#include "librpc/gen_ndr/winreg.h"
#include "system/filesys.h"
#include "param/param.h"
+#include "libcli/security/security.h"
+#include "lib/registry/tests/proto.h"
static bool test_del_nonexistant_key(struct torture_context *tctx,
const void *test_data)
{
const struct hive_key *root = (const struct hive_key *)test_data;
- WERROR error = hive_key_del(root, "bla");
+ WERROR error = hive_key_del(tctx, root, "bla");
torture_assert_werr_equal(tctx, error, WERR_BADFILE,
"invalid return code");
struct hive_key *root = (struct hive_key *)test_data;
WERROR error;
struct hive_key *subkey;
- char data[4];
- SIVAL(data, 0, 42);
+ uint8_t d[] = { 0x42, 0x00, 0x00, 0x00 };
+ DATA_BLOB db = { d, 4 };
error = hive_key_add_name(tctx, root, "Nested Keyll", NULL,
NULL, &subkey);
torture_assert_werr_ok(tctx, error, "hive_key_add_name");
- error = hive_key_set_value(root, "Answer", REG_DWORD,
- data_blob_talloc(tctx, data, sizeof(data)));
+ error = hive_key_set_value(root, "Answer", REG_DWORD, db);
torture_assert_werr_ok(tctx, error, "hive_key_set_value");
/* This is a new backend. There should be no subkeys and no
NULL, &subkey);
torture_assert_werr_ok(tctx, error, "hive_key_add_name");
- error = hive_key_del(root, "Nested Key");
+ error = hive_key_del(mem_ctx, root, "Nested Key");
torture_assert_werr_ok(tctx, error, "reg_key_del");
return true;
struct hive_key *subkey2;
const struct hive_key *root = (const struct hive_key *)test_data;
TALLOC_CTX *mem_ctx = tctx;
- char data[4];
- SIVAL(data, 0, 42);
+ uint8_t d[] = { 0x42, 0x00, 0x00, 0x00 };
+ DATA_BLOB db = { d, 4 };
/* Create a new key under the root */
error = hive_key_add_name(mem_ctx, root, "Parent Key", NULL,
torture_assert_werr_ok(tctx, error, "hive_key_add_name");
/* Create a new value under "Child Key" */
- error = hive_key_set_value(subkey2, "Answer Recursive", REG_DWORD,
- data_blob_talloc(mem_ctx, data, sizeof(data)));
+ error = hive_key_set_value(subkey2, "Answer Recursive", REG_DWORD, db);
torture_assert_werr_ok(tctx, error, "hive_key_set_value");
/* Deleting "Parent Key" will also delete "Child Key" and the value. */
- error = hive_key_del(root, "Parent Key");
+ error = hive_key_del(mem_ctx, root, "Parent Key");
torture_assert_werr_ok(tctx, error, "hive_key_del");
return true;
NULL, &subkey);
torture_assert_werr_ok(tctx, error, "hive_key_add_name");
- error = hive_key_del(root, "Nested Key");
+ error = hive_key_del(mem_ctx, root, "Nested Key");
torture_assert_werr_ok(tctx, error, "reg_key_del");
- error = hive_key_del(root, "Nested Key");
+ error = hive_key_del(mem_ctx, root, "Nested Key");
torture_assert_werr_equal(tctx, error, WERR_BADFILE, "reg_key_del");
return true;
struct hive_key *subkey;
const struct hive_key *root = (const struct hive_key *)test_data;
TALLOC_CTX *mem_ctx = tctx;
- char data[4];
- SIVAL(data, 0, 42);
+ uint8_t d[] = { 0x42, 0x00, 0x00, 0x00 };
+ DATA_BLOB db = { d, 4 };
error = hive_key_add_name(mem_ctx, root, "YA Nested Key", NULL,
NULL, &subkey);
torture_assert_werr_ok(tctx, error, "hive_key_add_name");
- error = hive_key_set_value(subkey, "Answer", REG_DWORD,
- data_blob_talloc(mem_ctx, data, sizeof(data)));
+ error = hive_key_set_value(subkey, "Answer", REG_DWORD, db);
torture_assert_werr_ok(tctx, error, "hive_key_set_value");
return true;
struct hive_key *subkey;
const struct hive_key *root = (const struct hive_key *)test_data;
TALLOC_CTX *mem_ctx = tctx;
- char data[4];
uint32_t type;
- DATA_BLOB value;
-
- SIVAL(data, 0, 42);
+ uint8_t d[] = { 0x42, 0x00, 0x00, 0x00 };
+ DATA_BLOB db = { d, 4 }, data;
error = hive_key_add_name(mem_ctx, root, "EYA Nested Key", NULL,
NULL, &subkey);
torture_assert_werr_ok(tctx, error, "hive_key_add_name");
- error = hive_get_value(mem_ctx, subkey, "Answer", &type, &value);
+ error = hive_get_value(mem_ctx, subkey, "Answer", &type, &data);
torture_assert_werr_equal(tctx, error, WERR_BADFILE,
"getting missing value");
- error = hive_key_set_value(subkey, "Answer", REG_DWORD,
- data_blob_talloc(mem_ctx, data, sizeof(data)));
+ error = hive_key_set_value(subkey, "Answer", REG_DWORD, db);
torture_assert_werr_ok(tctx, error, "hive_key_set_value");
- error = hive_get_value(mem_ctx, subkey, "Answer", &type, &value);
+ error = hive_get_value(mem_ctx, subkey, "Answer", &type, &data);
torture_assert_werr_ok(tctx, error, "getting value");
- torture_assert_int_equal(tctx, value.length, 4, "value length");
+ torture_assert_int_equal(tctx, data.length, 4, "value length");
torture_assert_int_equal(tctx, type, REG_DWORD, "value type");
- torture_assert_mem_equal(tctx, &data, value.data, sizeof(uint32_t),
- "value data");
+ torture_assert_mem_equal(tctx, data.data, db.data, 4, "value data");
return true;
}
struct hive_key *subkey;
const struct hive_key *root = (const struct hive_key *)test_data;
TALLOC_CTX *mem_ctx = tctx;
- char data[4];
uint32_t type;
- DATA_BLOB value;
-
- SIVAL(data, 0, 42);
+ uint8_t d[] = { 0x42, 0x00, 0x00, 0x00 };
+ DATA_BLOB db = { d, 4 };
error = hive_key_add_name(mem_ctx, root, "EEYA Nested Key", NULL,
NULL, &subkey);
torture_assert_werr_ok(tctx, error, "hive_key_add_name");
- error = hive_key_set_value(subkey, "Answer", REG_DWORD,
- data_blob_talloc(mem_ctx, data, sizeof(data)));
+ error = hive_key_set_value(subkey, "Answer", REG_DWORD, db);
torture_assert_werr_ok(tctx, error, "hive_key_set_value");
- error = hive_key_del_value(subkey, "Answer");
+ error = hive_key_del_value(mem_ctx, subkey, "Answer");
torture_assert_werr_ok(tctx, error, "deleting value");
- error = hive_get_value(mem_ctx, subkey, "Answer", &type, &value);
+ error = hive_get_value(mem_ctx, subkey, "Answer", &type, &db);
torture_assert_werr_equal(tctx, error, WERR_BADFILE, "getting value");
- error = hive_key_del_value(subkey, "Answer");
+ error = hive_key_del_value(mem_ctx, subkey, "Answer");
torture_assert_werr_equal(tctx, error, WERR_BADFILE,
"deleting value");
struct hive_key *subkey;
const struct hive_key *root = (const struct hive_key *)test_data;
TALLOC_CTX *mem_ctx = tctx;
- char data[4];
uint32_t type;
- DATA_BLOB value;
+ uint8_t d[] = { 0x42, 0x00, 0x00, 0x00 };
+ DATA_BLOB db = { d, 4 }, data;
const char *name;
- int data_val = 42;
- SIVAL(data, 0, data_val);
error = hive_key_add_name(mem_ctx, root, "AYAYA Nested Key", NULL,
NULL, &subkey);
torture_assert_werr_ok(tctx, error, "hive_key_add_name");
- error = hive_key_set_value(subkey, "Answer", REG_DWORD,
- data_blob_talloc(mem_ctx, data, sizeof(data)));
+ error = hive_key_set_value(subkey, "Answer", REG_DWORD, db);
torture_assert_werr_ok(tctx, error, "hive_key_set_value");
error = hive_get_value_by_index(mem_ctx, subkey, 0, &name,
- &type, &value);
+ &type, &data);
torture_assert_werr_ok(tctx, error, "getting value");
torture_assert_str_equal(tctx, name, "Answer", "value name");
- torture_assert_int_equal(tctx, value.length, 4, "value length");
+ torture_assert_int_equal(tctx, data.length, 4, "value length");
torture_assert_int_equal(tctx, type, REG_DWORD, "value type");
+ torture_assert_mem_equal(tctx, data.data, db.data, 4, "value data");
- torture_assert_int_equal(tctx, data_val, IVAL(value.data, 0), "value data");
-
error = hive_get_value_by_index(mem_ctx, subkey, 1, &name,
- &type, &value);
+ &type, &data);
torture_assert_werr_equal(tctx, error, WERR_NO_MORE_ITEMS,
"getting missing value");
return true;
}
+static bool test_hive_security(struct torture_context *tctx, const void *_data)
+{
+ struct hive_key *subkey = NULL;
+ const struct hive_key *root = _data;
+ WERROR error;
+ struct security_descriptor *osd, *nsd;
+
+ osd = security_descriptor_dacl_create(tctx,
+ 0,
+ NULL, NULL,
+ SID_NT_AUTHENTICATED_USERS,
+ SEC_ACE_TYPE_ACCESS_ALLOWED,
+ SEC_GENERIC_ALL,
+ SEC_ACE_FLAG_OBJECT_INHERIT,
+ NULL);
+
+
+ error = hive_key_add_name(tctx, root, "SecurityKey", NULL,
+ osd, &subkey);
+ torture_assert_werr_ok(tctx, error, "hive_key_add_name");
+
+ error = hive_get_sec_desc(tctx, subkey, &nsd);
+ torture_assert_werr_ok (tctx, error, "getting security descriptor");
+
+ torture_assert(tctx, security_descriptor_equal(osd, nsd),
+ "security descriptor changed!");
+
+ /* Create a fresh security descriptor */
+ talloc_free(osd);
+ osd = security_descriptor_dacl_create(tctx,
+ 0,
+ NULL, NULL,
+ SID_NT_AUTHENTICATED_USERS,
+ SEC_ACE_TYPE_ACCESS_ALLOWED,
+ SEC_GENERIC_ALL,
+ SEC_ACE_FLAG_OBJECT_INHERIT,
+ NULL);
+
+ error = hive_set_sec_desc(subkey, osd);
+ torture_assert_werr_ok(tctx, error, "setting security descriptor");
+
+ error = hive_get_sec_desc(tctx, subkey, &nsd);
+ torture_assert_werr_ok (tctx, error, "getting security descriptor");
+
+ torture_assert(tctx, security_descriptor_equal(osd, nsd),
+ "security descriptor changed!");
+
+ return true;
+}
+
static void tcase_add_tests(struct torture_tcase *tcase)
{
torture_tcase_add_simple_test_const(tcase, "del_nonexistant_key",
test_del_key);
torture_tcase_add_simple_test_const(tcase, "del_value",
test_del_value);
-}
-
-static bool hive_setup_dir(struct torture_context *tctx, void **data)
-{
- struct hive_key *key;
- WERROR error;
- char *dirname;
- NTSTATUS status;
-
- status = torture_temp_dir(tctx, "hive-dir", &dirname);
- if (!NT_STATUS_IS_OK(status))
- return false;
-
- rmdir(dirname);
-
- error = reg_create_directory(tctx, dirname, &key);
- if (!W_ERROR_IS_OK(error)) {
- fprintf(stderr, "Unable to initialize dir hive\n");
- return false;
- }
-
- *data = key;
-
- return true;
+ torture_tcase_add_simple_test_const(tcase, "check hive security",
+ test_hive_security);
}
static bool hive_setup_ldb(struct torture_context *tctx, void **data)
char *dirname;
NTSTATUS status;
- status = torture_temp_dir(tctx, "hive-dir", &dirname);
+ status = torture_temp_dir(tctx, "hive-regf", &dirname);
if (!NT_STATUS_IS_OK(status))
return false;
rmdir(dirname);
- error = reg_create_regf_file(tctx, lp_iconv_convenience(tctx->lp_ctx),
- dirname, 5, &key);
+ error = reg_create_regf_file(tctx, dirname, 5, &key);
if (!W_ERROR_IS_OK(error)) {
fprintf(stderr, "Unable to create new regf file\n");
return false;
return true;
}
-static bool test_dir_refuses_null_location(struct torture_context *tctx)
-{
- torture_assert_werr_equal(tctx, WERR_INVALID_PARAM,
- reg_open_directory(NULL, NULL, NULL),
- "reg_open_directory accepts NULL location");
- return true;
-}
-
struct torture_suite *torture_registry_hive(TALLOC_CTX *mem_ctx)
{
struct torture_tcase *tcase;
- struct torture_suite *suite = torture_suite_create(mem_ctx, "HIVE");
-
- torture_suite_add_simple_test(suite, "dir-refuses-null-location",
- test_dir_refuses_null_location);
-
- tcase = torture_suite_add_tcase(suite, "dir");
- torture_tcase_set_fixture(tcase, hive_setup_dir, NULL);
- tcase_add_tests(tcase);
+ struct torture_suite *suite = torture_suite_create(mem_ctx, "hive");
tcase = torture_suite_add_tcase(suite, "ldb");
torture_tcase_set_fixture(tcase, hive_setup_ldb, NULL);