19   int fd = open("/etc/passwd", O_RDONLY);  in TEST()  local
20   EXPECT_OK(fd);  in TEST()
21   int fd_no = dup(fd);  in TEST()
23   EXPECT_OK(cap_rights_limit(fd, &rights_ioctl));  in TEST()
28   EXPECT_OK(ioctl(fd, FIONREAD, &bytes));  in TEST()
32   EXPECT_OK(ioctl(fd, FIOCLEX, &one));  in TEST()
35   close(fd);  in TEST()
41   int fd = open("/etc/passwd", O_RDONLY);  in TEST()  local
42   EXPECT_OK(fd);  in TEST()
44   // Restrict the ioctl(2) subrights of a normal FD.  in TEST()
46   EXPECT_OK(cap_ioctls_limit(fd, &ioctl_nread, 1));  in TEST()
48   EXPECT_OK(ioctl(fd, FIONREAD, &bytes));  in TEST()
50   EXPECT_NOTCAPABLE(ioctl(fd, FIOCLEX, &one));  in TEST()
54   EXPECT_OK(cap_rights_get(fd, &rights));  in TEST()
60   ssize_t nioctls = cap_ioctls_get(fd, ioctls, 16);  in TEST()
67   EXPECT_NOTCAPABLE(cap_ioctls_limit(fd, both_ioctls, 2));  in TEST()
69   close(fd);  in TEST()
73   int fd = open("/etc/passwd", O_RDONLY);  in TEST()  local
74   EXPECT_OK(fd);  in TEST()
77   EXPECT_OK(cap_rights_limit(fd, &rights));  in TEST()
79   EXPECT_OK(cap_ioctls_limit(fd, &ioctl_nread, 1));  in TEST()
84   EXPECT_OK(cap_rights_get(fd, &cur_rights));  in TEST()
86   nioctls = cap_ioctls_get(fd, ioctls, 16);  in TEST()
93   EXPECT_OK(cap_rights_limit(fd, &rights));  in TEST()
94   nioctls = cap_ioctls_get(fd, ioctls, 16);  in TEST()
101   EXPECT_OK(cap_rights_limit(fd, &rights));  in TEST()
102   nioctls = cap_ioctls_get(fd, ioctls, 16);  in TEST()
105   EXPECT_EQ(-1, cap_ioctls_limit(fd, &ioctl_nread, 1));  in TEST()
107   close(fd);  in TEST()
111   int fd = open("/etc/passwd", O_RDONLY);  in TEST()  local
112   EXPECT_OK(fd);  in TEST()
117   nioctls = cap_ioctls_get(fd, ioctls, 16);  in TEST()
123   EXPECT_OK(cap_rights_limit(fd, &rights_ioctl));  in TEST()
125   nioctls = cap_ioctls_get(fd, ioctls, 16);  in TEST()
131   EXPECT_OK(ioctl(fd, FIONREAD, &bytes));  in TEST()
133   EXPECT_OK(ioctl(fd, FIOCLEX, &one));  in TEST()
137   EXPECT_OK(cap_ioctls_limit(fd, both_ioctls, 2));  in TEST()
138   EXPECT_OK(ioctl(fd, FIONREAD, &bytes));  in TEST()
139   EXPECT_OK(ioctl(fd, FIOCLEX, &one));  in TEST()
146   nioctls = cap_ioctls_get(fd, &one_ioctl, 1);  in TEST()
153   int fd_nread = dup(fd);  in TEST()
154   int fd_clex = dup(fd);  in TEST()
182   EXPECT_OK(cap_ioctls_limit(fd, NULL, 0));  in TEST()
183   EXPECT_NOTCAPABLE(ioctl(fd, FIONREAD, &bytes));  in TEST()
184   EXPECT_NOTCAPABLE(ioctl(fd, FIOCLEX, &one));  in TEST()
186   close(fd);  in TEST()
191   int fd = open("/etc/passwd", O_RDONLY);  in TEST()  local
192   EXPECT_OK(fd);  in TEST()
201   EXPECT_OK(cap_rights_limit(fd, &rights_ioctl));  in TEST()
204   EXPECT_EQ(-1, cap_ioctls_limit(fd, ioctls, CAP_IOCTLS_LIMIT_MAX + 1));  in TEST()
206   EXPECT_OK(cap_ioctls_limit(fd, ioctls, CAP_IOCTLS_LIMIT_MAX));  in TEST()
208   close(fd);  in TEST()
212   int fd = open("/etc/passwd", O_RDONLY);  in TEST()  local
213   EXPECT_OK(fd);  in TEST()
223   EXPECT_OK(cap_rights_limit(fd, &rights_ioctl));  in TEST()
225   EXPECT_OK(cap_ioctls_limit(fd, ioctls, nioctls));  in TEST()
228   EXPECT_OK(cap_ioctls_limit(fd, ioctls, nioctls - 1));  in TEST()
230   close(fd);  in TEST()