| OLD | NEW |
| 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 // This file contains the validation tests for the sandbox. | 5 // This file contains the validation tests for the sandbox. |
| 6 // It includes the tests that need to be performed inside the | 6 // It includes the tests that need to be performed inside the |
| 7 // sandbox. | 7 // sandbox. |
| 8 | 8 |
| 9 #include <shlwapi.h> | 9 #include <shlwapi.h> |
| 10 #include <stddef.h> | 10 #include <stddef.h> |
| (...skipping 103 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 114 TestRunner runner; | 114 TestRunner runner; |
| 115 runner.GetPolicy()->SetAlternateDesktop(true); | 115 runner.GetPolicy()->SetAlternateDesktop(true); |
| 116 runner.GetPolicy()->SetIntegrityLevel(INTEGRITY_LEVEL_LOW); | 116 runner.GetPolicy()->SetIntegrityLevel(INTEGRITY_LEVEL_LOW); |
| 117 EXPECT_EQ(SBOX_TEST_DENIED, runner.RunTest(L"OpenInteractiveDesktop NULL")); | 117 EXPECT_EQ(SBOX_TEST_DENIED, runner.RunTest(L"OpenInteractiveDesktop NULL")); |
| 118 EXPECT_EQ(SBOX_TEST_DENIED, runner.RunTest(L"SwitchToSboxDesktop NULL")); | 118 EXPECT_EQ(SBOX_TEST_DENIED, runner.RunTest(L"SwitchToSboxDesktop NULL")); |
| 119 } | 119 } |
| 120 | 120 |
| 121 // Tests that the permissions on the Windowstation does not allow the sandbox | 121 // Tests that the permissions on the Windowstation does not allow the sandbox |
| 122 // to get to the interactive desktop or to make the sbox desktop interactive. | 122 // to get to the interactive desktop or to make the sbox desktop interactive. |
| 123 TEST(ValidationSuite, TestAlternateDesktop) { | 123 TEST(ValidationSuite, TestAlternateDesktop) { |
| 124 base::win::Version version = base::win::GetVersion(); | |
| 125 if (version < base::win::VERSION_WIN7) | |
| 126 return; | |
| 127 | 124 |
| 128 TestRunner runner; | 125 TestRunner runner; |
| 129 EXPECT_EQ(SBOX_TEST_DENIED, runner.RunTest(L"EnumAlternateWinsta NULL")); | 126 EXPECT_EQ(SBOX_TEST_DENIED, runner.RunTest(L"EnumAlternateWinsta NULL")); |
| 130 | 127 |
| 131 wchar_t command[1024] = {0}; | 128 wchar_t command[1024] = {0}; |
| 132 runner.SetTimeout(3600000); | 129 runner.SetTimeout(3600000); |
| 133 runner.GetPolicy()->SetAlternateDesktop(true); | 130 runner.GetPolicy()->SetAlternateDesktop(true); |
| 134 runner.GetPolicy()->SetIntegrityLevel(INTEGRITY_LEVEL_LOW); | 131 runner.GetPolicy()->SetIntegrityLevel(INTEGRITY_LEVEL_LOW); |
| 135 base::string16 desktop_name = runner.GetPolicy()->GetAlternateDesktop(); | 132 base::string16 desktop_name = runner.GetPolicy()->GetAlternateDesktop(); |
| 136 desktop_name = desktop_name.substr(desktop_name.find('\\') + 1); | 133 desktop_name = desktop_name.substr(desktop_name.find('\\') + 1); |
| (...skipping 23 matching lines...) Expand all Loading... |
| 160 target.SetAsynchronous(true); | 157 target.SetAsynchronous(true); |
| 161 | 158 |
| 162 EXPECT_EQ(SBOX_TEST_SUCCEEDED, target.RunTest(L"SleepCmd 30000")); | 159 EXPECT_EQ(SBOX_TEST_SUCCEEDED, target.RunTest(L"SleepCmd 30000")); |
| 163 | 160 |
| 164 TestProcessAccess(&runner, target.process_id()); | 161 TestProcessAccess(&runner, target.process_id()); |
| 165 } | 162 } |
| 166 | 163 |
| 167 // Tests that a low-integrity process cannot open a locked-down process (due | 164 // Tests that a low-integrity process cannot open a locked-down process (due |
| 168 // to the integrity label changing after startup via SetDelayedIntegrityLevel). | 165 // to the integrity label changing after startup via SetDelayedIntegrityLevel). |
| 169 TEST(ValidationSuite, TestProcessDenyLowIntegrity) { | 166 TEST(ValidationSuite, TestProcessDenyLowIntegrity) { |
| 170 // This test applies only to Vista and above. | |
| 171 if (base::win::GetVersion() < base::win::VERSION_VISTA) | |
| 172 return; | |
| 173 | 167 |
| 174 TestRunner runner; | 168 TestRunner runner; |
| 175 TestRunner target; | 169 TestRunner target; |
| 176 | 170 |
| 177 target.SetAsynchronous(true); | 171 target.SetAsynchronous(true); |
| 178 target.GetPolicy()->SetDelayedIntegrityLevel(INTEGRITY_LEVEL_LOW); | 172 target.GetPolicy()->SetDelayedIntegrityLevel(INTEGRITY_LEVEL_LOW); |
| 179 | 173 |
| 180 runner.GetPolicy()->SetIntegrityLevel(INTEGRITY_LEVEL_LOW); | 174 runner.GetPolicy()->SetIntegrityLevel(INTEGRITY_LEVEL_LOW); |
| 181 runner.GetPolicy()->SetTokenLevel(USER_RESTRICTED_SAME_ACCESS, | 175 runner.GetPolicy()->SetTokenLevel(USER_RESTRICTED_SAME_ACCESS, |
| 182 USER_INTERACTIVE); | 176 USER_INTERACTIVE); |
| 183 | 177 |
| 184 EXPECT_EQ(SBOX_TEST_SUCCEEDED, target.RunTest(L"SleepCmd 30000")); | 178 EXPECT_EQ(SBOX_TEST_SUCCEEDED, target.RunTest(L"SleepCmd 30000")); |
| 185 | 179 |
| 186 TestProcessAccess(&runner, target.process_id()); | 180 TestProcessAccess(&runner, target.process_id()); |
| 187 } | 181 } |
| 188 | 182 |
| 189 // Tests that a locked-down process cannot open a low-integrity process. | 183 // Tests that a locked-down process cannot open a low-integrity process. |
| 190 TEST(ValidationSuite, TestProcessDenyBelowLowIntegrity) { | 184 TEST(ValidationSuite, TestProcessDenyBelowLowIntegrity) { |
| 191 // This test applies only to Vista and above. | |
| 192 if (base::win::GetVersion() < base::win::VERSION_VISTA) | |
| 193 return; | |
| 194 | 185 |
| 195 TestRunner runner; | 186 TestRunner runner; |
| 196 TestRunner target; | 187 TestRunner target; |
| 197 | 188 |
| 198 target.SetAsynchronous(true); | 189 target.SetAsynchronous(true); |
| 199 target.GetPolicy()->SetIntegrityLevel(INTEGRITY_LEVEL_LOW); | 190 target.GetPolicy()->SetIntegrityLevel(INTEGRITY_LEVEL_LOW); |
| 200 target.GetPolicy()->SetTokenLevel(USER_RESTRICTED_SAME_ACCESS, | 191 target.GetPolicy()->SetTokenLevel(USER_RESTRICTED_SAME_ACCESS, |
| 201 USER_INTERACTIVE); | 192 USER_INTERACTIVE); |
| 202 | 193 |
| 203 runner.GetPolicy()->SetDelayedIntegrityLevel(INTEGRITY_LEVEL_UNTRUSTED); | 194 runner.GetPolicy()->SetDelayedIntegrityLevel(INTEGRITY_LEVEL_UNTRUSTED); |
| (...skipping 29 matching lines...) Expand all Loading... |
| 233 TEST(ValidationSuite, TestMemoryNoLimit) { | 224 TEST(ValidationSuite, TestMemoryNoLimit) { |
| 234 TestRunner runner; | 225 TestRunner runner; |
| 235 wchar_t command[1024] = {0}; | 226 wchar_t command[1024] = {0}; |
| 236 const int kAllocationSize = 256 * 1024 * 1024; | 227 const int kAllocationSize = 256 * 1024 * 1024; |
| 237 | 228 |
| 238 wsprintf(command, L"AllocateCmd %d", kAllocationSize); | 229 wsprintf(command, L"AllocateCmd %d", kAllocationSize); |
| 239 EXPECT_EQ(SBOX_TEST_SUCCEEDED, runner.RunTest(command)); | 230 EXPECT_EQ(SBOX_TEST_SUCCEEDED, runner.RunTest(command)); |
| 240 } | 231 } |
| 241 | 232 |
| 242 } // namespace sandbox | 233 } // namespace sandbox |
| OLD | NEW |