]>
Commit | Line | Data |
---|---|---|
1 | /* | |
2 | * Copyright (c) 2006-2009 Apple Inc. All rights reserved. | |
3 | * | |
4 | * @APPLE_LICENSE_HEADER_START@ | |
5 | * | |
6 | * This file contains Original Code and/or Modifications of Original Code | |
7 | * as defined in and that are subject to the Apple Public Source License | |
8 | * Version 2.0 (the 'License'). You may not use this file except in | |
9 | * compliance with the License. Please obtain a copy of the License at | |
10 | * http://www.opensource.apple.com/apsl/ and read it before using this | |
11 | * file. | |
12 | * | |
13 | * The Original Code and all software distributed under the License are | |
14 | * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER | |
15 | * EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES, | |
16 | * INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY, | |
17 | * FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT. | |
18 | * Please see the License for the specific language governing rights and | |
19 | * limitations under the License. | |
20 | * | |
21 | * @APPLE_LICENSE_HEADER_END@ | |
22 | */ | |
23 | #include <stdio.h> // fprintf(), NULL | |
24 | #include <stdlib.h> // exit(), EXIT_SUCCESS | |
25 | #include <string.h> // strcmp(), strncmp() | |
26 | #include <mach-o/dyld_priv.h> // dyld_process_is_restricted() | |
27 | ||
28 | #include "test.h" // PASS(), FAIL(), XPASS(), XFAIL() | |
29 | ||
30 | // | |
31 | // binaries set to run as some other user id never see any DYLD_ environment variables | |
32 | // | |
33 | ||
34 | int main(int argc, const char* argv[], const char* envp[], const char* apple[]) | |
35 | { | |
36 | // verify no DYLD_ variables | |
37 | const char** p; | |
38 | for(p = envp; *p != NULL; p++) { | |
39 | //fprintf(stderr, "%s\n", *p); | |
40 | if ( strncmp(*p, "DYLD_", 5) == 0 ) { | |
41 | FAIL("restrict-environ: found %s", *p); | |
42 | return EXIT_SUCCESS; | |
43 | } | |
44 | } | |
45 | // verify same as apple parameter | |
46 | ++p; | |
47 | if ( apple != p ) { | |
48 | FAIL("restrict-environ: apple parameter not at end of envp"); | |
49 | return EXIT_SUCCESS; | |
50 | } | |
51 | ||
52 | // verify apple parameter is not NULL and ends in main | |
53 | if ( *apple == NULL ) { | |
54 | FAIL("restrict-environ: apple parameter is empty"); | |
55 | return EXIT_SUCCESS; | |
56 | } | |
57 | if ( strstr(*apple, "/main") == NULL ) { | |
58 | FAIL("restrict-environ: apple parameter is not path to main"); | |
59 | return EXIT_SUCCESS; | |
60 | } | |
61 | ||
62 | // verify SPI says process is restricted | |
63 | if ( !dyld_process_is_restricted() ) { | |
64 | FAIL("restrict-environ: dyld_process_is_restrictet() returns false"); | |
65 | return EXIT_SUCCESS; | |
66 | } | |
67 | ||
68 | ||
69 | PASS("restrict-environ"); | |
70 | return EXIT_SUCCESS; | |
71 | } |