xref: /illumos-gate/usr/src/test/zfs-tests/tests/functional/acl/nontrivial/zfs_acl_chmod_inherit_004_pos.ksh (revision 6990962ce8f191dd6bb6a174a2f3dec3e3a51f18)

#!/bin/ksh -p
#
# CDDL HEADER START
#
# The contents of this file are subject to the terms of the
# Common Development and Distribution License (the "License").
# You may not use this file except in compliance with the License.
#
# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
# or http://www.opensolaris.org/os/licensing.
# See the License for the specific language governing permissions
# and limitations under the License.
#
# When distributing Covered Code, include this CDDL HEADER in each
# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
# If applicable, add the following below this CDDL HEADER, with the
# fields enclosed by brackets "[]" replaced with your own identifying
# information: Portions Copyright [yyyy] [name of copyright owner]
#
# CDDL HEADER END
#

#
# Copyright 2009 Sun Microsystems, Inc.  All rights reserved.
# Use is subject to license terms.
#

# Copyright (c) 2012, 2016 by Delphix. All rights reserved.
# Copyright 2016 Nexenta Systems, Inc.
# Copyright 2023 RackTop Systems, Inc.
#

. $STF_SUITE/tests/functional/acl/acl_common.kshlib

# DESCRIPTION:
# Verify aclinherit=passthrough-x will inherit the execute permission only if
# file creation mode requests it.
#
# STRATEGY:
# 1. Use both super user and non-super user to run the test case.
# 2. Set aclinherit=passthrough-x
# 3. Create basedir and a set of files, one with 644 and one with 755 mode.
# 4. Verify that execute permission is inherited only if file creation mode
#    requests them.

verify_runnable "both"

function cleanup
{
	[[ -d $basedir ]] && log_must rm -rf $basedir
}

log_assert "aclinherit=passthrough-x should inherit the execute permission" \
    "only if file creation mode requests it"
log_onexit cleanup

set -A aces \
    "owner@:rwxpC:f:allow" \
    "group@:rxp:f:allow" \
    "everyone@:rxp:f:allow"

typeset basedir="$TESTDIR/basedir"
typeset nfile1="$basedir/nfile1" nfile2="$basedir/nfile2"

function check_execute_bit
{
	typeset ace
	typeset file=$1
	typeset -i i=0

	while ((i < 6)); do
		ace=$(get_ACE $file $i)
		if [[ "$ace" == *"execute"* ]]; then
			return 0
		fi
		((i = i + 1))
	done

	return 1
}

function verify_inherit
{
	typeset -i i=0

	log_must usr_exec mkdir $basedir

	# Modify owner@, group@ and everyone@ ACEs to include execute
	# permission (see above), and make them file-inheritable
	while ((i < ${#aces[*]})); do
		log_must usr_exec chmod A$i=${aces[i]} $basedir
		((i = i + 1))
	done

	# Create file with 644 mode
	log_must usr_exec touch $nfile1
	# Check that execute permission wasn't inherited
	log_mustnot check_execute_bit $nfile1

	# Use cp(1) to copy over /usr/bin/true
	log_must usr_exec cp /usr/bin/true $nfile2
	# Check that execute permission was inherited
	log_must check_execute_bit $nfile2
}

log_must zfs set aclmode=passthrough $TESTPOOL/$TESTFS
log_must zfs set aclinherit=passthrough-x $TESTPOOL/$TESTFS

for user in root $ZFS_ACL_STAFF1; do
	log_must set_cur_usr $user
	verify_inherit
	cleanup
done

log_pass "aclinherit=passthrough-x should inherit the execute permission" \
    "only if file creation mode requests it"