1 // SPDX-License-Identifier: GPL-2.0 2 3 /* 4 * Copyright (C) 2020 Google LLC. 5 */ 6 7 #include <test_progs.h> 8 #include <sys/mman.h> 9 #include <sys/wait.h> 10 #include <unistd.h> 11 #include <malloc.h> 12 #include <stdlib.h> 13 14 #include "lsm.skel.h" 15 16 char *CMD_ARGS[] = {"true", NULL}; 17 18 #define GET_PAGE_ADDR(ADDR, PAGE_SIZE) \ 19 (char *)(((unsigned long) (ADDR + PAGE_SIZE)) & ~(PAGE_SIZE-1)) 20 21 int stack_mprotect(void) 22 { 23 void *buf; 24 long sz; 25 int ret; 26 27 sz = sysconf(_SC_PAGESIZE); 28 if (sz < 0) 29 return sz; 30 31 buf = alloca(sz * 3); 32 ret = mprotect(GET_PAGE_ADDR(buf, sz), sz, 33 PROT_READ | PROT_WRITE | PROT_EXEC); 34 return ret; 35 } 36 37 int exec_cmd(int *monitored_pid) 38 { 39 int child_pid, child_status; 40 41 child_pid = fork(); 42 if (child_pid == 0) { 43 *monitored_pid = getpid(); 44 execvp(CMD_ARGS[0], CMD_ARGS); 45 return -EINVAL; 46 } else if (child_pid > 0) { 47 waitpid(child_pid, &child_status, 0); 48 return child_status; 49 } 50 51 return -EINVAL; 52 } 53 54 void test_test_lsm(void) 55 { 56 struct lsm *skel = NULL; 57 int err, duration = 0; 58 int buf = 1234; 59 60 skel = lsm__open_and_load(); 61 if (CHECK(!skel, "skel_load", "lsm skeleton failed\n")) 62 goto close_prog; 63 64 err = lsm__attach(skel); 65 if (CHECK(err, "attach", "lsm attach failed: %d\n", err)) 66 goto close_prog; 67 68 err = exec_cmd(&skel->bss->monitored_pid); 69 if (CHECK(err < 0, "exec_cmd", "err %d errno %d\n", err, errno)) 70 goto close_prog; 71 72 CHECK(skel->bss->bprm_count != 1, "bprm_count", "bprm_count = %d\n", 73 skel->bss->bprm_count); 74 75 skel->bss->monitored_pid = getpid(); 76 77 err = stack_mprotect(); 78 if (CHECK(errno != EPERM, "stack_mprotect", "want err=EPERM, got %d\n", 79 errno)) 80 goto close_prog; 81 82 CHECK(skel->bss->mprotect_count != 1, "mprotect_count", 83 "mprotect_count = %d\n", skel->bss->mprotect_count); 84 85 syscall(__NR_setdomainname, &buf, -2L); 86 syscall(__NR_setdomainname, 0, -3L); 87 syscall(__NR_setdomainname, ~0L, -4L); 88 89 CHECK(skel->bss->copy_test != 3, "copy_test", 90 "copy_test = %d\n", skel->bss->copy_test); 91 92 close_prog: 93 lsm__destroy(skel); 94 } 95