1 # $NetBSD: t_tcpip.sh,v 1.18 2016/08/13 11:22:11 christos Exp $ 2 # 3 # Copyright (c) 2011 The NetBSD Foundation, Inc. 4 # All rights reserved. 5 # 6 # Redistribution and use in source and binary forms, with or without 7 # modification, are permitted provided that the following conditions 8 # are met: 9 # 1. Redistributions of source code must retain the above copyright 10 # notice, this list of conditions and the following disclaimer. 11 # 2. Redistributions in binary form must reproduce the above copyright 12 # notice, this list of conditions and the following disclaimer in the 13 # documentation and/or other materials provided with the distribution. 14 # 15 # THIS SOFTWARE IS PROVIDED BY THE NETBSD FOUNDATION, INC. AND CONTRIBUTORS 16 # ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED 17 # TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR 18 # PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE FOUNDATION OR CONTRIBUTORS 19 # BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR 20 # CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF 21 # SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS 22 # INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN 23 # CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) 24 # ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE 25 # POSSIBILITY OF SUCH DAMAGE. 26 # 27 28 rumpnetlibs="-lrumpnet -lrumpnet_net -lrumpnet_netinet6 -lrumpnet_netinet" 29 rumpnetsrv="rump_server $rumpnetlibs -lrumpdev" 30 export RUMP_SERVER=unix://csock 31 32 atf_test_case http cleanup 33 http_head() 34 { 35 atf_set "descr" "Start hijacked httpd and get webpage from it" 36 } 37 38 http_body() 39 { 40 41 atf_check -s exit:0 ${rumpnetsrv} ${RUMP_SERVER} 42 43 # start bozo in daemon mode 44 atf_check -s exit:0 env LD_PRELOAD=/usr/lib/librumphijack.so \ 45 /usr/libexec/httpd -P ./httpd.pid -b -s $(atf_get_srcdir) 46 47 atf_check -s exit:0 -o file:"$(atf_get_srcdir)/netstat.expout" \ 48 rump.netstat -a 49 50 # get the webpage 51 atf_check -s exit:0 env LD_PRELOAD=/usr/lib/librumphijack.so \ 52 $(atf_get_srcdir)/h_netget 127.0.0.1 80 webfile 53 54 # check that we got what we wanted 55 atf_check -o match:'HTTP/1.0 200 OK' cat webfile 56 atf_check -o match:'Content-Length: 95' cat webfile 57 blank_line_re="$(printf '^\r$')" # matches a line with only <CR><LF> 58 atf_check -o file:"$(atf_get_srcdir)/index.html" \ 59 sed -n "1,/${blank_line_re}/!p" webfile 60 } 61 62 http_cleanup() 63 { 64 if [ -f httpd.pid ]; then 65 kill -9 "$(cat httpd.pid)" 66 rm -f httpd.pid 67 fi 68 69 rump.halt 70 } 71 72 # 73 # Starts a SSH server and sets up the client to access it. 74 # Authentication is allowed and done using an RSA key exclusively, which 75 # is generated on the fly as part of the test case. 76 # XXX: Ideally, all the tests in this test program should be able to share 77 # the generated key, because creating it can be a very slow process on some 78 # machines. 79 # 80 # XXX2: copypasted from jmmv's sshd thingamob in the psshfs test. 81 # ideally code (and keys, like jmmv notes above) could be shared 82 # 83 start_sshd() { 84 echo "Setting up SSH server configuration" 85 sed -e "s,@SRCDIR@,$(atf_get_srcdir),g" -e "s,@WORKDIR@,$(pwd),g" \ 86 $(atf_get_srcdir)/sshd_config.in >sshd_config || \ 87 atf_fail "Failed to create sshd_config" 88 atf_check -s ignore -o empty -e ignore \ 89 cp $(atf_get_srcdir)/ssh_host_key . 90 atf_check -s ignore -o empty -e ignore \ 91 cp $(atf_get_srcdir)/ssh_host_key.pub . 92 atf_check -s eq:0 -o empty -e empty chmod 400 ssh_host_key 93 atf_check -s eq:0 -o empty -e empty chmod 444 ssh_host_key.pub 94 95 env LD_PRELOAD=/usr/lib/librumphijack.so \ 96 /usr/sbin/sshd -e -f ./sshd_config 97 while [ ! -f sshd.pid ]; do 98 sleep 0.01 99 done 100 echo "SSH server started (pid $(cat sshd.pid))" 101 102 echo "Setting up SSH client configuration" 103 atf_check -s eq:0 -o empty -e empty \ 104 ssh-keygen -f ssh_user_key -t rsa -b 1024 -N "" -q 105 atf_check -s eq:0 -o empty -e empty \ 106 cp ssh_user_key.pub authorized_keys 107 echo "127.0.0.1,localhost,::1 " \ 108 "$(cat $(atf_get_srcdir)/ssh_host_key.pub)" >known_hosts || \ 109 atf_fail "Failed to create known_hosts" 110 atf_check -s eq:0 -o empty -e empty chmod 600 authorized_keys 111 sed -e "s,@SRCDIR@,$(atf_get_srcdir),g" -e "s,@WORKDIR@,$(pwd),g" \ 112 $(atf_get_srcdir)/ssh_config.in >ssh_config || \ 113 atf_fail "Failed to create ssh_config" 114 115 echo "sshd running" 116 } 117 118 atf_test_case ssh cleanup 119 ssh_head() 120 { 121 atf_set "descr" "Test that hijacked ssh/sshd works" 122 } 123 124 ssh_body() 125 { 126 atf_expect_fail "PR lib/50174" 127 128 atf_check -s exit:0 ${rumpnetsrv} ${RUMP_SERVER} 129 # make sure clients die after we nuke the server 130 export RUMPHIJACK_RETRYCONNECT='die' 131 132 start_sshd 133 134 # create some sort of directory for us to "ls" 135 mkdir testdir 136 cd testdir 137 jot 11 | xargs touch 138 jot 11 12 | xargs mkdir 139 cd .. 140 141 atf_check -s exit:0 -o save:ssh.out \ 142 env LD_PRELOAD=/usr/lib/librumphijack.so \ 143 ssh -T -F ssh_config 127.0.0.1 env BLOCKSIZE=512 \ 144 ls -li $(pwd)/testdir 145 atf_check -s exit:0 -o file:ssh.out env BLOCKSIZE=512 \ 146 ls -li $(pwd)/testdir 147 } 148 149 ssh_cleanup() 150 { 151 rump.halt 152 # sshd dies due to RUMPHIJACK_RETRYCONNECT=1d6 153 } 154 155 test_nfs() 156 { 157 158 magicstr='wind in my hair' 159 # create ffs file system we'll be serving from 160 atf_check -s exit:0 -o ignore newfs -F -s 10000 ffs.img 161 162 # start nfs kernel server. this is a mouthful 163 export RUMP_SERVER=unix://serversock 164 atf_check -s exit:0 rump_server $* ${RUMP_SERVER} 165 166 atf_check -s exit:0 rump.ifconfig shmif0 create 167 atf_check -s exit:0 rump.ifconfig shmif0 linkstr shmbus 168 atf_check -s exit:0 rump.ifconfig shmif0 inet 10.1.1.1 169 170 export RUMPHIJACK_RETRYCONNECT=die 171 export LD_PRELOAD=/usr/lib/librumphijack.so 172 173 atf_check -s exit:0 mkdir -p /rump/var/run 174 atf_check -s exit:0 mkdir -p /rump/var/db 175 atf_check -s exit:0 touch /rump/var/db/mountdtab 176 atf_check -s exit:0 mkdir /rump/etc 177 atf_check -s exit:0 mkdir /rump/export 178 179 atf_check -s exit:0 -x \ 180 'echo "/export -noresvport -noresvmnt 10.1.1.100" | \ 181 dd of=/rump/etc/exports 2> /dev/null' 182 183 atf_check -s exit:0 rump.sysctl -q -w kern.module.autoload=1 184 185 atf_check -s exit:0 -e ignore mount_ffs /dk /rump/export 186 atf_check -s exit:0 -x "echo ${magicstr} > /rump/export/im_alive" 187 188 # start rpcbind. we want /var/run/rpcbind.sock 189 export RUMPHIJACK='blanket=/var/run,socket=all' 190 atf_check -s exit:0 rpcbind 191 192 # ok, then we want mountd in the similar fashion 193 export RUMPHIJACK='blanket=/var/run:/var/db:/export,socket=all,path=/rump,vfs=all' 194 atf_check -s exit:0 mountd /rump/etc/exports 195 196 # finally, le nfschuck 197 export RUMPHIJACK='blanket=/var/run,socket=all,vfs=all' 198 atf_check -s exit:0 nfsd 199 200 # 201 # now, time for the client server and associated madness. 202 # 203 204 export RUMP_SERVER=unix://clientsock 205 unset RUMPHIJACK 206 unset LD_PRELOAD 207 208 # at least the kernel server is easier 209 atf_check -s exit:0 rump_server -lrumpvfs -lrumpnet -lrumpdev \ 210 -lrumpnet_net -lrumpnet_netinet -lrumpnet_shmif -lrumpfs_nfs\ 211 ${RUMP_SERVER} 212 213 atf_check -s exit:0 rump.ifconfig shmif0 create 214 atf_check -s exit:0 rump.ifconfig shmif0 linkstr shmbus 215 atf_check -s exit:0 rump.ifconfig shmif0 inet 10.1.1.100 216 217 export LD_PRELOAD=/usr/lib/librumphijack.so 218 219 atf_check -s exit:0 mkdir /rump/mnt 220 atf_check -s exit:0 mount_nfs 10.1.1.1:/export /rump/mnt 221 222 atf_check -s exit:0 -o inline:"${magicstr}\n" cat /rump/mnt/im_alive 223 atf_check -s exit:0 -o match:'.*im_alive$' ls -l /rump/mnt/im_alive 224 } 225 226 227 atf_test_case nfs cleanup 228 nfs_head() 229 { 230 atf_set "descr" "Test hijacked nfsd and mount_nfs" 231 } 232 233 nfs_body() 234 { 235 test_nfs -lrumpvfs -lrumpdev -lrumpnet -lrumpnet_net \ 236 -lrumpnet_netinet -lrumpnet_local -lrumpnet_shmif -lrumpdev \ 237 -lrumpdev_disk -lrumpfs_ffs -lrumpfs_nfs -lrumpfs_nfsserver \ 238 -d key=/dk,hostpath=ffs.img,size=host 239 } 240 241 nfs_cleanup() 242 { 243 RUMP_SERVER=unix://serversock rump.halt 2> /dev/null 244 RUMP_SERVER=unix://clientsock rump.halt 2> /dev/null 245 : 246 } 247 248 atf_test_case nfs_autoload cleanup 249 nfs_autoload_head() 250 { 251 atf_set "descr" "Test hijacked nfsd with autoload from /stand" 252 } 253 254 nfs_autoload_body() 255 { 256 [ `uname -m` = "i386" ] || atf_skip "test currently valid only on i386" 257 test_nfs -lrumpvfs -lrumpdev -lrumpnet -lrumpnet_net \ 258 -lrumpnet_netinet -lrumpnet_local -lrumpnet_shmif -lrumpdev \ 259 -lrumpdev_disk -d key=/dk,hostpath=ffs.img,size=host 260 } 261 262 nfs_autoload_cleanup() 263 { 264 nfs_cleanup 265 } 266 267 atf_init_test_cases() 268 { 269 atf_add_test_case http 270 atf_add_test_case ssh 271 atf_add_test_case nfs 272 atf_add_test_case nfs_autoload 273 } 274