path: root/tools/testing/selftests/namespaces/cred_change_test.c

// SPDX-License-Identifier: GPL-2.0
#define _GNU_SOURCE
#include <errno.h>
#include <fcntl.h>
#include <limits.h>
#include <sched.h>
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <sys/capability.h>
#include <sys/ioctl.h>
#include <sys/stat.h>
#include <sys/syscall.h>
#include <sys/types.h>
#include <sys/wait.h>
#include <unistd.h>
#include <linux/nsfs.h>
#include "../kselftest_harness.h"
#include "../filesystems/utils.h"
#include "wrappers.h"

/*
 * Test credential changes and their impact on namespace active references.
 */

/*
 * Test setuid() in a user namespace properly swaps active references.
 * Create a user namespace with multiple UIDs mapped, then setuid() between them.
 * Verify that the user namespace remains active throughout.
 */
TEST(setuid_preserves_active_refs)
{
	pid_t pid;
	int status;
	__u64 userns_id;
	struct ns_id_req req = {
		.size = sizeof(req),
		.spare = 0,
		.ns_id = 0,
		.ns_type = CLONE_NEWUSER,
		.spare2 = 0,
		.user_ns_id = 0,
	};
	__u64 ns_ids[256];
	ssize_t ret;
	int i;
	bool found = false;
	int pipefd[2];

	ASSERT_EQ(pipe(pipefd), 0);

	pid = fork();
	ASSERT_GE(pid, 0);

	if (pid == 0) {
		/* Child process */
		int fd, userns_fd;
		__u64 child_userns_id;
		uid_t orig_uid = getuid();
		int setuid_count;

		close(pipefd[0]);

		/* Create new user namespace with multiple UIDs mapped (0-9) */
		userns_fd = get_userns_fd(0, orig_uid, 10);
		if (userns_fd < 0) {
			close(pipefd[1]);
			exit(1);
		}

		if (setns(userns_fd, CLONE_NEWUSER) < 0) {
			close(userns_fd);
			close(pipefd[1]);
			exit(1);
		}
		close(userns_fd);

		/* Get user namespace ID */
		fd = open("/proc/self/ns/user", O_RDONLY);
		if (fd < 0) {
			close(pipefd[1]);
			exit(1);
		}

		if (ioctl(fd, NS_GET_ID, &child_userns_id) < 0) {
			close(fd);
			close(pipefd[1]);
			exit(1);
		}
		close(fd);

		/* Send namespace ID to parent */
		write(pipefd[1], &child_userns_id, sizeof(child_userns_id));

		/*
		 * Perform multiple setuid() calls.
		 * Each setuid() triggers commit_creds() which should properly
		 * swap active references via switch_cred_namespaces().
		 */
		for (setuid_count = 0; setuid_count < 50; setuid_count++) {
			uid_t target_uid = (setuid_count % 10);
			if (setuid(target_uid) < 0) {
				if (errno != EPERM) {
					close(pipefd[1]);
					exit(1);
				}
			}
		}

		close(pipefd[1]);
		exit(0);
	}

	/* Parent process */
	close(pipefd[1]);

	if (read(pipefd[0], &userns_id, sizeof(userns_id)) != sizeof(userns_id)) {
		close(pipefd[0]);
		kill(pid, SIGKILL);
		waitpid(pid, NULL, 0);
		SKIP(return, "Failed to get namespace ID from child");
	}
	close(pipefd[0]);

	TH_LOG("Child user namespace ID: %llu", (unsigned long long)userns_id);

	/* Verify namespace is active while child is running */
	ret = sys_listns(&req, ns_ids, ARRAY_SIZE(ns_ids), 0);
	if (ret < 0) {
		kill(pid, SIGKILL);
		waitpid(pid, NULL, 0);
		if (errno == ENOSYS)
			SKIP(return, "listns() not supported");
		ASSERT_GE(ret, 0);
	}

	for (i = 0; i < ret; i++) {
		if (ns_ids[i] == userns_id) {
			found = true;
			break;
		}
	}
	ASSERT_TRUE(found);

	waitpid(pid, &status, 0);
	ASSERT_TRUE(WIFEXITED(status));
	ASSERT_EQ(WEXITSTATUS(status), 0);

	/* Verify namespace becomes inactive after child exits */
	ret = sys_listns(&req, ns_ids, ARRAY_SIZE(ns_ids), 0);
	ASSERT_GE(ret, 0);

	found = false;
	for (i = 0; i < ret; i++) {
		if (ns_ids[i] == userns_id) {
			found = true;
			break;
		}
	}

	ASSERT_FALSE(found);
	TH_LOG("setuid() correctly preserved active references (no leak)");
}

/*
 * Test setgid() in a user namespace properly handles active references.
 */
TEST(setgid_preserves_active_refs)
{
	pid_t pid;
	int status;
	__u64 userns_id;
	struct ns_id_req req = {
		.size = sizeof(req),
		.spare = 0,
		.ns_id = 0,
		.ns_type = CLONE_NEWUSER,
		.spare2 = 0,
		.user_ns_id = 0,
	};
	__u64 ns_ids[256];
	ssize_t ret;
	int i;
	bool found = false;
	int pipefd[2];

	ASSERT_EQ(pipe(pipefd), 0);

	pid = fork();