//
|
// Copyright 2021 Staysail Systems, Inc. <info@staysail.tech>
|
// Copyright 2018 Capitar IT Group BV <info@capitar.com>
|
//
|
// This software is supplied under the terms of the MIT License, a
|
// copy of which should be located in the distribution where this
|
// file was obtained (LICENSE.txt). A copy of the license may also be
|
// found online at https://opensource.org/licenses/MIT.
|
//
|
|
#include <nng/nng.h>
|
#include <nng/protocol/reqrep0/rep.h>
|
#include <nng/protocol/reqrep0/req.h>
|
#include <nng/transport/ipc/ipc.h>
|
|
#include "convey.h"
|
#include "stubs.h"
|
#include "trantest.h"
|
|
#define ADDR "/tmp/ipc_winsec_test"
|
|
// Inproc tests.
|
|
#ifndef _WIN32
|
TestMain("IPC Security Descriptor", {
|
Convey("Given a socket and an IPC listener", {
|
nng_socket s;
|
nng_listener l;
|
int x;
|
|
So(nng_rep0_open(&s) == 0);
|
Reset({ nng_close(s); });
|
So(nng_listener_create(&l, s, "ipc://" ADDR) == 0);
|
Convey("We cannot set Windows SECURITY_DESCRIPTOR on POSIX", {
|
So(nng_listener_setopt_ptr(l,
|
NNG_OPT_IPC_SECURITY_DESCRIPTOR,
|
&x) == NNG_ENOTSUP);
|
});
|
});
|
})
|
#else
|
|
#include <assert.h>
|
|
// Microsoft prefers CamelCase header names, but relies on case insensitive
|
// file systems to make that work. The rest of the world (min-gw64 included)
|
// uses case sensitive names and lowercase.
|
|
#include <accctrl.h>
|
|
#include <sddl.h>
|
|
#include <aclapi.h>
|
|
SECURITY_DESCRIPTOR *
|
sdescAuthUsers(PSID sid, PACL *aclp)
|
{
|
SECURITY_DESCRIPTOR *sdesc;
|
EXPLICIT_ACCESS xa;
|
ACL * acl;
|
|
sdesc = calloc(SECURITY_DESCRIPTOR_MIN_LENGTH, 1);
|
assert(sdesc != NULL);
|
|
InitializeSecurityDescriptor(sdesc, SECURITY_DESCRIPTOR_REVISION);
|
|
xa.grfAccessPermissions = GENERIC_READ | GENERIC_WRITE;
|
xa.grfAccessMode = SET_ACCESS;
|
xa.grfInheritance = SUB_CONTAINERS_AND_OBJECTS_INHERIT;
|
xa.Trustee.TrusteeForm = TRUSTEE_IS_SID;
|
xa.Trustee.TrusteeType = TRUSTEE_IS_WELL_KNOWN_GROUP;
|
xa.Trustee.ptstrName = (LPSTR) sid;
|
|
SetEntriesInAcl(1, &xa, NULL, &acl);
|
*aclp = acl;
|
|
SetSecurityDescriptorDacl(sdesc, TRUE, acl, FALSE);
|
return (sdesc);
|
}
|
|
TestMain("IPC Security Descriptor", {
|
Convey("Given a socket and an IPC listener", {
|
nng_socket s;
|
nng_listener l;
|
|
So(nng_rep0_open(&s) == 0);
|
Reset({ nng_close(s); });
|
|
So(nng_listener_create(&l, s, "ipc://" ADDR) == 0);
|
Convey("We can set security descriptor on Windows", {
|
SECURITY_DESCRIPTOR *sdesc;
|
SID users;
|
DWORD size;
|
PACL acl = NULL;
|
|
size = sizeof(users);
|
CreateWellKnownSid(
|
WinAuthenticatedUserSid, NULL, &users, &size);
|
|
sdesc = sdescAuthUsers(&users, &acl);
|
assert(sdesc != NULL);
|
assert(acl != NULL);
|
Reset({
|
free(sdesc);
|
LocalFree(acl);
|
});
|
|
So(nng_listener_setopt_ptr(l,
|
NNG_OPT_IPC_SECURITY_DESCRIPTOR, sdesc) == 0);
|
So(nng_listener_start(l, 0) == 0);
|
|
Convey("And they are effective", {
|
PACL dacl;
|
PSECURITY_DESCRIPTOR sd;
|
PACE_HEADER ace;
|
PSID asid;
|
PACCESS_ALLOWED_ACE allowed;
|
|
HANDLE ph = CreateFileA("\\\\.\\\\pipe\\" ADDR,
|
READ_CONTROL, 0, NULL, OPEN_EXISTING,
|
FILE_FLAG_OVERLAPPED, NULL);
|
|
So(ph != INVALID_HANDLE_VALUE);
|
Reset({ CloseHandle(ph); });
|
|
So(GetSecurityInfo(ph, SE_KERNEL_OBJECT,
|
DACL_SECURITY_INFORMATION, NULL, NULL,
|
&dacl, NULL, &sd) == ERROR_SUCCESS);
|
Reset({ LocalFree(sd); });
|
|
So(dacl->AceCount == 1);
|
So(GetAce(dacl, 0, (void **) &ace) == TRUE);
|
allowed = (PACCESS_ALLOWED_ACE) ace;
|
asid = (PSID) &allowed->SidStart;
|
So(IsValidSid(asid));
|
So(EqualSid(asid, &users) == TRUE);
|
});
|
});
|
|
Convey("We cannot set security descriptor after started", {
|
SECURITY_DESCRIPTOR *sdesc;
|
SID users;
|
DWORD size;
|
PACL acl = NULL;
|
|
size = sizeof(users);
|
CreateWellKnownSid(
|
WinAuthenticatedUserSid, NULL, &users, &size);
|
|
sdesc = sdescAuthUsers(&users, &acl);
|
assert(sdesc != NULL);
|
assert(acl != NULL);
|
Reset({
|
free(sdesc);
|
LocalFree(acl);
|
});
|
|
So(nng_listener_start(l, 0) == 0);
|
So(nng_listener_setopt_ptr(l,
|
NNG_OPT_IPC_SECURITY_DESCRIPTOR,
|
sdesc) == NNG_EBUSY);
|
});
|
|
Convey("We cannot set bogus security", {
|
So(nng_listener_setopt_ptr(l,
|
NNG_OPT_IPC_SECURITY_DESCRIPTOR,
|
NULL) == NNG_EINVAL);
|
});
|
});
|
|
Convey("We cannot set security descriptor on an IPC dialer", {
|
nng_socket s;
|
nng_dialer d;
|
SECURITY_DESCRIPTOR *sdesc;
|
|
sdesc = calloc(SECURITY_DESCRIPTOR_MIN_LENGTH, 1);
|
assert(sdesc != NULL);
|
InitializeSecurityDescriptor(
|
sdesc, SECURITY_DESCRIPTOR_REVISION);
|
|
So(nng_rep0_open(&s) == 0);
|
Reset({
|
nng_close(s);
|
free(sdesc);
|
});
|
|
So(nng_dialer_create(&d, s, "ipc://" ADDR) == 0);
|
So(nng_dialer_setopt_ptr(d, NNG_OPT_IPC_SECURITY_DESCRIPTOR,
|
sdesc) == NNG_ENOTSUP);
|
});
|
})
|
#endif
|
