Add paintest to test AppArmor profiles.
This commit is contained in:
parent
9a241bb8ba
commit
a714806034
195
c/paintest.c
Normal file
195
c/paintest.c
Normal file
@ -0,0 +1,195 @@
|
||||
#include <stdio.h>
|
||||
#include <fcntl.h> // open
|
||||
#include <unistd.h> // read write
|
||||
#include <stdlib.h>
|
||||
|
||||
#include <string.h>
|
||||
#include <sys/socket.h>
|
||||
#include <sys/types.h>
|
||||
#include <sys/un.h>
|
||||
|
||||
#define BUFFER_SIZE 1000
|
||||
|
||||
/* The purpose of this application is to test AppArmor profiles.
|
||||
Thus, this application can perform a few (limited) operations regarding files and network access.
|
||||
*/
|
||||
|
||||
void read_file(char *filename) {
|
||||
printf("read_file: %s\n", filename);
|
||||
int fd = open(filename, O_RDONLY, NULL);
|
||||
if (fd > 0) {
|
||||
char buffer[BUFFER_SIZE];
|
||||
size_t bytes = read(fd, buffer, BUFFER_SIZE);
|
||||
printf("read %zu bytes\n", bytes);
|
||||
close(fd);
|
||||
}
|
||||
else {
|
||||
printf("impossible to read %s\n", filename);
|
||||
}
|
||||
}
|
||||
|
||||
void write_file(char *filename) {
|
||||
printf("write_file: %s\n", filename);
|
||||
int fd = open(filename, O_WRONLY | O_CREAT | O_APPEND, S_IRUSR | S_IWUSR);
|
||||
if (fd > 0) {
|
||||
char buffer[] = "hello that's meeeeee";
|
||||
size_t bytes = write(fd, buffer, sizeof buffer);
|
||||
printf("wrote %zu bytes\n", bytes);
|
||||
close(fd);
|
||||
}
|
||||
else {
|
||||
printf("impossible to write %s\n", filename);
|
||||
}
|
||||
}
|
||||
|
||||
void unixsock_server(char *address) {
|
||||
printf("unixsock_server: %s\n", address);
|
||||
int ret;
|
||||
int connection_socket;
|
||||
int data_socket;
|
||||
ssize_t r, w;
|
||||
struct sockaddr_un name;
|
||||
char buffer[BUFFER_SIZE];
|
||||
|
||||
/* Create local socket. */
|
||||
connection_socket = socket(AF_UNIX, SOCK_STREAM, 0);
|
||||
if (connection_socket == -1) {
|
||||
perror("socket");
|
||||
exit(EXIT_FAILURE);
|
||||
}
|
||||
memset(&name, 0, sizeof(name));
|
||||
|
||||
/* Bind socket to socket name. */
|
||||
name.sun_family = AF_UNIX;
|
||||
strncpy(name.sun_path, address, sizeof(name.sun_path) - 1);
|
||||
ret = bind(connection_socket, (const struct sockaddr *) &name, sizeof(name));
|
||||
if (ret == -1) {
|
||||
perror("bind");
|
||||
exit(EXIT_FAILURE);
|
||||
}
|
||||
|
||||
ret = listen(connection_socket, 20);
|
||||
if (ret == -1) {
|
||||
perror("listen");
|
||||
exit(EXIT_FAILURE);
|
||||
}
|
||||
|
||||
/* Wait for incoming connection. */
|
||||
data_socket = accept(connection_socket, NULL, NULL);
|
||||
if (data_socket == -1) {
|
||||
perror("accept");
|
||||
exit(EXIT_FAILURE);
|
||||
}
|
||||
|
||||
/* Wait for a data packet. */
|
||||
r = read(data_socket, buffer, sizeof(buffer));
|
||||
if (r == -1) {
|
||||
perror("read");
|
||||
exit(EXIT_FAILURE);
|
||||
}
|
||||
|
||||
/* Ensure buffer is 0-terminated. */
|
||||
buffer[sizeof(buffer) - 1] = 0;
|
||||
|
||||
printf("received: %s\n", buffer);
|
||||
|
||||
/* Send result. */
|
||||
sprintf(buffer, "hello back");
|
||||
printf("sending: %s\n", buffer);
|
||||
w = write(data_socket, buffer, sizeof(buffer));
|
||||
if (w == -1) {
|
||||
perror("write");
|
||||
exit(EXIT_FAILURE);
|
||||
}
|
||||
|
||||
/* Close socket. */
|
||||
printf("closing\n");
|
||||
close(data_socket);
|
||||
close(connection_socket);
|
||||
|
||||
/* Unlink the socket. */
|
||||
printf("unlink: %s\n", address);
|
||||
unlink(address);
|
||||
}
|
||||
|
||||
void unixsock_client(char *address) {
|
||||
printf("unixsock_client: %s\n", address);
|
||||
|
||||
int ret;
|
||||
int data_socket;
|
||||
ssize_t r, w;
|
||||
struct sockaddr_un addr;
|
||||
char buffer[BUFFER_SIZE];
|
||||
|
||||
/* Create local socket. */
|
||||
data_socket = socket(AF_UNIX, SOCK_STREAM, 0);
|
||||
if (data_socket == -1) {
|
||||
perror("socket");
|
||||
exit(EXIT_FAILURE);
|
||||
}
|
||||
memset(&addr, 0, sizeof(addr));
|
||||
|
||||
/* Connect socket to socket address. */
|
||||
addr.sun_family = AF_UNIX;
|
||||
strncpy(addr.sun_path, address, sizeof(addr.sun_path) - 1);
|
||||
printf("address is: %s\n", addr.sun_path);
|
||||
|
||||
ret = connect(data_socket, (const struct sockaddr *) &addr, sizeof(addr));
|
||||
if (ret == -1) {
|
||||
fprintf(stderr, "server is down\n");
|
||||
exit(EXIT_FAILURE);
|
||||
}
|
||||
|
||||
/* Send data. */
|
||||
w = write(data_socket, "hello", 6);
|
||||
if (w == -1) {
|
||||
perror("write");
|
||||
exit(EXIT_FAILURE);
|
||||
}
|
||||
|
||||
/* Receive data. */
|
||||
r = read(data_socket, buffer, sizeof(buffer));
|
||||
if (r == -1) {
|
||||
perror("read");
|
||||
exit(EXIT_FAILURE);
|
||||
}
|
||||
|
||||
/* Ensure buffer is 0-terminated. */
|
||||
buffer[sizeof(buffer) - 1] = 0;
|
||||
|
||||
printf("received: %s\n", buffer);
|
||||
|
||||
/* Close socket. */
|
||||
printf("closing\n");
|
||||
close(data_socket);
|
||||
}
|
||||
|
||||
void network(char *address) {
|
||||
printf("network: %s\n", address);
|
||||
}
|
||||
|
||||
void usage(void) {
|
||||
printf("usage: paintest r /path/to/file w /path/to/file n example.com:8080 u /unix/socket/path\n");
|
||||
}
|
||||
|
||||
int main(int argc, char **argv)
|
||||
{
|
||||
int i = 1;
|
||||
if(argc < 2) {
|
||||
usage();
|
||||
exit (EXIT_SUCCESS);
|
||||
}
|
||||
|
||||
while (i != argc) {
|
||||
//
|
||||
if (memcmp(argv[i], "r", 1) == 0) { read_file(argv[i+1]); }
|
||||
else if (memcmp(argv[i], "w", 1) == 0) { write_file(argv[i+1]); }
|
||||
else if (memcmp(argv[i], "n", 1) == 0) { network(argv[i+1]); }
|
||||
else if (memcmp(argv[i], "u", 1) == 0) { unixsock_client(argv[i+1]); }
|
||||
else if (memcmp(argv[i], "U", 1) == 0) { unixsock_server(argv[i+1]); }
|
||||
else if (memcmp(argv[i], "h", 1) == 0) { usage(); }
|
||||
i += 2;
|
||||
}
|
||||
|
||||
return 0;
|
||||
}
|
||||
Loading…
Reference in New Issue
Block a user