#!/bin/bash # clean what was left from previous tests rm -rf ./protected mkdir protected touch ./protected/do-not-remove ./protected/should-be-removed ./protected/truth ./protected/perm000 ./protected/perm777 ./protected/this-name-is-wrong chmod 777 ./protected/perm777 ./protected/perm000 echo "Free code, free world." >./protected/motto # set up the fake-zenity PATH="$(realpath ./mock/):$PATH" # mount the filesystem echo "Run $(date -u +%Y-%m-%dT%H:%M:%S) " valgrind -s ../build/icfs -o default_permissions ./protected & sleep 1 # create files zenity --set-fake-response no touch ./protected/should-not-exist 2>/dev/null && echo "[ICFS-TEST]: touch can create protected/should-not-exist despite access being denied!" || echo "[ICFS-TEST]: OK" # EACCESS zenity --set-fake-response yes_tmp touch ./protected/should-exist 2>/dev/null && echo "[ICFS-TEST]: OK" || echo "[ICFS-TEST]: touch cannot create protected/should-exist despite access being permitted!" # OK # write to files zenity --set-fake-response no echo "Linux is a cancer that attaches itself in an intellectual property sense to everything it touches." >./protected/truth 2>/dev/null && echo "[ICFS-TEST]: echo can write to protected/lie despite access being denied!" || echo "[ICFS-TEST]: OK" # EACCESS zenity --set-fake-response yes_tmp echo "Sharing knowledge is the most fundamental act of friendship. Because it is a way you can give something without loosing something." >./protected/truth 2>/dev/null && echo "[ICFS-TEST]: OK" || echo "[ICFS-TEST]: echo cannot write to protected/truth despite access being permitted!" # OK # Read files zenity --set-fake-response no cat ./protected/motto >/dev/null 2>/dev/null && echo "[ICFS-TEST]: cat can read protected/this-only despite access being denied!" || echo "[ICFS-TEST]: OK" # EACCESS zenity --set-fake-response yes_tmp cat ./protected/motto >/dev/null 2>/dev/null && echo "[ICFS-TEST]: OK" || echo "[ICFS-TEST]: echo cannot create protected/this-only despite access being permitted!" # "Free code, free world." # remove files zenity --set-fake-response no rm ./protected/do-not-remove >/dev/null 2>/dev/null && echo "[ICFS-TEST]: rm can unlink protected/do-not-remove despite access being denied!" || echo "[ICFS-TEST]: OK" # EACCESS zenity --set-fake-response yes_tmp rm ./protected/should-be-removed >/dev/null 2>/dev/null && echo "[ICFS-TEST]: OK" || echo "[ICFS-TEST]: rm cannot unlink protected/should-be-removed despite access being permitted!" # OK # rename files zenity --set-fake-response no mv ./protected/truth ./protected/lie 2>/dev/null && echo "[ICFS-TEST]: mv can rename protected/truth despite access being denied!" || echo "[ICFS-TEST]: OK" # EACCESS zenity --set-fake-response yes_tmp mv ./protected/this-name-is-wrong ./protected/this-name-is-correct 2>/dev/null && echo "[ICFS-TEST]: OK" || echo "[ICFS-TEST]: mv cannot rename should-be-removed to renamed-file despite access being permitted!" # OK # change permissions zenity --set-fake-response no chmod 000 ./protected/perm777 2>/dev/null && echo "[ICFS-TEST]: chmod can change permissions of protected/perm777 despite access being denied!" || echo "[ICFS-TEST]: OK" # EACCESS zenity --set-fake-response yes_tmp chmod 000 ./protected/perm000 2>/dev/null && echo "[ICFS-TEST]: OK" || echo "[ICFS-TEST]: chmod cannot change permissions of protected/perm000 despite access being permitted!" # OK # unmount sleep 0.5 #lsof +f -- $(realpath ./protected) umount $(realpath ./protected) sleep 0.5