1########################################################################
2#                                                                      #
3#               This software is part of the ast package               #
4#          Copyright (c) 1982-2011 AT&T Intellectual Property          #
5#                      and is licensed under the                       #
6#                 Eclipse Public License, Version 1.0                  #
7#                    by AT&T Intellectual Property                     #
8#                                                                      #
9#                A copy of the License is available at                 #
10#          http://www.eclipse.org/org/documents/epl-v10.html           #
11#         (with md5 checksum b35adb5213ca9657e911e9befb180842)         #
12#                                                                      #
13#              Information and Software Systems Research               #
14#                            AT&T Research                             #
15#                           Florham Park NJ                            #
16#                                                                      #
17#                  David Korn <dgk@research.att.com>                   #
18#                                                                      #
19########################################################################
20function err_exit
21{
22	print -u2 -n "\t"
23	print -u2 -r ${Command}[$1]: "${@:2}"
24	let Errors+=1
25}
26alias err_exit='err_exit $LINENO'
27
28Command=${0##*/}
29integer Errors=0
30
31tmp=$(mktemp -dt) || { err_exit mktemp -dt failed; exit 1; }
32trap "cd /; rm -rf $tmp" EXIT
33
34# test restricted shell
35pwd=$PWD
36case $SHELL in
37/*)	;;
38*/*)	SHELL=$pwd/$SHELL;;
39*)	SHELL=$(whence "$SHELL");;
40esac
41function check_restricted
42{
43	rm -f out
44	LC_MESSAGES=C rksh -c "$@" 2> out > /dev/null
45	grep restricted out  > /dev/null 2>&1
46}
47
48[[ $SHELL != /* ]] && SHELL=$pwd/$SHELL
49cd $tmp || err_exit "cd $tmp failed"
50ln -s $SHELL rksh
51PATH=$PWD:$PATH
52rksh -c  '[[ -o restricted ]]' || err_exit 'restricted option not set'
53[[ $(rksh -c 'print hello') == hello ]] || err_exit 'unable to run print'
54check_restricted /bin/echo || err_exit '/bin/echo not resticted'
55check_restricted ./echo || err_exit './echo not resticted'
56check_restricted 'SHELL=ksh' || err_exit 'SHELL asignment not resticted'
57check_restricted 'PATH=/bin' || err_exit 'PATH asignment not resticted'
58check_restricted 'FPATH=/bin' || err_exit 'FPATH asignment not resticted'
59check_restricted 'ENV=/bin' || err_exit 'ENV asignment not resticted'
60check_restricted 'print > file' || err_exit '> file not restricted'
61> empty
62check_restricted 'print <> empty' || err_exit '<> file not restricted'
63print 'echo hello' > script
64chmod +x ./script
65! check_restricted script ||  err_exit 'script without builtins should run in restricted mode'
66check_restricted ./script ||  err_exit 'script with / in name should not run in restricted mode'
67print '/bin/echo hello' > script
68! check_restricted script ||  err_exit 'script with pathnames should run in restricted mode'
69print 'echo hello> file' > script
70! check_restricted script ||  err_exit 'script with output redirection should run in restricted mode'
71print 'PATH=/bin' > script
72! check_restricted script ||  err_exit 'script with PATH assignment should run in restricted mode'
73cat > script <<!
74#! $SHELL
75print hello
76!
77! check_restricted 'script;:' ||  err_exit 'script with #! pathname should run in restricted mode'
78! check_restricted 'script' ||  err_exit 'script with #! pathname should run in restricted mode even if last command in script'
79for i in PATH ENV FPATH
80do	check_restricted  "function foo { typeset $i=foobar;};foo" || err_exit "$i can be changed in function by using typeset"
81done
82
83exit $((Errors<125?Errors:125))
84