blob: d9086ebd6da06ed32b211e630a4965eaebf4128b (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
|
// Copyright (c) 2011 The Chromium Authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#import <Cocoa/Cocoa.h>
#include "base/file_util.h"
#include "base/logging.h"
#include "base/sys_string_conversions.h"
#include "content/common/sandbox_mac.h"
#include "content/common/sandbox_mac_unittest_helper.h"
#include "testing/gtest/include/gtest/gtest.h"
namespace {
using sandboxtest::MacSandboxTest;
//--------------------- Clipboard Sandboxing ----------------------
// Test case for checking sandboxing of clipboard access.
class MacSandboxedClipboardTestCase : public sandboxtest::MacSandboxTestCase {
public:
MacSandboxedClipboardTestCase();
virtual ~MacSandboxedClipboardTestCase();
virtual bool SandboxedTest();
virtual void SetTestData(const char* test_data);
private:
NSString* clipboard_name_;
};
REGISTER_SANDBOX_TEST_CASE(MacSandboxedClipboardTestCase);
MacSandboxedClipboardTestCase::MacSandboxedClipboardTestCase() :
clipboard_name_(nil) {}
MacSandboxedClipboardTestCase::~MacSandboxedClipboardTestCase() {
[clipboard_name_ release];
}
bool MacSandboxedClipboardTestCase::SandboxedTest() {
// Shouldn't be able to open the pasteboard in the sandbox.
if ([clipboard_name_ length] == 0) {
LOG(ERROR) << "Clipboard name is empty";
return false;
}
NSPasteboard* pb = [NSPasteboard pasteboardWithName:clipboard_name_];
if (pb != nil) {
LOG(ERROR) << "Was able to access named clipboard";
return false;
}
pb = [NSPasteboard generalPasteboard];
if (pb != nil) {
LOG(ERROR) << "Was able to access system clipboard";
return false;
}
return true;
}
void MacSandboxedClipboardTestCase::SetTestData(const char* test_data) {
clipboard_name_ = [base::SysUTF8ToNSString(test_data) retain];
}
TEST_F(MacSandboxTest, ClipboardAccess) {
NSPasteboard* pb = [NSPasteboard pasteboardWithUniqueName];
EXPECT_EQ([[pb types] count], 0U);
std::string pasteboard_name = base::SysNSStringToUTF8([pb name]);
EXPECT_TRUE(RunTestInAllSandboxTypes("MacSandboxedClipboardTestCase",
pasteboard_name.c_str()));
// After executing the test, the clipboard should still be empty.
EXPECT_EQ([[pb types] count], 0U);
}
//--------------------- File Access Sandboxing ----------------------
// Test case for checking sandboxing of filesystem apis.
class MacSandboxedFileAccessTestCase : public sandboxtest::MacSandboxTestCase {
public:
virtual bool SandboxedTest();
};
REGISTER_SANDBOX_TEST_CASE(MacSandboxedFileAccessTestCase);
bool MacSandboxedFileAccessTestCase::SandboxedTest() {
int fdes = open("/etc/passwd", O_RDONLY);
file_util::ScopedFD file_closer(&fdes);
return fdes == -1;
}
TEST_F(MacSandboxTest, FileAccess) {
EXPECT_TRUE(RunTestInAllSandboxTypes("MacSandboxedFileAccessTestCase", NULL));
}
} // namespace
|
