fchmod-0 \

	fchown-0 \

/*

 * https://bugs.gentoo.org/599706

 *

 */

#include "headers.h"

int main(int argc, char *argv[])

{

	if (argc < 2)

		return -2;

	int mode = 0;

	sscanf(argv[1], "%i", &mode);

	/* The sandbox catches this:

	 *

	 *   int fd = open(argv[2], O_RDWR);

	 *

	 * And it /should/ catch this:

	 *

	 *    int fd = open(argv[2], O_RDONLY);

	*/

	int fd = open(argv[2], O_RDONLY);

	int fchmod_result = fchmod(fd, (mode_t)mode);

	close(fd);

	return fchmod_result;

}

#!/bin/sh

#

# https://bugs.gentoo.org/599706

#

addwrite $PWD

# The sandbox doesn't log anything when it returns a junk file

# descriptor? It doesn't look like we can test the contents of

# sandbox.log here... instead, we just have to count on fchmod

# failing, which it does if you use O_RDWR, and it *should* if you use

# O_RDONLY (because that won't stop the change of permissions).

fchmod-0 $(stat --format='%#04a' ../..) ../.. && exit 1

exit 0

SB_CHECK(1)

/*

 * https://bugs.gentoo.org/599706

 *

 */

#include "headers.h"

int main(int argc, char *argv[])

{

	if (argc < 3)

		return -2;

	uid_t uid = atoi(argv[1]);

	gid_t gid = atoi(argv[2]);

	/* The sandbox catches this:

	 *

	 *   int fd = open(argv[3], O_RDWR);

	 *

	 * And it /should/ catch this:

	 *

	 *    int fd = open(argv[3], O_RDONLY);

	*/

	int fd = open(argv[3], O_RDONLY);

	int fchown_result = fchown(fd, uid, gid);

	close(fd);

	return fchown_result;

}

#!/bin/sh

#

# https://bugs.gentoo.org/599706

#

addwrite $PWD

# The sandbox doesn't log anything when it returns a junk file

# descriptor? It doesn't look like we can test the contents of

# sandbox.log here... instead, we just have to count on fchown

# failing, which it does if you use O_RDWR, and it *should* if you use

# O_RDONLY (because that won't stop the change of ownership).

fchown-0 ${SB_UID} ${SB_GID} ../.. && exit 1

exit 0