Greg Kroah-Hartman
598cf27219
Link: https://lore.kernel.org/r/20260217200002.683975158@linuxfoundation.org Tested-by: Florian Fainelli <florian.fainelli@broadcom.com> Tested-by: Takeshi Ogasawara <takeshi.ogasawara@futuring-girl.com> Tested-by: Peter Schneider <pschneider1968@googlemail.com> Tested-by: Jon Hunter <jonathanh@nvidia.com> Tested-by: Salvatore Bonaccorso <carnil@debian.org> Tested-by: Brett A C Sheffield <bacs@librecast.net> Tested-by: Mark Brown <broonie@kernel.org> Tested-by: Luna Jernberg <droidbittin@gmail.com> Tested-by: Ronald Warsow <rwarsow@gmx.de> Tested-by: Justin M. Forbes <jforbes@fedoraproject.org> Tested-by: Ron Economos <re@w6rz.net> Tested-by: Miguel Ojeda <ojeda@kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
163 lines
3.3 KiB
C
163 lines
3.3 KiB
C
// SPDX-License-Identifier: GPL-2.0
|
|
|
|
#include <linux/bpf.h>
|
|
#include <bpf/bpf_helpers.h>
|
|
#include "bpf_misc.h"
|
|
|
|
SEC("lsm/file_permission")
|
|
__description("lsm bpf prog with -4095~0 retval. test 1")
|
|
__success
|
|
__naked int errno_zero_retval_test1(void *ctx)
|
|
{
|
|
asm volatile (
|
|
"r0 = 0;"
|
|
"exit;"
|
|
::: __clobber_all);
|
|
}
|
|
|
|
SEC("lsm/file_permission")
|
|
__description("lsm bpf prog with -4095~0 retval. test 2")
|
|
__success
|
|
__naked int errno_zero_retval_test2(void *ctx)
|
|
{
|
|
asm volatile (
|
|
"r0 = -4095;"
|
|
"exit;"
|
|
::: __clobber_all);
|
|
}
|
|
|
|
SEC("lsm/file_mprotect")
|
|
__description("lsm bpf prog with -4095~0 retval. test 4")
|
|
__failure __msg("R0 has smin=-4096 smax=-4096 should have been in [-4095, 0]")
|
|
__naked int errno_zero_retval_test4(void *ctx)
|
|
{
|
|
asm volatile (
|
|
"r0 = -4096;"
|
|
"exit;"
|
|
::: __clobber_all);
|
|
}
|
|
|
|
SEC("lsm/file_mprotect")
|
|
__description("lsm bpf prog with -4095~0 retval. test 5")
|
|
__failure __msg("R0 has smin=4096 smax=4096 should have been in [-4095, 0]")
|
|
__naked int errno_zero_retval_test5(void *ctx)
|
|
{
|
|
asm volatile (
|
|
"r0 = 4096;"
|
|
"exit;"
|
|
::: __clobber_all);
|
|
}
|
|
|
|
SEC("lsm/file_mprotect")
|
|
__description("lsm bpf prog with -4095~0 retval. test 6")
|
|
__failure __msg("R0 has smin=1 smax=1 should have been in [-4095, 0]")
|
|
__naked int errno_zero_retval_test6(void *ctx)
|
|
{
|
|
asm volatile (
|
|
"r0 = 1;"
|
|
"exit;"
|
|
::: __clobber_all);
|
|
}
|
|
|
|
SEC("lsm/audit_rule_known")
|
|
__description("lsm bpf prog with bool retval. test 1")
|
|
__success
|
|
__naked int bool_retval_test1(void *ctx)
|
|
{
|
|
asm volatile (
|
|
"r0 = 1;"
|
|
"exit;"
|
|
::: __clobber_all);
|
|
}
|
|
|
|
SEC("lsm/audit_rule_known")
|
|
__description("lsm bpf prog with bool retval. test 2")
|
|
__success
|
|
__success
|
|
__naked int bool_retval_test2(void *ctx)
|
|
{
|
|
asm volatile (
|
|
"r0 = 0;"
|
|
"exit;"
|
|
::: __clobber_all);
|
|
}
|
|
|
|
SEC("lsm/audit_rule_known")
|
|
__description("lsm bpf prog with bool retval. test 3")
|
|
__failure __msg("R0 has smin=-1 smax=-1 should have been in [0, 1]")
|
|
__naked int bool_retval_test3(void *ctx)
|
|
{
|
|
asm volatile (
|
|
"r0 = -1;"
|
|
"exit;"
|
|
::: __clobber_all);
|
|
}
|
|
|
|
SEC("lsm/audit_rule_known")
|
|
__description("lsm bpf prog with bool retval. test 4")
|
|
__failure __msg("R0 has smin=2 smax=2 should have been in [0, 1]")
|
|
__naked int bool_retval_test4(void *ctx)
|
|
{
|
|
asm volatile (
|
|
"r0 = 2;"
|
|
"exit;"
|
|
::: __clobber_all);
|
|
}
|
|
|
|
SEC("lsm/file_free_security")
|
|
__success
|
|
__description("lsm bpf prog with void retval. test 1")
|
|
__naked int void_retval_test1(void *ctx)
|
|
{
|
|
asm volatile (
|
|
"r0 = -4096;"
|
|
"exit;"
|
|
::: __clobber_all);
|
|
}
|
|
|
|
SEC("lsm/file_free_security")
|
|
__success
|
|
__description("lsm bpf prog with void retval. test 2")
|
|
__naked int void_retval_test2(void *ctx)
|
|
{
|
|
asm volatile (
|
|
"r0 = 4096;"
|
|
"exit;"
|
|
::: __clobber_all);
|
|
}
|
|
|
|
SEC("lsm/getprocattr")
|
|
__description("lsm disabled hook: getprocattr")
|
|
__failure __msg("points to disabled hook")
|
|
__naked int disabled_hook_test1(void *ctx)
|
|
{
|
|
asm volatile (
|
|
"r0 = 0;"
|
|
"exit;"
|
|
::: __clobber_all);
|
|
}
|
|
|
|
SEC("lsm/setprocattr")
|
|
__description("lsm disabled hook: setprocattr")
|
|
__failure __msg("points to disabled hook")
|
|
__naked int disabled_hook_test2(void *ctx)
|
|
{
|
|
asm volatile (
|
|
"r0 = 0;"
|
|
"exit;"
|
|
::: __clobber_all);
|
|
}
|
|
|
|
SEC("lsm/ismaclabel")
|
|
__description("lsm disabled hook: ismaclabel")
|
|
__failure __msg("points to disabled hook")
|
|
__naked int disabled_hook_test3(void *ctx)
|
|
{
|
|
asm volatile (
|
|
"r0 = 0;"
|
|
"exit;"
|
|
::: __clobber_all);
|
|
}
|
|
|
|
char _license[] SEC("license") = "GPL";
|