2017-05-07 08:04:49 -04:00
|
|
|
require File.expand_path('../../../spec_helper', __FILE__)
|
|
|
|
|
|
|
|
describe "Process.groups" do
|
|
|
|
platform_is_not :windows do
|
|
|
|
it "gets an Array of the gids of groups in the supplemental group access list" do
|
|
|
|
groups = `id -G`.scan(/\d+/).map { |i| i.to_i }
|
|
|
|
gid = Process.gid
|
|
|
|
|
|
|
|
expected = (groups.sort - [gid]).sort
|
|
|
|
actual = (Process.groups - [gid]).sort
|
|
|
|
actual.should == expected
|
|
|
|
end
|
2017-12-01 10:41:50 -05:00
|
|
|
end
|
|
|
|
end
|
2017-05-07 08:04:49 -04:00
|
|
|
|
2017-12-01 10:41:50 -05:00
|
|
|
describe "Process.groups=" do
|
|
|
|
platform_is_not :windows do
|
|
|
|
as_superuser do
|
|
|
|
it "sets the list of gids of groups in the supplemental group access list" do
|
|
|
|
groups = Process.groups
|
2017-05-07 08:04:49 -04:00
|
|
|
Process.groups = []
|
|
|
|
Process.groups.should == []
|
|
|
|
Process.groups = groups
|
|
|
|
Process.groups.sort.should == groups.sort
|
2017-12-01 10:41:50 -05:00
|
|
|
end
|
|
|
|
end
|
|
|
|
|
|
|
|
as_user do
|
|
|
|
platform_is :aix do
|
|
|
|
it "sets the list of gids of groups in the supplemental group access list" do
|
2017-05-07 08:04:49 -04:00
|
|
|
# setgroups() is not part of the POSIX standard,
|
|
|
|
# so its behavior varies from OS to OS. AIX allows a non-root
|
|
|
|
# process to set the supplementary group IDs, as long as
|
|
|
|
# they are presently in its supplementary group IDs.
|
|
|
|
# The order of the following tests matters.
|
|
|
|
# After this process executes "Process.groups = []"
|
|
|
|
# it should no longer be able to set any supplementary
|
|
|
|
# group IDs, even if it originally belonged to them.
|
|
|
|
# It should only be able to set its primary group ID.
|
2017-12-01 10:41:50 -05:00
|
|
|
groups = Process.groups
|
2017-05-07 08:04:49 -04:00
|
|
|
Process.groups = groups
|
|
|
|
Process.groups.sort.should == groups.sort
|
|
|
|
Process.groups = []
|
|
|
|
Process.groups.should == []
|
|
|
|
Process.groups = [ Process.gid ]
|
|
|
|
Process.groups.should == [ Process.gid ]
|
|
|
|
supplementary = groups - [ Process.gid ]
|
|
|
|
if supplementary.length > 0
|
|
|
|
lambda { Process.groups = supplementary }.should raise_error(Errno::EPERM)
|
|
|
|
end
|
|
|
|
end
|
2017-12-01 10:41:50 -05:00
|
|
|
end
|
|
|
|
|
|
|
|
platform_is_not :aix do
|
|
|
|
it "raises Errno::EPERM" do
|
|
|
|
groups = Process.groups
|
|
|
|
lambda {
|
|
|
|
Process.groups = groups
|
|
|
|
}.should raise_error(Errno::EPERM)
|
2017-05-07 08:04:49 -04:00
|
|
|
end
|
|
|
|
end
|
|
|
|
end
|
|
|
|
end
|
|
|
|
end
|