2006-03-22 19:46:12 +00:00
|
|
|
# $OpenBSD: agent-getpeereid.sh,v 1.2 2005/11/14 21:25:56 grunk Exp $
|
2003-04-23 16:53:02 +00:00
|
|
|
# Placed in the Public Domain.
|
|
|
|
|
|
|
|
|
|
tid="disallow agent attach from other uid"
|
|
|
|
|
|
|
|
|
|
UNPRIV=nobody
|
|
|
|
|
ASOCK=${OBJ}/agent
|
|
|
|
|
SSH_AUTH_SOCK=/nonexistant
|
|
|
|
|
|
2004-01-07 11:10:17 +00:00
|
|
|
if grep "#undef.*HAVE_GETPEEREID" ${BUILDDIR}/config.h >/dev/null 2>&1
|
|
|
|
|
then
|
|
|
|
|
echo "skipped (not supported on this platform)"
|
|
|
|
|
exit 0
|
|
|
|
|
fi
|
|
|
|
|
|
2003-04-23 16:53:02 +00:00
|
|
|
trace "start agent"
|
|
|
|
|
eval `${SSHAGENT} -s -a ${ASOCK}` > /dev/null
|
|
|
|
|
r=$?
|
|
|
|
|
if [ $r -ne 0 ]; then
|
|
|
|
|
fail "could not start ssh-agent: exit code $r"
|
|
|
|
|
else
|
|
|
|
|
chmod 644 ${SSH_AUTH_SOCK}
|
|
|
|
|
|
|
|
|
|
ssh-add -l > /dev/null 2>&1
|
|
|
|
|
r=$?
|
|
|
|
|
if [ $r -ne 1 ]; then
|
|
|
|
|
fail "ssh-add failed with $r != 1"
|
|
|
|
|
fi
|
|
|
|
|
|
2006-03-22 19:46:12 +00:00
|
|
|
< /dev/null ${SUDO} -S -u ${UNPRIV} ssh-add -l > /dev/null 2>&1
|
2003-04-23 16:53:02 +00:00
|
|
|
r=$?
|
|
|
|
|
if [ $r -lt 2 ]; then
|
|
|
|
|
fail "ssh-add did not fail for ${UNPRIV}: $r < 2"
|
|
|
|
|
fi
|
|
|
|
|
|
|
|
|
|
trace "kill agent"
|
|
|
|
|
${SSHAGENT} -k > /dev/null
|
|
|
|
|
fi
|
|
|
|
|
|
|
|
|
|
rm -f ${OBJ}/agent
|
