19fa5f6b4SRobert Watson /*-
29fa5f6b4SRobert Watson * Copyright (c) 2006 nCircle Network Security, Inc.
3d903306aSRobert Watson * Copyright (c) 2007 Robert N. M. Watson
49fa5f6b4SRobert Watson * All rights reserved.
59fa5f6b4SRobert Watson *
69fa5f6b4SRobert Watson * This software was developed by Robert N. M. Watson for the TrustedBSD
79fa5f6b4SRobert Watson * Project under contract to nCircle Network Security, Inc.
89fa5f6b4SRobert Watson *
99fa5f6b4SRobert Watson * Redistribution and use in source and binary forms, with or without
109fa5f6b4SRobert Watson * modification, are permitted provided that the following conditions
119fa5f6b4SRobert Watson * are met:
129fa5f6b4SRobert Watson * 1. Redistributions of source code must retain the above copyright
139fa5f6b4SRobert Watson * notice, this list of conditions and the following disclaimer.
149fa5f6b4SRobert Watson * 2. Redistributions in binary form must reproduce the above copyright
159fa5f6b4SRobert Watson * notice, this list of conditions and the following disclaimer in the
169fa5f6b4SRobert Watson * documentation and/or other materials provided with the distribution.
179fa5f6b4SRobert Watson *
189fa5f6b4SRobert Watson * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
199fa5f6b4SRobert Watson * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
209fa5f6b4SRobert Watson * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
219fa5f6b4SRobert Watson * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR, NCIRCLE NETWORK SECURITY,
229fa5f6b4SRobert Watson * INC., OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
239fa5f6b4SRobert Watson * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED
249fa5f6b4SRobert Watson * TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
259fa5f6b4SRobert Watson * PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
269fa5f6b4SRobert Watson * LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
279fa5f6b4SRobert Watson * NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
289fa5f6b4SRobert Watson * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
299fa5f6b4SRobert Watson */
309fa5f6b4SRobert Watson
319fa5f6b4SRobert Watson /*
329fa5f6b4SRobert Watson * Confirm that privilege is required to invoke adjtime(); first query, then
33d903306aSRobert Watson * try setting with and without privilege. Hopefully this will not disturb
34d903306aSRobert Watson * system time too much.
359fa5f6b4SRobert Watson */
369fa5f6b4SRobert Watson
379fa5f6b4SRobert Watson #include <sys/time.h>
389fa5f6b4SRobert Watson
399fa5f6b4SRobert Watson #include <err.h>
409fa5f6b4SRobert Watson #include <errno.h>
419fa5f6b4SRobert Watson #include <unistd.h>
429fa5f6b4SRobert Watson
439fa5f6b4SRobert Watson #include "main.h"
449fa5f6b4SRobert Watson
45d903306aSRobert Watson static int initialized;
46d903306aSRobert Watson static struct timeval query_tv;
47d903306aSRobert Watson
48d903306aSRobert Watson int
priv_adjtime_setup(int asroot,int injail,struct test * test)49d903306aSRobert Watson priv_adjtime_setup(int asroot, int injail, struct test *test)
509fa5f6b4SRobert Watson {
51d903306aSRobert Watson
52d903306aSRobert Watson if (initialized)
53d903306aSRobert Watson return (0);
54d903306aSRobert Watson if (adjtime(NULL, &query_tv) < 0) {
55d903306aSRobert Watson warn("priv_adjtime_setup: adjtime(NULL)");
56d903306aSRobert Watson return (-1);
57d903306aSRobert Watson }
58d903306aSRobert Watson initialized = 1;
59d903306aSRobert Watson return (0);
60d903306aSRobert Watson }
61d903306aSRobert Watson
62d903306aSRobert Watson void
priv_adjtime_set(int asroot,int injail,struct test * test)63d903306aSRobert Watson priv_adjtime_set(int asroot, int injail, struct test *test)
64d903306aSRobert Watson {
659fa5f6b4SRobert Watson int error;
669fa5f6b4SRobert Watson
67d903306aSRobert Watson error = adjtime(&query_tv, NULL);
68d903306aSRobert Watson if (asroot && injail)
69d903306aSRobert Watson expect("priv_adjtime(asroot, injail)", error, -1, EPERM);
70d903306aSRobert Watson if (asroot && !injail)
71d903306aSRobert Watson expect("priv_adjtime(asroot, !injail)", error, 0, 0);
72d903306aSRobert Watson if (!asroot && injail)
73d903306aSRobert Watson expect("priv_adjtime(!asroot, injail)", error, -1, EPERM);
74d903306aSRobert Watson if (!asroot && !injail)
75d903306aSRobert Watson expect("priv_adjtime(!asroot, !injail)", error, -1, EPERM);
76d903306aSRobert Watson }
779fa5f6b4SRobert Watson
78d903306aSRobert Watson void
priv_adjtime_cleanup(int asroot,int injail,struct test * test)79d903306aSRobert Watson priv_adjtime_cleanup(int asroot, int injail, struct test *test)
80d903306aSRobert Watson {
819fa5f6b4SRobert Watson
829fa5f6b4SRobert Watson }
83