FM / bpf

/usr/src/linux-headers-5.15.0-190/tools/testing/selftests/bpf/

/usr/src/linux-headers-5.15.0-190/tools/testing/selftests/bpf

Name	Size	Mode	Actions
benchs/	-	0755	rm
bpf_testmod/	-	0755	rm
ima_setup.sh	2515	0755	edit dl rm
Makefile	20073	0644	edit dl rm
Makefile.docs	2239	0644	edit dl rm
test_bpftool.sh	415	0755	edit dl rm
test_bpftool_build.sh	3707	0755	edit dl rm
test_bpftool_metadata.sh	1597	0755	edit dl rm
test_doc_build.sh	638	0755	edit dl rm
test_flow_dissector.sh	5243	0755	edit dl rm
test_ftrace.sh	701	0755	edit dl rm
test_kmod.sh	1318	0755	edit dl rm
test_lirc_mode2.sh	764	0755	edit dl rm
test_lwt_ip_encap.sh	14931	0755	edit dl rm
test_lwt_seg6local.sh	5808	0755	edit dl rm
test_skb_cgroup_id.sh	1349	0755	edit dl rm
test_sock_addr.sh	1105	0755	edit dl rm
test_tcp_check_syncookie.sh	1715	0755	edit dl rm
test_tc_edt.sh	2784	0755	edit dl rm
test_tc_tunnel.sh	7925	0755	edit dl rm
test_tunnel.sh	19320	0755	edit dl rm
test_xdping.sh	2077	0755	edit dl rm
test_xdp_meta.sh	1257	0755	edit dl rm
test_xdp_redirect.sh	1715	0755	edit dl rm
test_xdp_redirect_multi.sh	6321	0755	edit dl rm
test_xdp_veth.sh	3099	0755	edit dl rm
test_xdp_vlan.sh	5743	0755	edit dl rm
test_xdp_vlan_mode_generic.sh	186	0755	edit dl rm
test_xdp_vlan_mode_native.sh	180	0755	edit dl rm
test_xsk.sh	4430	0755	edit dl rm
vmtest.sh	9584	0755	edit dl rm
with_addr.sh	1296	0755	edit dl rm
with_tunnels.sh	693	0755	edit dl rm
xsk_prereqs.sh	1815	0755	edit dl rm

Edit: /usr/src/linux-headers-5.15.0-190/tools/testing/selftests/bpf/ima_setup.sh (2515B)

#!/bin/bash
# SPDX-License-Identifier: GPL-2.0

set -e
set -u
set -o pipefail

IMA_POLICY_FILE="/sys/kernel/security/ima/policy"
TEST_BINARY="/bin/true"
VERBOSE="${SELFTESTS_VERBOSE:=0}"
LOG_FILE="$(mktemp /tmp/ima_setup.XXXX.log)"

usage()
{
	echo "Usage: $0 <setup|cleanup|run> <existing_tmp_dir>"
	exit 1
}

ensure_mount_securityfs()
{
	local securityfs_dir=$(grep "securityfs" /proc/mounts | awk '{print $2}')

if [ -z "${securityfs_dir}" ]; then
		securityfs_dir=/sys/kernel/security
		mount -t securityfs security "${securityfs_dir}"
	fi

if [ ! -d "${securityfs_dir}" ]; then
		echo "${securityfs_dir}: securityfs is not mounted" && exit 1
	fi
}

setup()
{
	local tmp_dir="$1"
	local mount_img="${tmp_dir}/test.img"
	local mount_dir="${tmp_dir}/mnt"
	local copied_bin_path="${mount_dir}/$(basename ${TEST_BINARY})"
	mkdir -p ${mount_dir}

dd if=/dev/zero of="${mount_img}" bs=1M count=10

losetup -f "${mount_img}"
	local loop_device=$(losetup -a | grep ${mount_img:?} | cut -d ":" -f1)

mkfs.ext2 "${loop_device:?}"
	mount "${loop_device}" "${mount_dir}"

cp "${TEST_BINARY}" "${mount_dir}"
	local mount_uuid="$(blkid ${loop_device} | sed 's/.*UUID="$[^"]*$".*/\1/')"

ensure_mount_securityfs
	echo "measure func=BPRM_CHECK fsuuid=${mount_uuid}" > ${IMA_POLICY_FILE}
}

cleanup() {
	local tmp_dir="$1"
	local mount_img="${tmp_dir}/test.img"
	local mount_dir="${tmp_dir}/mnt"

local loop_devices=$(losetup -a | grep ${mount_img:?} | cut -d ":" -f1)

for loop_dev in "${loop_devices}"; do
		losetup -d $loop_dev
	done

umount ${mount_dir}
	rm -rf ${tmp_dir}
}

run()
{
	local tmp_dir="$1"
	local mount_dir="${tmp_dir}/mnt"
	local copied_bin_path="${mount_dir}/$(basename ${TEST_BINARY})"

exec "${copied_bin_path}"
}

catch()
{
	local exit_code="$1"
	local log_file="$2"

if [[ "${exit_code}" -ne 0 ]]; then
		cat "${log_file}" >&3
	fi

rm -f "${log_file}"
	exit ${exit_code}
}

main()
{
	[[ $# -ne 2 ]] && usage

local action="$1"
	local tmp_dir="$2"

[[ ! -d "${tmp_dir}" ]] && echo "Directory ${tmp_dir} doesn't exist" && exit 1

if [[ "${action}" == "setup" ]]; then
		setup "${tmp_dir}"
	elif [[ "${action}" == "cleanup" ]]; then
		cleanup "${tmp_dir}"
	elif [[ "${action}" == "run" ]]; then
		run "${tmp_dir}"
	else
		echo "Unknown action: ${action}"
		exit 1
	fi
}

trap 'catch "$?" "${LOG_FILE}"' EXIT

if [[ "${VERBOSE}" -eq 0 ]]; then
	# Save the stderr to 3 so that we can output back to
	# it incase of an error.
	exec 3>&2 1>"${LOG_FILE}" 2>&1
fi

main "$@"
rm -f "${LOG_FILE}"

#!/bin/bash # SPDX-License-Identifier: GPL-2.0 set -e set -u set -o pipefail IMA_POLICY_FILE="/sys/kernel/security/ima/policy" TEST_BINARY="/bin/true" VERBOSE="${SELFTESTS_VERBOSE:=0}" LOG_FILE="$(mktemp /tmp/ima_setup.XXXX.log)" usage() { echo "Usage: $0 " exit 1 } ensure_mount_securityfs() { local securityfs_dir=$(grep "securityfs" /proc/mounts | awk '{print $2}') if [ -z "${securityfs_dir}" ]; then securityfs_dir=/sys/kernel/security mount -t securityfs security "${securityfs_dir}" fi if [ ! -d "${securityfs_dir}" ]; then echo "${securityfs_dir}: securityfs is not mounted" && exit 1 fi } setup() { local tmp_dir="$1" local mount_img="${tmp_dir}/test.img" local mount_dir="${tmp_dir}/mnt" local copied_bin_path="${mount_dir}/$(basename ${TEST_BINARY})" mkdir -p ${mount_dir} dd if=/dev/zero of="${mount_img}" bs=1M count=10 losetup -f "${mount_img}" local loop_device=$(losetup -a | grep ${mount_img:?} | cut -d ":" -f1) mkfs.ext2 "${loop_device:?}" mount "${loop_device}" "${mount_dir}" cp "${TEST_BINARY}" "${mount_dir}" local mount_uuid="$(blkid ${loop_device} | sed 's/.*UUID="$[^"]*$".*/\1/')" ensure_mount_securityfs echo "measure func=BPRM_CHECK fsuuid=${mount_uuid}" > ${IMA_POLICY_FILE} } cleanup() { local tmp_dir="$1" local mount_img="${tmp_dir}/test.img" local mount_dir="${tmp_dir}/mnt" local loop_devices=$(losetup -a | grep ${mount_img:?} | cut -d ":" -f1) for loop_dev in "${loop_devices}"; do losetup -d $loop_dev done umount ${mount_dir} rm -rf ${tmp_dir} } run() { local tmp_dir="$1" local mount_dir="${tmp_dir}/mnt" local copied_bin_path="${mount_dir}/$(basename ${TEST_BINARY})" exec "${copied_bin_path}" } catch() { local exit_code="$1" local log_file="$2" if [[ "${exit_code}" -ne 0 ]]; then cat "${log_file}" >&3 fi rm -f "${log_file}" exit ${exit_code} } main() { [[ $# -ne 2 ]] && usage local action="$1" local tmp_dir="$2" [[ ! -d "${tmp_dir}" ]] && echo "Directory ${tmp_dir} doesn't exist" && exit 1 if [[ "${action}" == "setup" ]]; then setup "${tmp_dir}" elif [[ "${action}" == "cleanup" ]]; then cleanup "${tmp_dir}" elif [[ "${action}" == "run" ]]; then run "${tmp_dir}" else echo "Unknown action: ${action}" exit 1 fi } trap 'catch "$?" "${LOG_FILE}"' EXIT if [[ "${VERBOSE}" -eq 0 ]]; then # Save the stderr to 3 so that we can output back to # it incase of an error. exec 3>&2 1>"${LOG_FILE}" 2>&1 fi main "$@" rm -f "${LOG_FILE}"