/*- * Copyright (c) 2018 Aniket Pandey * * Redistribution and use in source and binary forms, with or without * modification, are permitted provided that the following conditions * are met: * 1. Redistributions of source code must retain the above copyright * notice, this list of conditions and the following disclaimer. * 2. Redistributions in binary form must reproduce the above copyright * notice, this list of conditions and the following disclaimer in the * documentation and/or other materials provided with the distribution. * * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY * SUCH DAMAGE. */ #include #include #include #include #include #define _WANT_SEMUN #include #include #include #include #include #include #include "utils.h" #define BUFFSIZE 80 struct msgstr { long int mtype; char mtext[BUFFSIZE]; }; typedef struct msgstr msgstr_t; static pid_t pid; static int msqid, shmid, semid; static union semun semarg; static struct pollfd fds[1]; static struct msqid_ds msgbuff; static struct shmid_ds shmbuff; static struct semid_ds sembuff; static char ipcregex[BUFFSIZE]; static const char *auclass = "ip"; static char path[BUFFSIZE] = "/fileforaudit"; static unsigned short semvals[BUFFSIZE]; ATF_TC_WITH_CLEANUP(msgget_success); ATF_TC_HEAD(msgget_success, tc) { atf_tc_set_md_var(tc, "descr", "Tests the audit of a successful " "msgget(2) call"); } ATF_TC_BODY(msgget_success, tc) { FILE *pipefd = setup(fds, auclass); /* Create a message queue and obtain the corresponding identifier */ ATF_REQUIRE((msqid = msgget(IPC_PRIVATE, IPC_CREAT | S_IRUSR)) != -1); /* Check the presence of message queue ID in audit record */ snprintf(ipcregex, sizeof(ipcregex), "msgget.*return,success,%d", msqid); check_audit(fds, ipcregex, pipefd); /* Destroy the message queue with ID = msqid */ ATF_REQUIRE_EQ(0, msgctl(msqid, IPC_RMID, NULL)); } ATF_TC_CLEANUP(msgget_success, tc) { cleanup(); } ATF_TC_WITH_CLEANUP(msgget_failure); ATF_TC_HEAD(msgget_failure, tc) { atf_tc_set_md_var(tc, "descr", "Tests the audit of an unsuccessful " "msgget(2) call"); } ATF_TC_BODY(msgget_failure, tc) { const char *regex = "msgget.*return,failure.*No such file or directory"; FILE *pipefd = setup(fds, auclass); ATF_REQUIRE_EQ(-1, msgget((key_t)(-1), 0)); check_audit(fds, regex, pipefd); } ATF_TC_CLEANUP(msgget_failure, tc) { cleanup(); } ATF_TC_WITH_CLEANUP(msgsnd_success); ATF_TC_HEAD(msgsnd_success, tc) { atf_tc_set_md_var(tc, "descr", "Tests the audit of a successful " "msgsnd(2) call"); } ATF_TC_BODY(msgsnd_success, tc) { /* Create a message queue and obtain the corresponding identifier */ ATF_REQUIRE((msqid = msgget(IPC_PRIVATE, IPC_CREAT | S_IRUSR)) != -1); /* Initialize a msgstr_t structure to store message */ msgstr_t msg; msg.mtype = 1; memset(msg.mtext, 0, BUFFSIZE); /* Check the presence of message queue ID in audit record */ snprintf(ipcregex, sizeof(ipcregex), "msgsnd.*Message IPC.*%d.*return,success", msqid); FILE *pipefd = setup(fds, auclass); ATF_REQUIRE_EQ(0, msgsnd(msqid, &msg, BUFFSIZE, IPC_NOWAIT)); check_audit(fds, ipcregex, pipefd); /* Destroy the message queue with ID = msqid */ ATF_REQUIRE_EQ(0, msgctl(msqid, IPC_RMID, NULL)); } ATF_TC_CLEANUP(msgsnd_success, tc) { cleanup(); } ATF_TC_WITH_CLEANUP(msgsnd_failure); ATF_TC_HEAD(msgsnd_failure, tc) { atf_tc_set_md_var(tc, "descr", "Tests the audit of an unsuccessful " "msgsnd(2) call"); } ATF_TC_BODY(msgsnd_failure, tc) { const char *regex = "msgsnd.*Message IPC.*return,failure : Bad address"; FILE *pipefd = setup(fds, auclass); ATF_REQUIRE_EQ(-1, msgsnd(-1, NULL, 0, IPC_NOWAIT)); check_audit(fds, regex, pipefd); } ATF_TC_CLEANUP(msgsnd_failure, tc) { cleanup(); } ATF_TC_WITH_CLEANUP(msgrcv_success); ATF_TC_HEAD(msgrcv_success, tc) { atf_tc_set_md_var(tc, "descr", "Tests the audit of a successful " "msgrcv(2) call"); } ATF_TC_BODY(msgrcv_success, tc) { ssize_t recv_bytes; /* Create a message queue and obtain the corresponding identifier */ ATF_REQUIRE((msqid = msgget(IPC_PRIVATE, IPC_CREAT | S_IRUSR)) != -1); /* Initialize two msgstr_t structures to store respective messages */ msgstr_t msg1, msg2; msg1.mtype = 1; memset(msg1.mtext, 0, BUFFSIZE); /* Send a message to the queue with ID = msqid */ ATF_REQUIRE_EQ(0, msgsnd(msqid, &msg1, BUFFSIZE, IPC_NOWAIT)); FILE *pipefd = setup(fds, auclass); ATF_REQUIRE((recv_bytes = msgrcv(msqid, &msg2, BUFFSIZE, 0, MSG_NOERROR | IPC_NOWAIT)) != -1); /* Check the presence of queue ID and returned bytes in audit record */ snprintf(ipcregex, sizeof(ipcregex), "msgrcv.*Message IPC,*%d.*return,success,%zd", msqid, recv_bytes); check_audit(fds, ipcregex, pipefd); /* Destroy the message queue with ID = msqid */ ATF_REQUIRE_EQ(0, msgctl(msqid, IPC_RMID, NULL)); } ATF_TC_CLEANUP(msgrcv_success, tc) { cleanup(); } ATF_TC_WITH_CLEANUP(msgrcv_failure); ATF_TC_HEAD(msgrcv_failure, tc) { atf_tc_set_md_var(tc, "descr", "Tests the audit of an unsuccessful " "msgrcv(2) call"); } ATF_TC_BODY(msgrcv_failure, tc) { const char *regex = "msgrcv.*return,failure : Invalid argument"; FILE *pipefd = setup(fds, auclass); ATF_REQUIRE_EQ(-1, msgrcv(-1, NULL, 0, 0, MSG_NOERROR | IPC_NOWAIT)); check_audit(fds, regex, pipefd); } ATF_TC_CLEANUP(msgrcv_failure, tc) { cleanup(); } ATF_TC_WITH_CLEANUP(msgctl_rmid_success); ATF_TC_HEAD(msgctl_rmid_success, tc) { atf_tc_set_md_var(tc, "descr", "Tests the audit of a successful " "msgctl(2) call for IPC_RMID command"); } ATF_TC_BODY(msgctl_rmid_success, tc) { /* Create a message queue and obtain the corresponding identifier */ ATF_REQUIRE((msqid = msgget(IPC_PRIVATE, IPC_CREAT | S_IRUSR)) != -1); FILE *pipefd = setup(fds, auclass); ATF_REQUIRE_EQ(0, msgctl(msqid, IPC_RMID, NULL)); /* Check the presence of queue ID and IPC_RMID in audit record */ snprintf(ipcregex, sizeof(ipcregex), "msgctl.*IPC_RMID.*%d.*return,success", msqid); check_audit(fds, ipcregex, pipefd); } ATF_TC_CLEANUP(msgctl_rmid_success, tc) { cleanup(); } ATF_TC_WITH_CLEANUP(msgctl_rmid_failure); ATF_TC_HEAD(msgctl_rmid_failure, tc) { atf_tc_set_md_var(tc, "descr", "Tests the audit of an unsuccessful " "msgctl(2) call for IPC_RMID command"); } ATF_TC_BODY(msgctl_rmid_failure, tc) { const char *regex = "msgctl.*IPC_RMID.*return,failur.*Invalid argument"; FILE *pipefd = setup(fds, auclass); ATF_REQUIRE_EQ(-1, msgctl(-1, IPC_RMID, NULL)); check_audit(fds, regex, pipefd); } ATF_TC_CLEANUP(msgctl_rmid_failure, tc) { cleanup(); } ATF_TC_WITH_CLEANUP(msgctl_stat_success); ATF_TC_HEAD(msgctl_stat_success, tc) { atf_tc_set_md_var(tc, "descr", "Tests the audit of a successful " "msgctl(2) call for IPC_STAT command"); } ATF_TC_BODY(msgctl_stat_success, tc) { /* Create a message queue and obtain the corresponding identifier */ ATF_REQUIRE((msqid = msgget(IPC_PRIVATE, IPC_CREAT | S_IRUSR)) != -1); FILE *pipefd = setup(fds, auclass); ATF_REQUIRE_EQ(0, msgctl(msqid, IPC_STAT, &msgbuff)); /* Check the presence of queue ID and IPC_STAT in audit record */ snprintf(ipcregex, sizeof(ipcregex), "msgctl.*IPC_STAT.*%d.*return,success", msqid); check_audit(fds, ipcregex, pipefd); /* Destroy the message queue with ID = msqid */ ATF_REQUIRE_EQ(0, msgctl(msqid, IPC_RMID, NULL)); } ATF_TC_CLEANUP(msgctl_stat_success, tc) { cleanup(); } ATF_TC_WITH_CLEANUP(msgctl_stat_failure); ATF_TC_HEAD(msgctl_stat_failure, tc) { atf_tc_set_md_var(tc, "descr", "Tests the audit of an unsuccessful " "msgctl(2) call for IPC_STAT command"); } ATF_TC_BODY(msgctl_stat_failure, tc) { const char *regex = "msgctl.*IPC_STAT.*return,failur.*Invalid argument"; FILE *pipefd = setup(fds, auclass); ATF_REQUIRE_EQ(-1, msgctl(-1, IPC_STAT, &msgbuff)); check_audit(fds, regex, pipefd); } ATF_TC_CLEANUP(msgctl_stat_failure, tc) { cleanup(); } ATF_TC_WITH_CLEANUP(msgctl_set_success); ATF_TC_HEAD(msgctl_set_success, tc) { atf_tc_set_md_var(tc, "descr", "Tests the audit of a successful " "msgctl(2) call for IPC_SET command"); } ATF_TC_BODY(msgctl_set_success, tc) { /* Create a message queue and obtain the corresponding identifier */ ATF_REQUIRE((msqid = msgget(IPC_PRIVATE, IPC_CREAT | S_IRUSR)) != -1); /* Fill up the msgbuff structure to be used with IPC_SET */ ATF_REQUIRE_EQ(0, msgctl(msqid, IPC_STAT, &msgbuff)); FILE *pipefd = setup(fds, auclass); ATF_REQUIRE_EQ(0, msgctl(msqid, IPC_SET, &msgbuff)); /* Check the presence of message queue ID in audit record */ snprintf(ipcregex, sizeof(ipcregex), "msgctl.*IPC_SET.*%d.*return,success", msqid); check_audit(fds, ipcregex, pipefd); /* Destroy the message queue with ID = msqid */ ATF_REQUIRE_EQ(0, msgctl(msqid, IPC_RMID, NULL)); } ATF_TC_CLEANUP(msgctl_set_success, tc) { cleanup(); } ATF_TC_WITH_CLEANUP(msgctl_set_failure); ATF_TC_HEAD(msgctl_set_failure, tc) { atf_tc_set_md_var(tc, "descr", "Tests the audit of an unsuccessful " "msgctl(2) call for IPC_SET command"); } ATF_TC_BODY(msgctl_set_failure, tc) { const char *regex = "msgctl.*IPC_SET.*return,failure.*Invalid argument"; FILE *pipefd = setup(fds, auclass); ATF_REQUIRE_EQ(-1, msgctl(-1, IPC_SET, &msgbuff)); check_audit(fds, regex, pipefd); } ATF_TC_CLEANUP(msgctl_set_failure, tc) { cleanup(); } ATF_TC_WITH_CLEANUP(msgctl_illegal_command); ATF_TC_HEAD(msgctl_illegal_command, tc) { atf_tc_set_md_var(tc, "descr", "Tests the audit of an unsuccessful " "msgctl(2) call for illegal cmd value"); } ATF_TC_BODY(msgctl_illegal_command, tc) { /* Create a message queue and obtain the corresponding identifier */ ATF_REQUIRE((msqid = msgget(IPC_PRIVATE, IPC_CREAT | S_IRUSR)) != -1); const char *regex = "msgctl.*illegal command.*failur.*Invalid argument"; FILE *pipefd = setup(fds, auclass); ATF_REQUIRE_EQ(-1, msgctl(msqid, -1, &msgbuff)); check_audit(fds, regex, pipefd); /* Destroy the message queue with ID = msqid */ ATF_REQUIRE_EQ(0, msgctl(msqid, IPC_RMID, NULL)); } ATF_TC_CLEANUP(msgctl_illegal_command, tc) { cleanup(); } ATF_TC_WITH_CLEANUP(shmget_success); ATF_TC_HEAD(shmget_success, tc) { atf_tc_set_md_var(tc, "descr", "Tests the audit of a successful " "shmget(2) call"); } ATF_TC_BODY(shmget_success, tc) { FILE *pipefd = setup(fds, auclass); ATF_REQUIRE((shmid = shmget(IPC_PRIVATE, 1, IPC_CREAT | S_IRUSR)) != -1); /* Check the presence of shared memory ID in audit record */ snprintf(ipcregex, sizeof(ipcregex), "shmget.*ret.*success,%d", shmid); check_audit(fds, ipcregex, pipefd); /* Destroy the shared memory with ID = shmid */ ATF_REQUIRE_EQ(0, shmctl(shmid, IPC_RMID, NULL)); } ATF_TC_CLEANUP(shmget_success, tc) { cleanup(); } ATF_TC_WITH_CLEANUP(shmget_failure); ATF_TC_HEAD(shmget_failure, tc) { atf_tc_set_md_var(tc, "descr", "Tests the audit of an unsuccessful " "shmget(2) call"); } ATF_TC_BODY(shmget_failure, tc) { const char *regex = "shmget.*return,failure.*No such file or directory"; FILE *pipefd = setup(fds, auclass); ATF_REQUIRE_EQ(-1, shmget((key_t)(-1), 0, 0)); check_audit(fds, regex, pipefd); } ATF_TC_CLEANUP(shmget_failure, tc) { cleanup(); } ATF_TC_WITH_CLEANUP(shmat_success); ATF_TC_HEAD(shmat_success, tc) { atf_tc_set_md_var(tc, "descr", "Tests the audit of a successful " "shmat(2) call"); } ATF_TC_BODY(shmat_success, tc) { void *addr; /* Create a shared memory segment and obtain the identifier */ ATF_REQUIRE((shmid = shmget(IPC_PRIVATE, 1, IPC_CREAT | S_IRUSR)) != -1); FILE *pipefd = setup(fds, auclass); ATF_REQUIRE((intptr_t)(addr = shmat(shmid, NULL, 0)) != -1); /* Check for shared memory ID and process address in record */ snprintf(ipcregex, sizeof(ipcregex), "shmat.*Shared Memory " "IPC.*%d.*return,success", shmid); check_audit(fds, ipcregex, pipefd); /* Destroy the shared memory with ID = shmid */ ATF_REQUIRE_EQ(0, shmctl(shmid, IPC_RMID, NULL)); } ATF_TC_CLEANUP(shmat_success, tc) { cleanup(); } ATF_TC_WITH_CLEANUP(shmat_failure); ATF_TC_HEAD(shmat_failure, tc) { atf_tc_set_md_var(tc, "descr", "Tests the audit of an unsuccessful " "shmat(2) call"); } ATF_TC_BODY(shmat_failure, tc) { const char *regex = "shmat.*Shared Memory IPC.*return,failure"; FILE *pipefd = setup(fds, auclass); ATF_REQUIRE_EQ(-1, (intptr_t)shmat(-1, NULL, 0)); check_audit(fds, regex, pipefd); } ATF_TC_CLEANUP(shmat_failure, tc) { cleanup(); } ATF_TC_WITH_CLEANUP(shmdt_success); ATF_TC_HEAD(shmdt_success, tc) { atf_tc_set_md_var(tc, "descr", "Tests the audit of a successful " "shmdt(2) call"); } ATF_TC_BODY(shmdt_success, tc) { void *addr; pid = getpid(); snprintf(ipcregex, sizeof(ipcregex), "shmdt.*%d.*return,success", pid); /* Create a shared memory segment and obtain the identifier */ ATF_REQUIRE((shmid = shmget(IPC_PRIVATE, 1, IPC_CREAT | S_IRUSR)) != -1); /* Attach the shared memory to calling process's address space */ ATF_REQUIRE((intptr_t)(addr = shmat(shmid, NULL, 0)) != -1); FILE *pipefd = setup(fds, auclass); ATF_REQUIRE_EQ(0, shmdt(addr)); check_audit(fds, ipcregex, pipefd); /* Destroy the shared memory with ID = shmid */ ATF_REQUIRE_EQ(0, shmctl(shmid, IPC_RMID, NULL)); } ATF_TC_CLEANUP(shmdt_success, tc) { cleanup(); } ATF_TC_WITH_CLEANUP(shmdt_failure); ATF_TC_HEAD(shmdt_failure, tc) { atf_tc_set_md_var(tc, "descr", "Tests the audit of an unsuccessful " "shmdt(2) call"); } ATF_TC_BODY(shmdt_failure, tc) { const char *regex = "shmdt.*return,failure : Invalid argument"; FILE *pipefd = setup(fds, auclass); ATF_REQUIRE_EQ(-1, shmdt(NULL)); check_audit(fds, regex, pipefd); } ATF_TC_CLEANUP(shmdt_failure, tc) { cleanup(); } ATF_TC_WITH_CLEANUP(shmctl_rmid_success); ATF_TC_HEAD(shmctl_rmid_success, tc) { atf_tc_set_md_var(tc, "descr", "Tests the audit of a successful " "shmctl(2) call for IPC_RMID command"); } ATF_TC_BODY(shmctl_rmid_success, tc) { /* Create a shared memory segment and obtain the identifier */ ATF_REQUIRE((shmid = shmget(IPC_PRIVATE, 1, IPC_CREAT | S_IRUSR)) != -1); FILE *pipefd = setup(fds, auclass); ATF_REQUIRE_EQ(0, shmctl(shmid, IPC_RMID, NULL)); /* Check the presence of shmid and IPC_RMID in audit record */ snprintf(ipcregex, sizeof(ipcregex), "shmctl.*IPC_RMID.*%d.*return,success", shmid); check_audit(fds, ipcregex, pipefd); } ATF_TC_CLEANUP(shmctl_rmid_success, tc) { cleanup(); } ATF_TC_WITH_CLEANUP(shmctl_rmid_failure); ATF_TC_HEAD(shmctl_rmid_failure, tc) { atf_tc_set_md_var(tc, "descr", "Tests the audit of an unsuccessful " "shmctl(2) call for IPC_RMID command"); } ATF_TC_BODY(shmctl_rmid_failure, tc) { const char *regex = "shmctl.*IPC_RMID.*return,fail.*Invalid argument"; FILE *pipefd = setup(fds, auclass); ATF_REQUIRE_EQ(-1, shmctl(-1, IPC_RMID, NULL)); check_audit(fds, regex, pipefd); } ATF_TC_CLEANUP(shmctl_rmid_failure, tc) { cleanup(); } ATF_TC_WITH_CLEANUP(shmctl_stat_success); ATF_TC_HEAD(shmctl_stat_success, tc) { atf_tc_set_md_var(tc, "descr", "Tests the audit of a successful " "shmctl(2) call for IPC_STAT command"); } ATF_TC_BODY(shmctl_stat_success, tc) { /* Create a shared memory segment and obtain the identifier */ ATF_REQUIRE((shmid = shmget(IPC_PRIVATE, 1, IPC_CREAT | S_IRUSR)) != -1); FILE *pipefd = setup(fds, auclass); ATF_REQUIRE_EQ(0, shmctl(shmid, IPC_STAT, &shmbuff)); /* Check if shared memory ID and IPC_STAT are present in audit record */ snprintf(ipcregex, sizeof(ipcregex), "shmctl.*IPC_STAT.*%d.*return,success", shmid); check_audit(fds, ipcregex, pipefd); /* Destroy the shared memory with ID = shmid */ ATF_REQUIRE_EQ(0, shmctl(shmid, IPC_RMID, NULL)); } ATF_TC_CLEANUP(shmctl_stat_success, tc) { cleanup(); } ATF_TC_WITH_CLEANUP(shmctl_stat_failure); ATF_TC_HEAD(shmctl_stat_failure, tc) { atf_tc_set_md_var(tc, "descr", "Tests the audit of an unsuccessful " "shmctl(2) call for IPC_STAT command"); } ATF_TC_BODY(shmctl_stat_failure, tc) { const char *regex = "shmctl.*IPC_STAT.*return,fail.*Invalid argument"; FILE *pipefd = setup(fds, auclass); ATF_REQUIRE_EQ(-1, shmctl(-1, IPC_STAT, &shmbuff)); check_audit(fds, regex, pipefd); } ATF_TC_CLEANUP(shmctl_stat_failure, tc) { cleanup(); } ATF_TC_WITH_CLEANUP(shmctl_set_success); ATF_TC_HEAD(shmctl_set_success, tc) { atf_tc_set_md_var(tc, "descr", "Tests the audit of a successful " "shmctl(2) call for IPC_SET command"); } ATF_TC_BODY(shmctl_set_success, tc) { /* Create a shared memory segment and obtain the identifier */ ATF_REQUIRE((shmid = shmget(IPC_PRIVATE, 1, IPC_CREAT | S_IRUSR)) != -1); /* Fill up the shmbuff structure to be used with IPC_SET */ ATF_REQUIRE_EQ(0, shmctl(shmid, IPC_STAT, &shmbuff)); FILE *pipefd = setup(fds, auclass); ATF_REQUIRE_EQ(0, shmctl(shmid, IPC_SET, &shmbuff)); /* Check the presence of shared memory ID in audit record */ snprintf(ipcregex, sizeof(ipcregex), "shmctl.*IPC_SET.*%d.*return,success", msqid); check_audit(fds, ipcregex, pipefd); /* Destroy the shared memory with ID = shmid */ ATF_REQUIRE_EQ(0, shmctl(shmid, IPC_RMID, NULL)); } ATF_TC_CLEANUP(shmctl_set_success, tc) { cleanup(); } ATF_TC_WITH_CLEANUP(shmctl_set_failure); ATF_TC_HEAD(shmctl_set_failure, tc) { atf_tc_set_md_var(tc, "descr", "Tests the audit of an unsuccessful " "shmctl(2) call for IPC_SET command"); } ATF_TC_BODY(shmctl_set_failure, tc) { const char *regex = "shmctl.*IPC_SET.*return,failure.*Invalid argument"; FILE *pipefd = setup(fds, auclass); ATF_REQUIRE_EQ(-1, shmctl(-1, IPC_SET, &shmbuff)); check_audit(fds, regex, pipefd); } ATF_TC_CLEANUP(shmctl_set_failure, tc) { cleanup(); } ATF_TC_WITH_CLEANUP(shmctl_illegal_command); ATF_TC_HEAD(shmctl_illegal_command, tc) { atf_tc_set_md_var(tc, "descr", "Tests the audit of an unsuccessful " "shmctl(2) call for illegal cmd value"); } ATF_TC_BODY(shmctl_illegal_command, tc) { /* Create a shared memory segment and obtain the identifier */ ATF_REQUIRE((shmid = shmget(IPC_PRIVATE, 1, IPC_CREAT | S_IRUSR)) != -1); const char *regex = "shmctl.*illegal command.*fail.*Invalid argument"; FILE *pipefd = setup(fds, auclass); ATF_REQUIRE_EQ(-1, shmctl(shmid, -1, &shmbuff)); check_audit(fds, regex, pipefd); /* Destroy the shared memory with ID = shmid */ ATF_REQUIRE_EQ(0, shmctl(shmid, IPC_RMID, NULL)); } ATF_TC_CLEANUP(shmctl_illegal_command, tc) { cleanup(); } ATF_TC_WITH_CLEANUP(semget_success); ATF_TC_HEAD(semget_success, tc) { atf_tc_set_md_var(tc, "descr", "Tests the audit of a successful " "semget(2) call"); } ATF_TC_BODY(semget_success, tc) { FILE *pipefd = setup(fds, auclass); ATF_REQUIRE((semid = semget(IPC_PRIVATE, 1, IPC_CREAT | S_IRUSR)) != -1); /* Check the presence of semaphore set ID in audit record */ snprintf(ipcregex, sizeof(ipcregex), "semget.*return,success,%d", semid); check_audit(fds, ipcregex, pipefd); /* Destroy the semaphore set with ID = semid */ ATF_REQUIRE_EQ(0, semctl(semid, 0, IPC_RMID)); } ATF_TC_CLEANUP(semget_success, tc) { cleanup(); } ATF_TC_WITH_CLEANUP(semget_failure); ATF_TC_HEAD(semget_failure, tc) { atf_tc_set_md_var(tc, "descr", "Tests the audit of an unsuccessful " "semget(2) call"); } ATF_TC_BODY(semget_failure, tc) { pid = getpid(); snprintf(ipcregex, sizeof(ipcregex), "semget.*%d.*return,failure", pid); FILE *pipefd = setup(fds, auclass); /* Failure reason: nsems is a negative number */ ATF_REQUIRE_EQ(-1, semget(IPC_PRIVATE, -1, 0)); check_audit(fds, ipcregex, pipefd); } ATF_TC_CLEANUP(semget_failure, tc) { cleanup(); } ATF_TC_WITH_CLEANUP(semop_success); ATF_TC_HEAD(semop_success, tc) { atf_tc_set_md_var(tc, "descr", "Tests the audit of a successful " "semop(2) call"); } ATF_TC_BODY(semop_success, tc) { /* Create a semaphore set and obtain the set identifier */ ATF_REQUIRE((semid = semget(IPC_PRIVATE, 1, IPC_CREAT | S_IRUSR)) != -1); /* Initialize a sembuf structure to operate on semaphore set */ struct sembuf sop[1] = {{0, 1, 0}}; /* Check the presence of semaphore set ID in audit record */ snprintf(ipcregex, sizeof(ipcregex), "semop.*Semaphore IPC.*%d.*return,success", semid); FILE *pipefd = setup(fds, auclass); ATF_REQUIRE_EQ(0, semop(semid, sop, sizeof(sop)/sizeof(struct sembuf))); check_audit(fds, ipcregex, pipefd); /* Destroy the semaphore set with ID = semid */ ATF_REQUIRE_EQ(0, semctl(semid, 0, IPC_RMID)); } ATF_TC_CLEANUP(semop_success, tc) { cleanup(); } ATF_TC_WITH_CLEANUP(semop_failure); ATF_TC_HEAD(semop_failure, tc) { atf_tc_set_md_var(tc, "descr", "Tests the audit of an unsuccessful " "semop(2) call"); } ATF_TC_BODY(semop_failure, tc) { const char *regex = "semop.*0xffff.*return,failure : Invalid argument"; FILE *pipefd = setup(fds, auclass); ATF_REQUIRE_EQ(-1, semop(-1, NULL, 0)); check_audit(fds, regex, pipefd); } ATF_TC_CLEANUP(semop_failure, tc) { cleanup(); } ATF_TC_WITH_CLEANUP(semctl_getval_success); ATF_TC_HEAD(semctl_getval_success, tc) { atf_tc_set_md_var(tc, "descr", "Tests the audit of a successful " "semctl(2) call for GETVAL command"); } ATF_TC_BODY(semctl_getval_success, tc) { /* Create a semaphore set and obtain the set identifier */ ATF_REQUIRE((semid = semget(IPC_PRIVATE, 1, IPC_CREAT | S_IRUSR)) != -1); FILE *pipefd = setup(fds, auclass); ATF_REQUIRE_EQ(0, semctl(semid, 0, GETVAL)); /* Check the presence of semaphore ID and GETVAL in audit record */ snprintf(ipcregex, sizeof(ipcregex), "semctl.*GETVAL.*%d.*return,success", semid); check_audit(fds, ipcregex, pipefd); /* Destroy the semaphore set with ID = semid */ ATF_REQUIRE_EQ(0, semctl(semid, 0, IPC_RMID)); } ATF_TC_CLEANUP(semctl_getval_success, tc) { cleanup(); } ATF_TC_WITH_CLEANUP(semctl_getval_failure); ATF_TC_HEAD(semctl_getval_failure, tc) { atf_tc_set_md_var(tc, "descr", "Tests the audit of an unsuccessful " "semctl(2) call for GETVAL command"); } ATF_TC_BODY(semctl_getval_failure, tc) { const char *regex = "semctl.*GETVAL.*return,failure : Invalid argument"; FILE *pipefd = setup(fds, auclass); ATF_REQUIRE_EQ(-1, semctl(-1, 0, GETVAL)); check_audit(fds, regex, pipefd); } ATF_TC_CLEANUP(semctl_getval_failure, tc) { cleanup(); } ATF_TC_WITH_CLEANUP(semctl_setval_success); ATF_TC_HEAD(semctl_setval_success, tc) { atf_tc_set_md_var(tc, "descr", "Tests the audit of a successful " "semctl(2) call for SETVAL command"); } ATF_TC_BODY(semctl_setval_success, tc) { /* Create a semaphore set and obtain the set identifier */ ATF_REQUIRE((semid = semget(IPC_PRIVATE, 1, IPC_CREAT | S_IRUSR)) != -1); semarg.val = 1; FILE *pipefd = setup(fds, auclass); ATF_REQUIRE_EQ(0, semctl(semid, 0, SETVAL, semarg)); /* Check the presence of semaphore ID and SETVAL in audit record */ snprintf(ipcregex, sizeof(ipcregex), "semctl.*SETVAL.*%d.*return,success", semid); check_audit(fds, ipcregex, pipefd); /* Destroy the semaphore set with ID = semid */ ATF_REQUIRE_EQ(0, semctl(semid, 0, IPC_RMID)); } ATF_TC_CLEANUP(semctl_setval_success, tc) { cleanup(); } ATF_TC_WITH_CLEANUP(semctl_setval_failure); ATF_TC_HEAD(semctl_setval_failure, tc) { atf_tc_set_md_var(tc, "descr", "Tests the audit of an unsuccessful " "semctl(2) call for SETVAL command"); } ATF_TC_BODY(semctl_setval_failure, tc) { const char *regex = "semctl.*SETVAL.*return,failure : Invalid argument"; FILE *pipefd = setup(fds, auclass); ATF_REQUIRE_EQ(-1, semctl(-1, 0, SETVAL, semarg)); check_audit(fds, regex, pipefd); } ATF_TC_CLEANUP(semctl_setval_failure, tc) { cleanup(); } ATF_TC_WITH_CLEANUP(semctl_getpid_success); ATF_TC_HEAD(semctl_getpid_success, tc) { atf_tc_set_md_var(tc, "descr", "Tests the audit of a successful " "semctl(2) call for GETPID command"); } ATF_TC_BODY(semctl_getpid_success, tc) { /* Create a semaphore set and obtain the set identifier */ ATF_REQUIRE((semid = semget(IPC_PRIVATE, 1, IPC_CREAT | S_IRUSR)) != -1); FILE *pipefd = setup(fds, auclass); ATF_REQUIRE_EQ(0, semctl(semid, 0, GETPID)); /* Check the presence of semaphore ID and GETVAL in audit record */ snprintf(ipcregex, sizeof(ipcregex), "semctl.*GETPID.*%d.*return,success", semid); check_audit(fds, ipcregex, pipefd); /* Destroy the semaphore set with ID = semid */ ATF_REQUIRE_EQ(0, semctl(semid, 0, IPC_RMID)); } ATF_TC_CLEANUP(semctl_getpid_success, tc) { cleanup(); } ATF_TC_WITH_CLEANUP(semctl_getpid_failure); ATF_TC_HEAD(semctl_getpid_failure, tc) { atf_tc_set_md_var(tc, "descr", "Tests the audit of an unsuccessful " "semctl(2) call for GETPID command"); } ATF_TC_BODY(semctl_getpid_failure, tc) { const char *regex = "semctl.*GETPID.*return,failure : Invalid argument"; FILE *pipefd = setup(fds, auclass); ATF_REQUIRE_EQ(-1, semctl(-1, 0, GETPID)); check_audit(fds, regex, pipefd); } ATF_TC_CLEANUP(semctl_getpid_failure, tc) { cleanup(); } ATF_TC_WITH_CLEANUP(semctl_getncnt_success); ATF_TC_HEAD(semctl_getncnt_success, tc) { atf_tc_set_md_var(tc, "descr", "Tests the audit of a successful " "semctl(2) call for GETNCNT command"); } ATF_TC_BODY(semctl_getncnt_success, tc) { /* Create a semaphore set and obtain the set identifier */ ATF_REQUIRE((semid = semget(IPC_PRIVATE, 1, IPC_CREAT | S_IRUSR)) != -1); FILE *pipefd = setup(fds, auclass); ATF_REQUIRE_EQ(0, semctl(semid, 0, GETNCNT)); /* Check the presence of semaphore ID and GETNCNT in audit record */ snprintf(ipcregex, sizeof(ipcregex), "semctl.*GETNCNT.*%d.*return,success", semid); check_audit(fds, ipcregex, pipefd); /* Destroy the semaphore set with ID = semid */ ATF_REQUIRE_EQ(0, semctl(semid, 0, IPC_RMID)); } ATF_TC_CLEANUP(semctl_getncnt_success, tc) { cleanup(); } ATF_TC_WITH_CLEANUP(semctl_getncnt_failure); ATF_TC_HEAD(semctl_getncnt_failure, tc) { atf_tc_set_md_var(tc, "descr", "Tests the audit of an unsuccessful " "semctl(2) call for GETNCNT command"); } ATF_TC_BODY(semctl_getncnt_failure, tc) { const char *regex = "semctl.*GETNCNT.*return,failure.*Invalid argument"; FILE *pipefd = setup(fds, auclass); ATF_REQUIRE_EQ(-1, semctl(-1, 0, GETNCNT)); check_audit(fds, regex, pipefd); } ATF_TC_CLEANUP(semctl_getncnt_failure, tc) { cleanup(); } ATF_TC_WITH_CLEANUP(semctl_getzcnt_success); ATF_TC_HEAD(semctl_getzcnt_success, tc) { atf_tc_set_md_var(tc, "descr", "Tests the audit of a successful " "semctl(2) call for GETZCNT command"); } ATF_TC_BODY(semctl_getzcnt_success, tc) { /* Create a semaphore set and obtain the set identifier */ ATF_REQUIRE((semid = semget(IPC_PRIVATE, 1, IPC_CREAT | S_IRUSR)) != -1); FILE *pipefd = setup(fds, auclass); ATF_REQUIRE_EQ(0, semctl(semid, 0, GETZCNT)); /* Check the presence of semaphore ID and GETZCNT in audit record */ snprintf(ipcregex, sizeof(ipcregex), "semctl.*GETZCNT.*%d.*return,success", semid); check_audit(fds, ipcregex, pipefd); /* Destroy the semaphore set with ID = semid */ ATF_REQUIRE_EQ(0, semctl(semid, 0, IPC_RMID)); } ATF_TC_CLEANUP(semctl_getzcnt_success, tc) { cleanup(); } ATF_TC_WITH_CLEANUP(semctl_getzcnt_failure); ATF_TC_HEAD(semctl_getzcnt_failure, tc) { atf_tc_set_md_var(tc, "descr", "Tests the audit of an unsuccessful " "semctl(2) call for GETZCNT command"); } ATF_TC_BODY(semctl_getzcnt_failure, tc) { const char *regex = "semctl.*GETZCNT.*return,failure.*Invalid argument"; FILE *pipefd = setup(fds, auclass); ATF_REQUIRE_EQ(-1, semctl(-1, 0, GETZCNT)); check_audit(fds, regex, pipefd); } ATF_TC_CLEANUP(semctl_getzcnt_failure, tc) { cleanup(); } ATF_TC_WITH_CLEANUP(semctl_getall_success); ATF_TC_HEAD(semctl_getall_success, tc) { atf_tc_set_md_var(tc, "descr", "Tests the audit of a successful " "semctl(2) call for GETALL command"); } ATF_TC_BODY(semctl_getall_success, tc) { /* Create a semaphore set and obtain the set identifier */ ATF_REQUIRE((semid = semget(IPC_PRIVATE, 1, IPC_CREAT | S_IRUSR)) != -1); semarg.array = semvals; FILE *pipefd = setup(fds, auclass); ATF_REQUIRE(semctl(semid, 0, GETALL, semarg) != -1); /* Check the presence of semaphore ID and GETALL in audit record */ snprintf(ipcregex, sizeof(ipcregex), "semctl.*GETALL.*%d.*return,success", semid); check_audit(fds, ipcregex, pipefd); /* Destroy the semaphore set with ID = semid */ ATF_REQUIRE_EQ(0, semctl(semid, 0, IPC_RMID)); } ATF_TC_CLEANUP(semctl_getall_success, tc) { cleanup(); } ATF_TC_WITH_CLEANUP(semctl_getall_failure); ATF_TC_HEAD(semctl_getall_failure, tc) { atf_tc_set_md_var(tc, "descr", "Tests the audit of an unsuccessful " "semctl(2) call for GETALL command"); } ATF_TC_BODY(semctl_getall_failure, tc) { const char *regex = "semctl.*GETALL.*return,failure : Invalid argument"; FILE *pipefd = setup(fds, auclass); ATF_REQUIRE_EQ(-1, semctl(-1, 0, GETALL, semarg)); check_audit(fds, regex, pipefd); } ATF_TC_CLEANUP(semctl_getall_failure, tc) { cleanup(); } ATF_TC_WITH_CLEANUP(semctl_setall_success); ATF_TC_HEAD(semctl_setall_success, tc) { atf_tc_set_md_var(tc, "descr", "Tests the audit of a successful " "semctl(2) call for SETALL command"); } ATF_TC_BODY(semctl_setall_success, tc) { /* Create a semaphore set and obtain the set identifier */ ATF_REQUIRE((semid = semget(IPC_PRIVATE, 1, IPC_CREAT | S_IRUSR)) != -1); semarg.array = semvals; /* Initialize semvals to be used with SETALL */ ATF_REQUIRE(semctl(semid, 0, GETALL, semarg) != -1); FILE *pipefd = setup(fds, auclass); ATF_REQUIRE_EQ(0, semctl(semid, 0, SETALL, semarg)); /* Check the presence of semaphore ID and SETALL in audit record */ snprintf(ipcregex, sizeof(ipcregex), "semctl.*SETALL.*%d.*return,success", semid); check_audit(fds, ipcregex, pipefd); /* Destroy the semaphore set with ID = semid */ ATF_REQUIRE_EQ(0, semctl(semid, 0, IPC_RMID)); } ATF_TC_CLEANUP(semctl_setall_success, tc) { cleanup(); } ATF_TC_WITH_CLEANUP(semctl_setall_failure); ATF_TC_HEAD(semctl_setall_failure, tc) { atf_tc_set_md_var(tc, "descr", "Tests the audit of an unsuccessful " "semctl(2) call for SETALL command"); } ATF_TC_BODY(semctl_setall_failure, tc) { const char *regex = "semctl.*SETALL.*return,failure : Invalid argument"; FILE *pipefd = setup(fds, auclass); ATF_REQUIRE_EQ(-1, semctl(-1, 0, SETALL, semarg)); check_audit(fds, regex, pipefd); } ATF_TC_CLEANUP(semctl_setall_failure, tc) { cleanup(); } ATF_TC_WITH_CLEANUP(semctl_stat_success); ATF_TC_HEAD(semctl_stat_success, tc) { atf_tc_set_md_var(tc, "descr", "Tests the audit of a successful " "semctl(2) call for IPC_STAT command"); } ATF_TC_BODY(semctl_stat_success, tc) { /* Create a semaphore set and obtain the set identifier */ ATF_REQUIRE((semid = semget(IPC_PRIVATE, 1, IPC_CREAT | S_IRUSR)) != -1); semarg.buf = &sembuff; FILE *pipefd = setup(fds, auclass); ATF_REQUIRE_EQ(0, semctl(semid, 0, IPC_STAT, semarg)); /* Check the presence of semaphore ID and IPC_STAT in audit record */ snprintf(ipcregex, sizeof(ipcregex), "semctl.*IPC_STAT.*%d.*return,success", semid); check_audit(fds, ipcregex, pipefd); /* Destroy the semaphore set with ID = semid */ ATF_REQUIRE_EQ(0, semctl(semid, 0, IPC_RMID)); } ATF_TC_CLEANUP(semctl_stat_success, tc) { cleanup(); } ATF_TC_WITH_CLEANUP(semctl_stat_failure); ATF_TC_HEAD(semctl_stat_failure, tc) { atf_tc_set_md_var(tc, "descr", "Tests the audit of an unsuccessful " "semctl(2) call for IPC_STAT command"); } ATF_TC_BODY(semctl_stat_failure, tc) { const char *regex = "semctl.*IPC_STAT.*return,fail.*Invalid argument"; FILE *pipefd = setup(fds, auclass); ATF_REQUIRE_EQ(-1, semctl(-1, 0, IPC_STAT, semarg)); check_audit(fds, regex, pipefd); } ATF_TC_CLEANUP(semctl_stat_failure, tc) { cleanup(); } ATF_TC_WITH_CLEANUP(semctl_set_success); ATF_TC_HEAD(semctl_set_success, tc) { atf_tc_set_md_var(tc, "descr", "Tests the audit of a successful " "semctl(2) call for IPC_SET command"); } ATF_TC_BODY(semctl_set_success, tc) { /* Create a semaphore set and obtain the set identifier */ ATF_REQUIRE((semid = semget(IPC_PRIVATE, 1, IPC_CREAT | S_IRUSR)) != -1); semarg.buf = &sembuff; /* Fill up the sembuff structure to be used with IPC_SET */ ATF_REQUIRE_EQ(0, semctl(semid, 0, IPC_STAT, semarg)); FILE *pipefd = setup(fds, auclass); ATF_REQUIRE_EQ(0, semctl(semid, 0, IPC_SET, semarg)); /* Check the presence of semaphore ID and IPC_SET in audit record */ snprintf(ipcregex, sizeof(ipcregex), "semctl.*IPC_SET.*%d.*return,success", semid); check_audit(fds, ipcregex, pipefd); /* Destroy the semaphore set with ID = semid */ ATF_REQUIRE_EQ(0, semctl(semid, 0, IPC_RMID)); } ATF_TC_CLEANUP(semctl_set_success, tc) { cleanup(); } ATF_TC_WITH_CLEANUP(semctl_set_failure); ATF_TC_HEAD(semctl_set_failure, tc) { atf_tc_set_md_var(tc, "descr", "Tests the audit of an unsuccessful " "semctl(2) call for IPC_SET command"); } ATF_TC_BODY(semctl_set_failure, tc) { /* Create a semaphore set and obtain the set identifier */ ATF_REQUIRE((semid = semget(IPC_PRIVATE, 1, IPC_CREAT | S_IRUSR)) != -1); semarg.buf = &sembuff; /* Fill up the sembuff structure to be used with IPC_SET */ ATF_REQUIRE_EQ(0, semctl(semid, 0, IPC_STAT, semarg)); const char *regex = "semctl.*IPC_SET.*return,failure.*Invalid argument"; FILE *pipefd = setup(fds, auclass); ATF_REQUIRE_EQ(-1, semctl(-1, 0, IPC_SET, semarg)); check_audit(fds, regex, pipefd); /* Destroy the semaphore set with ID = semid */ ATF_REQUIRE_EQ(0, semctl(semid, 0, IPC_RMID)); } ATF_TC_CLEANUP(semctl_set_failure, tc) { cleanup(); } ATF_TC_WITH_CLEANUP(semctl_rmid_success); ATF_TC_HEAD(semctl_rmid_success, tc) { atf_tc_set_md_var(tc, "descr", "Tests the audit of a successful " "semctl(2) call for IPC_RMID command"); } ATF_TC_BODY(semctl_rmid_success, tc) { /* Create a semaphore set and obtain the set identifier */ ATF_REQUIRE((semid = semget(IPC_PRIVATE, 1, IPC_CREAT | S_IRUSR)) != -1); FILE *pipefd = setup(fds, auclass); ATF_REQUIRE_EQ(0, semctl(semid, 0, IPC_RMID, semarg)); /* Check the presence of semaphore ID and IPC_RMID in audit record */ snprintf(ipcregex, sizeof(ipcregex), "semctl.*IPC_RMID.*%d.*return,success", semid); check_audit(fds, ipcregex, pipefd); } ATF_TC_CLEANUP(semctl_rmid_success, tc) { cleanup(); } ATF_TC_WITH_CLEANUP(semctl_rmid_failure); ATF_TC_HEAD(semctl_rmid_failure, tc) { atf_tc_set_md_var(tc, "descr", "Tests the audit of an unsuccessful " "semctl(2) call for IPC_RMID command"); } ATF_TC_BODY(semctl_rmid_failure, tc) { const char *regex = "semctl.*IPC_RMID.*return,fail.*Invalid argument"; FILE *pipefd = setup(fds, auclass); ATF_REQUIRE_EQ(-1, semctl(-1, 0, IPC_RMID, semarg)); check_audit(fds, regex, pipefd); } ATF_TC_CLEANUP(semctl_rmid_failure, tc) { cleanup(); } ATF_TC_WITH_CLEANUP(semctl_illegal_command); ATF_TC_HEAD(semctl_illegal_command, tc) { atf_tc_set_md_var(tc, "descr", "Tests the audit of an unsuccessful " "semctl(2) call for illegal cmd value"); } ATF_TC_BODY(semctl_illegal_command, tc) { /* Create a semaphore set and obtain the set identifier */ ATF_REQUIRE((semid = semget(IPC_PRIVATE, 1, IPC_CREAT | S_IRUSR)) != -1); const char *regex = "semctl.*illegal command.*fail.*Invalid argument"; FILE *pipefd = setup(fds, auclass); ATF_REQUIRE_EQ(-1, semctl(semid, 0, -1)); check_audit(fds, regex, pipefd); /* Destroy the semaphore set with ID = semid */ ATF_REQUIRE_EQ(0, semctl(semid, 0, IPC_RMID)); } ATF_TC_CLEANUP(semctl_illegal_command, tc) { cleanup(); } ATF_TC_WITH_CLEANUP(shm_open_success); ATF_TC_HEAD(shm_open_success, tc) { atf_tc_set_md_var(tc, "descr", "Tests the audit of a successful " "shm_open(2) call"); } ATF_TC_BODY(shm_open_success, tc) { pid = getpid(); snprintf(ipcregex, sizeof(ipcregex), "shm_open.*%d.*ret.*success", pid); FILE *pipefd = setup(fds, auclass); ATF_REQUIRE(shm_open(SHM_ANON, O_CREAT | O_TRUNC | O_RDWR, 0600) != -1); check_audit(fds, ipcregex, pipefd); } ATF_TC_CLEANUP(shm_open_success, tc) { cleanup(); } ATF_TC_WITH_CLEANUP(shm_open_failure); ATF_TC_HEAD(shm_open_failure, tc) { atf_tc_set_md_var(tc, "descr", "Tests the audit of an unsuccessful " "shm_open(2) call"); } ATF_TC_BODY(shm_open_failure, tc) { const char *regex = "shm_open.*fileforaudit.*return,failure"; FILE *pipefd = setup(fds, auclass); /* Failure reason: File does not exist */ ATF_REQUIRE_EQ(-1, shm_open(path, O_TRUNC | O_RDWR, 0600)); check_audit(fds, regex, pipefd); } ATF_TC_CLEANUP(shm_open_failure, tc) { cleanup(); } ATF_TC_WITH_CLEANUP(shm_unlink_success); ATF_TC_HEAD(shm_unlink_success, tc) { atf_tc_set_md_var(tc, "descr", "Tests the audit of a successful " "shm_unlink(2) call"); } ATF_TC_BODY(shm_unlink_success, tc) { /* Build an absolute path to a file in the test-case directory */ char dirpath[PATH_MAX]; ATF_REQUIRE(getcwd(dirpath, sizeof(dirpath)) != NULL); strlcat(dirpath, path, sizeof(dirpath)); ATF_REQUIRE(shm_open(dirpath, O_CREAT | O_TRUNC | O_RDWR, 0600) != -1); const char *regex = "shm_unlink.*fileforaudit.*return,success"; FILE *pipefd = setup(fds, auclass); ATF_REQUIRE_EQ(0, shm_unlink(dirpath)); check_audit(fds, regex, pipefd); } ATF_TC_CLEANUP(shm_unlink_success, tc) { cleanup(); } ATF_TC_WITH_CLEANUP(shm_unlink_failure); ATF_TC_HEAD(shm_unlink_failure, tc) { atf_tc_set_md_var(tc, "descr", "Tests the audit of an unsuccessful " "shm_unlink(2) call"); } ATF_TC_BODY(shm_unlink_failure, tc) { const char *regex = "shm_unlink.*fileforaudit.*return,failure"; FILE *pipefd = setup(fds, auclass); ATF_REQUIRE_EQ(-1, shm_unlink(path)); check_audit(fds, regex, pipefd); } ATF_TC_CLEANUP(shm_unlink_failure, tc) { cleanup(); } ATF_TC_WITH_CLEANUP(pipe_success); ATF_TC_HEAD(pipe_success, tc) { atf_tc_set_md_var(tc, "descr", "Tests the audit of a successful " "pipe(2) call"); } ATF_TC_BODY(pipe_success, tc) { int filedesc[2]; pid = getpid(); snprintf(ipcregex, sizeof(ipcregex), "pipe.*%d.*return,success", pid); FILE *pipefd = setup(fds, auclass); ATF_REQUIRE_EQ(0, pipe(filedesc)); check_audit(fds, ipcregex, pipefd); close(filedesc[0]); close(filedesc[1]); } ATF_TC_CLEANUP(pipe_success, tc) { cleanup(); } ATF_TC_WITH_CLEANUP(pipe_failure); ATF_TC_HEAD(pipe_failure, tc) { atf_tc_set_md_var(tc, "descr", "Tests the audit of an unsuccessful " "pipe(2) call"); } ATF_TC_BODY(pipe_failure, tc) { pid = getpid(); snprintf(ipcregex, sizeof(ipcregex), "pipe.*%d.*return.failure", pid); FILE *pipefd = setup(fds, auclass); ATF_REQUIRE_EQ(-1, pipe(NULL)); check_audit(fds, ipcregex, pipefd); } ATF_TC_CLEANUP(pipe_failure, tc) { cleanup(); } ATF_TC_WITH_CLEANUP(posix_openpt_success); ATF_TC_HEAD(posix_openpt_success, tc) { atf_tc_set_md_var(tc, "descr", "Tests the audit of a successful " "posix_openpt(2) call"); } ATF_TC_BODY(posix_openpt_success, tc) { int filedesc; FILE *pipefd = setup(fds, auclass); ATF_REQUIRE((filedesc = posix_openpt(O_RDWR | O_NOCTTY)) != -1); /* Check for the presence of filedesc in the audit record */ snprintf(ipcregex, sizeof(ipcregex), "posix_openpt.*return,success,%d", filedesc); check_audit(fds, ipcregex, pipefd); close(filedesc); } ATF_TC_CLEANUP(posix_openpt_success, tc) { cleanup(); } ATF_TC_WITH_CLEANUP(posix_openpt_failure); ATF_TC_HEAD(posix_openpt_failure, tc) { atf_tc_set_md_var(tc, "descr", "Tests the audit of an unsuccessful " "posix_openpt(2) call"); } ATF_TC_BODY(posix_openpt_failure, tc) { const char *regex = "posix_openpt.*return,failure : Invalid argument"; FILE *pipefd = setup(fds, auclass); ATF_REQUIRE_EQ(-1, posix_openpt(-1)); check_audit(fds, regex, pipefd); } ATF_TC_CLEANUP(posix_openpt_failure, tc) { cleanup(); } ATF_TP_ADD_TCS(tp) { ATF_TP_ADD_TC(tp, msgget_success); ATF_TP_ADD_TC(tp, msgget_failure); ATF_TP_ADD_TC(tp, msgsnd_success); ATF_TP_ADD_TC(tp, msgsnd_failure); ATF_TP_ADD_TC(tp, msgrcv_success); ATF_TP_ADD_TC(tp, msgrcv_failure); ATF_TP_ADD_TC(tp, msgctl_rmid_success); ATF_TP_ADD_TC(tp, msgctl_rmid_failure); ATF_TP_ADD_TC(tp, msgctl_stat_success); ATF_TP_ADD_TC(tp, msgctl_stat_failure); ATF_TP_ADD_TC(tp, msgctl_set_success); ATF_TP_ADD_TC(tp, msgctl_set_failure); ATF_TP_ADD_TC(tp, msgctl_illegal_command); ATF_TP_ADD_TC(tp, shmget_success); ATF_TP_ADD_TC(tp, shmget_failure); ATF_TP_ADD_TC(tp, shmat_success); ATF_TP_ADD_TC(tp, shmat_failure); ATF_TP_ADD_TC(tp, shmdt_success); ATF_TP_ADD_TC(tp, shmdt_failure); ATF_TP_ADD_TC(tp, shmctl_rmid_success); ATF_TP_ADD_TC(tp, shmctl_rmid_failure); ATF_TP_ADD_TC(tp, shmctl_stat_success); ATF_TP_ADD_TC(tp, shmctl_stat_failure); ATF_TP_ADD_TC(tp, shmctl_set_success); ATF_TP_ADD_TC(tp, shmctl_set_failure); ATF_TP_ADD_TC(tp, shmctl_illegal_command); ATF_TP_ADD_TC(tp, semget_success); ATF_TP_ADD_TC(tp, semget_failure); ATF_TP_ADD_TC(tp, semop_success); ATF_TP_ADD_TC(tp, semop_failure); ATF_TP_ADD_TC(tp, semctl_getval_success); ATF_TP_ADD_TC(tp, semctl_getval_failure); ATF_TP_ADD_TC(tp, semctl_setval_success); ATF_TP_ADD_TC(tp, semctl_setval_failure); ATF_TP_ADD_TC(tp, semctl_getpid_success); ATF_TP_ADD_TC(tp, semctl_getpid_failure); ATF_TP_ADD_TC(tp, semctl_getncnt_success); ATF_TP_ADD_TC(tp, semctl_getncnt_failure); ATF_TP_ADD_TC(tp, semctl_getzcnt_success); ATF_TP_ADD_TC(tp, semctl_getzcnt_failure); ATF_TP_ADD_TC(tp, semctl_getall_success); ATF_TP_ADD_TC(tp, semctl_getall_failure); ATF_TP_ADD_TC(tp, semctl_setall_success); ATF_TP_ADD_TC(tp, semctl_setall_failure); ATF_TP_ADD_TC(tp, semctl_stat_success); ATF_TP_ADD_TC(tp, semctl_stat_failure); ATF_TP_ADD_TC(tp, semctl_set_success); ATF_TP_ADD_TC(tp, semctl_set_failure); ATF_TP_ADD_TC(tp, semctl_rmid_success); ATF_TP_ADD_TC(tp, semctl_rmid_failure); ATF_TP_ADD_TC(tp, semctl_illegal_command); ATF_TP_ADD_TC(tp, shm_open_success); ATF_TP_ADD_TC(tp, shm_open_failure); ATF_TP_ADD_TC(tp, shm_unlink_success); ATF_TP_ADD_TC(tp, shm_unlink_failure); ATF_TP_ADD_TC(tp, pipe_success); ATF_TP_ADD_TC(tp, pipe_failure); ATF_TP_ADD_TC(tp, posix_openpt_success); ATF_TP_ADD_TC(tp, posix_openpt_failure); return (atf_no_error()); }