
# Verify if security.mac.portacl.port_high works.

41


42
sysctl security.mac.portacl.port_high=7778 >/dev/null

43


44
bind_test fl fl uid nobody tcp 77

45
bind_test fl ok uid nobody tcp 7777

46
bind_test fl fl uid nobody udp 77

47
bind_test fl ok uid nobody udp 7777

48


49
bind_test fl fl gid nobody tcp 77

50
bind_test fl ok gid nobody tcp 7777

51
bind_test fl fl gid nobody udp 77

52
bind_test fl ok gid nobody udp 7777

53


54
# Verify if mac_portacl rules work.

55


56
sysctl net.inet.ip.portrange.reservedhigh=76 >/dev/null

57
sysctl security.mac.portacl.port_high=7776 >/dev/null

58


59
bind_test fl ok uid nobody tcp 77

60
bind_test ok ok uid nobody tcp 7777

61
bind_test fl ok uid nobody udp 77

62
bind_test ok ok uid nobody udp 7777

63


64
bind_test fl ok gid nobody tcp 77

65
bind_test ok ok gid nobody tcp 7777

66
bind_test fl ok gid nobody udp 77

67
bind_test ok ok gid nobody udp 7777

68


69