From a71480603459a0c4be637d491bc14b663a3c1459 Mon Sep 17 00:00:00 2001
From: Philippe Pittoli <karchnu@karchnu.fr>
Date: Sat, 21 Dec 2024 16:03:08 +0100
Subject: [PATCH] Add `paintest` to test AppArmor profiles.
---
c/paintest.c | 195 +++++++++++++++++++++++++++++++++++++++++++++++++++
1 file changed, 195 insertions(+)
create mode 100644 c/paintest.c
diff --git a/c/paintest.c b/c/paintest.c
new file mode 100644
index 0000000..7a36e0e
--- /dev/null
+++ b/c/paintest.c
@@ -0,0 +1,195 @@
+#include <stdio.h>
+#include <fcntl.h> // open
+#include <unistd.h> // read write
+#include <stdlib.h>
+
+#include <string.h>
+#include <sys/socket.h>
+#include <sys/types.h>
+#include <sys/un.h>
+
+#define BUFFER_SIZE 1000
+
+/* The purpose of this application is to test AppArmor profiles.
+ Thus, this application can perform a few (limited) operations regarding files and network access.
+*/
+
+void read_file(char *filename) {
+ printf("read_file: %s\n", filename);
+ int fd = open(filename, O_RDONLY, NULL);
+ if (fd > 0) {
+ char buffer[BUFFER_SIZE];
+ size_t bytes = read(fd, buffer, BUFFER_SIZE);
+ printf("read %zu bytes\n", bytes);
+ close(fd);
+ }
+ else {
+ printf("impossible to read %s\n", filename);
+ }
+}
+
+void write_file(char *filename) {
+ printf("write_file: %s\n", filename);
+ int fd = open(filename, O_WRONLY | O_CREAT | O_APPEND, S_IRUSR | S_IWUSR);
+ if (fd > 0) {
+ char buffer[] = "hello that's meeeeee";
+ size_t bytes = write(fd, buffer, sizeof buffer);
+ printf("wrote %zu bytes\n", bytes);
+ close(fd);
+ }
+ else {
+ printf("impossible to write %s\n", filename);
+ }
+}
+
+void unixsock_server(char *address) {
+ printf("unixsock_server: %s\n", address);
+ int ret;
+ int connection_socket;
+ int data_socket;
+ ssize_t r, w;
+ struct sockaddr_un name;
+ char buffer[BUFFER_SIZE];
+
+ /* Create local socket. */
+ connection_socket = socket(AF_UNIX, SOCK_STREAM, 0);
+ if (connection_socket == -1) {
+ perror("socket");
+ exit(EXIT_FAILURE);
+ }
+ memset(&name, 0, sizeof(name));
+
+ /* Bind socket to socket name. */
+ name.sun_family = AF_UNIX;
+ strncpy(name.sun_path, address, sizeof(name.sun_path) - 1);
+ ret = bind(connection_socket, (const struct sockaddr *) &name, sizeof(name));
+ if (ret == -1) {
+ perror("bind");
+ exit(EXIT_FAILURE);
+ }
+
+ ret = listen(connection_socket, 20);
+ if (ret == -1) {
+ perror("listen");
+ exit(EXIT_FAILURE);
+ }
+
+ /* Wait for incoming connection. */
+ data_socket = accept(connection_socket, NULL, NULL);
+ if (data_socket == -1) {
+ perror("accept");
+ exit(EXIT_FAILURE);
+ }
+
+ /* Wait for a data packet. */
+ r = read(data_socket, buffer, sizeof(buffer));
+ if (r == -1) {
+ perror("read");
+ exit(EXIT_FAILURE);
+ }
+
+ /* Ensure buffer is 0-terminated. */
+ buffer[sizeof(buffer) - 1] = 0;
+
+ printf("received: %s\n", buffer);
+
+ /* Send result. */
+ sprintf(buffer, "hello back");
+ printf("sending: %s\n", buffer);
+ w = write(data_socket, buffer, sizeof(buffer));
+ if (w == -1) {
+ perror("write");
+ exit(EXIT_FAILURE);
+ }
+
+ /* Close socket. */
+ printf("closing\n");
+ close(data_socket);
+ close(connection_socket);
+
+ /* Unlink the socket. */
+ printf("unlink: %s\n", address);
+ unlink(address);
+}
+
+void unixsock_client(char *address) {
+ printf("unixsock_client: %s\n", address);
+
+ int ret;
+ int data_socket;
+ ssize_t r, w;
+ struct sockaddr_un addr;
+ char buffer[BUFFER_SIZE];
+
+ /* Create local socket. */
+ data_socket = socket(AF_UNIX, SOCK_STREAM, 0);
+ if (data_socket == -1) {
+ perror("socket");
+ exit(EXIT_FAILURE);
+ }
+ memset(&addr, 0, sizeof(addr));
+
+ /* Connect socket to socket address. */
+ addr.sun_family = AF_UNIX;
+ strncpy(addr.sun_path, address, sizeof(addr.sun_path) - 1);
+ printf("address is: %s\n", addr.sun_path);
+
+ ret = connect(data_socket, (const struct sockaddr *) &addr, sizeof(addr));
+ if (ret == -1) {
+ fprintf(stderr, "server is down\n");
+ exit(EXIT_FAILURE);
+ }
+
+ /* Send data. */
+ w = write(data_socket, "hello", 6);
+ if (w == -1) {
+ perror("write");
+ exit(EXIT_FAILURE);
+ }
+
+ /* Receive data. */
+ r = read(data_socket, buffer, sizeof(buffer));
+ if (r == -1) {
+ perror("read");
+ exit(EXIT_FAILURE);
+ }
+
+ /* Ensure buffer is 0-terminated. */
+ buffer[sizeof(buffer) - 1] = 0;
+
+ printf("received: %s\n", buffer);
+
+ /* Close socket. */
+ printf("closing\n");
+ close(data_socket);
+}
+
+void network(char *address) {
+ printf("network: %s\n", address);
+}
+
+void usage(void) {
+ printf("usage: paintest r /path/to/file w /path/to/file n example.com:8080 u /unix/socket/path\n");
+}
+
+int main(int argc, char **argv)
+{
+ int i = 1;
+ if(argc < 2) {
+ usage();
+ exit (EXIT_SUCCESS);
+ }
+
+ while (i != argc) {
+ //
+ if (memcmp(argv[i], "r", 1) == 0) { read_file(argv[i+1]); }
+ else if (memcmp(argv[i], "w", 1) == 0) { write_file(argv[i+1]); }
+ else if (memcmp(argv[i], "n", 1) == 0) { network(argv[i+1]); }
+ else if (memcmp(argv[i], "u", 1) == 0) { unixsock_client(argv[i+1]); }
+ else if (memcmp(argv[i], "U", 1) == 0) { unixsock_server(argv[i+1]); }
+ else if (memcmp(argv[i], "h", 1) == 0) { usage(); }
+ i += 2;
+ }
+
+ return 0;
+}