DragonFlyBSD Kernel Audit
DF-2697 / run.sh
← back to finding ↓ download raw
#!/bin/sh
# DF-2697 run: root setup (once), then the decisive runs as an unprivileged
# user over ssh (vm.sh run_user).
#
# Root side (vm.sh run_root 'sh /tmp/setup2697.sh'):
#   umask 000 && /tmp/mqcreate
#   cp /tmp/gdrop /gdrop && chown root:wheel /gdrop && chmod 2755 /gdrop
#   cp /tmp/gdrop /gdrop_plain && chown root:wheel /gdrop_plain && chmod 755 /gdrop_plain
#
# Unprivileged side (vm.sh run_user 'sh /tmp/run2697.sh'):
echo ==CONTROL-no-setgid==
/gdrop_plain drop /svgidtest
echo rc=$?
echo ==SETGID-wheel-copy==
/gdrop drop /svgidtest
echo rc=$?
echo ==SETGID-keep-egid-sanity==
/gdrop keep /svgidtest
echo rc=$?