blob: 9c8cad0df9ed378a152b4eb0736af864fcec2ae2 [file] [log] [blame]
# Copyright (c) 2012 The Chromium OS Authors. All rights reserved.
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.
import grp
import logging
import os
import pwd
import stat
from autotest_lib.client.bin import test, utils
from autotest_lib.client.common_lib import error
class security_SysLogPermissions(test.test):
version = 1
def run_once(self, baseline='suid'):
syslog_uid = pwd.getpwnam('syslog').pw_uid
syslog_gid = grp.getgrnam('syslog').gr_gid
st = os.stat('/var/log')
if not (st.st_mode & stat.S_ISVTX):
raise error.TestFail('/var/log is not sticky')
if st.st_gid != syslog_gid:
raise error.TestFail('/var/log is not group syslog')
st = os.stat('/var/log/messages')
if st.st_uid != syslog_uid:
raise error.TestFail('/var/log/messages is not user syslog')