1 // SPDX-License-Identifier: GPL-2.0 2 3 /* 4 * Copyright (C) 2020 Google LLC. 5 */ 6 7 #include <stdio.h> 8 #include <stdlib.h> 9 #include <unistd.h> 10 #include <sys/wait.h> 11 #include <test_progs.h> 12 #include <linux/ring_buffer.h> 13 14 #include "ima.skel.h" 15 16 static int run_measured_process(const char *measured_dir, u32 *monitored_pid) 17 { 18 int child_pid, child_status; 19 20 child_pid = fork(); 21 if (child_pid == 0) { 22 *monitored_pid = getpid(); 23 execlp("./ima_setup.sh", "./ima_setup.sh", "run", measured_dir, 24 NULL); 25 exit(errno); 26 27 } else if (child_pid > 0) { 28 waitpid(child_pid, &child_status, 0); 29 return WEXITSTATUS(child_status); 30 } 31 32 return -EINVAL; 33 } 34 35 static u64 ima_hash_from_bpf; 36 37 static int process_sample(void *ctx, void *data, size_t len) 38 { 39 ima_hash_from_bpf = *((u64 *)data); 40 return 0; 41 } 42 43 void test_test_ima(void) 44 { 45 char measured_dir_template[] = "/tmp/ima_measuredXXXXXX"; 46 struct ring_buffer *ringbuf; 47 const char *measured_dir; 48 char cmd[256]; 49 50 int err, duration = 0; 51 struct ima *skel = NULL; 52 53 skel = ima__open_and_load(); 54 if (CHECK(!skel, "skel_load", "skeleton failed\n")) 55 goto close_prog; 56 57 ringbuf = ring_buffer__new(bpf_map__fd(skel->maps.ringbuf), 58 process_sample, NULL, NULL); 59 if (!ASSERT_OK_PTR(ringbuf, "ringbuf")) 60 goto close_prog; 61 62 err = ima__attach(skel); 63 if (CHECK(err, "attach", "attach failed: %d\n", err)) 64 goto close_prog; 65 66 measured_dir = mkdtemp(measured_dir_template); 67 if (CHECK(measured_dir == NULL, "mkdtemp", "err %d\n", errno)) 68 goto close_prog; 69 70 snprintf(cmd, sizeof(cmd), "./ima_setup.sh setup %s", measured_dir); 71 err = system(cmd); 72 if (CHECK(err, "failed to run command", "%s, errno = %d\n", cmd, errno)) 73 goto close_clean; 74 75 err = run_measured_process(measured_dir, &skel->bss->monitored_pid); 76 if (CHECK(err, "run_measured_process", "err = %d\n", err)) 77 goto close_clean; 78 79 err = ring_buffer__consume(ringbuf); 80 ASSERT_EQ(err, 1, "num_samples_or_err"); 81 ASSERT_NEQ(ima_hash_from_bpf, 0, "ima_hash"); 82 83 close_clean: 84 snprintf(cmd, sizeof(cmd), "./ima_setup.sh cleanup %s", measured_dir); 85 err = system(cmd); 86 CHECK(err, "failed to run command", "%s, errno = %d\n", cmd, errno); 87 close_prog: 88 ima__destroy(skel); 89 } 90