tools/testing/selftests/bpf/prog_tests/test_ima.c

Source file repositories/reference/linux-study-clean/tools/testing/selftests/bpf/prog_tests/test_ima.c

File Facts

System
Linux kernel
Corpus path
tools/testing/selftests/bpf/prog_tests/test_ima.c
Extension
.c
Size
7147 bytes
Lines
241
Domain
Support Tooling And Documentation
Bucket
tools
Inferred role
Support Tooling And Documentation: implementation source
Status
source implementation candidate

Why This File Exists

Repository support layer: documentation, build tooling, samples, user-space helper tools, generated initramfs support, licenses, and validation utilities.

Dependency Surface

Detected Declarations

Annotated Snippet

// SPDX-License-Identifier: GPL-2.0

/*
 * Copyright (C) 2020 Google LLC.
 */

#include <stdio.h>
#include <stdlib.h>
#include <unistd.h>
#include <sys/wait.h>
#include <test_progs.h>
#include <linux/ring_buffer.h>

#include "ima.skel.h"

#define MAX_SAMPLES 4

static int _run_measured_process(const char *measured_dir, u32 *monitored_pid,
				 const char *cmd)
{
	int child_pid, child_status;

	child_pid = fork();
	if (child_pid == 0) {
		*monitored_pid = getpid();
		execlp("./ima_setup.sh", "./ima_setup.sh", cmd, measured_dir,
		       NULL);
		exit(errno);

	} else if (child_pid > 0) {
		waitpid(child_pid, &child_status, 0);
		return WEXITSTATUS(child_status);
	}

	return -EINVAL;
}

static int run_measured_process(const char *measured_dir, u32 *monitored_pid)
{
	return _run_measured_process(measured_dir, monitored_pid, "run");
}

static u64 ima_hash_from_bpf[MAX_SAMPLES];
static int ima_hash_from_bpf_idx;

static int process_sample(void *ctx, void *data, size_t len)
{
	if (ima_hash_from_bpf_idx >= MAX_SAMPLES)
		return -ENOSPC;

	ima_hash_from_bpf[ima_hash_from_bpf_idx++] = *((u64 *)data);
	return 0;
}

static void test_init(struct ima__bss *bss)
{
	ima_hash_from_bpf_idx = 0;

	bss->use_ima_file_hash = false;
	bss->enable_bprm_creds_for_exec = false;
	bss->enable_kernel_read_file = false;
	bss->test_deny = false;
}

void test_test_ima(void)
{
	char measured_dir_template[] = "/tmp/ima_measuredXXXXXX";
	struct ring_buffer *ringbuf = NULL;
	const char *measured_dir;
	u64 bin_true_sample;
	char cmd[256];

	int err, duration = 0, fresh_digest_idx = 0;
	struct ima *skel = NULL;

	skel = ima__open_and_load();
	if (CHECK(!skel, "skel_load", "skeleton failed\n"))
		goto close_prog;

	ringbuf = ring_buffer__new(bpf_map__fd(skel->maps.ringbuf),
				   process_sample, NULL, NULL);
	if (!ASSERT_OK_PTR(ringbuf, "ringbuf"))
		goto close_prog;

	err = ima__attach(skel);
	if (CHECK(err, "attach", "attach failed: %d\n", err))
		goto close_prog;

	measured_dir = mkdtemp(measured_dir_template);
	if (CHECK(measured_dir == NULL, "mkdtemp", "err %d\n", errno))

Annotation

Implementation Notes