#!/usr/bin/env python # # Seccomp Library test program # # Copyright (c) 2017 Red Hat # Author: Paul Moore # # # This library is free software; you can redistribute it and/or modify it # under the terms of version 2.1 of the GNU Lesser General Public License as # published by the Free Software Foundation. # # This library is distributed in the hope that it will be useful, but WITHOUT # ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or # FITNESS FOR A PARTICULAR PURPOSE. See the GNU Lesser General Public License # for more details. # # You should have received a copy of the GNU Lesser General Public License # along with this library; if not, see . # import argparse import sys import util from seccomp import * def test(args): f = SyscallFilter(KILL) f.add_rule_exactly(ALLOW, 1001, Arg(0, EQ, 1), Arg(1, EQ, 2)) f.add_rule_exactly(ALLOW, 1001) f.add_rule_exactly(ALLOW, 1002, Arg(0, EQ, 1)) f.add_rule_exactly(ALLOW, 1002, Arg(0, EQ, 1)) f.add_rule_exactly(ALLOW, 1003, Arg(0, NE, 1)) f.add_rule_exactly(TRAP, 1003, Arg(0, EQ, 1)) f.add_rule_exactly(ALLOW, 1004, Arg(0, EQ, 1)) f.add_rule_exactly(TRAP, 1004, Arg(0, NE, 1)) f.add_rule_exactly(ALLOW, 1005, Arg(0, EQ, 1)) f.add_rule_exactly(ALLOW, 1005, Arg(0, NE, 1)) f.add_rule_exactly(ALLOW, 1006, Arg(0, EQ, 1), Arg(1, EQ, 2)) f.add_rule_exactly(ALLOW, 1006, Arg(0, EQ, 1)) f.add_rule_exactly(ALLOW, 1007, Arg(0, EQ, 1)) f.add_rule_exactly(ALLOW, 1007, Arg(0, EQ, 1), Arg(1, EQ, 2)) f.add_rule_exactly(ALLOW, 1008, Arg(0, NE, 1), Arg(1, NE, 2)) f.add_rule_exactly(ALLOW, 1008, Arg(0, NE, 1), Arg(1, NE, 2), Arg(2, NE, 3)) f.add_rule_exactly(ALLOW, 1009, Arg(0, EQ, 1), Arg(1, NE, 2)) f.add_rule_exactly(ALLOW, 1009, Arg(0, NE, 1)) f.add_rule_exactly(ALLOW, 1010, Arg(0, NE, 1), Arg(1, EQ, 2)) f.add_rule_exactly(ALLOW, 1010, Arg(0, EQ, 1)) f.add_rule_exactly(ALLOW, 1011, Arg(0, EQ, 1)) f.add_rule_exactly(ALLOW, 1011, Arg(0, NE, 1), Arg(2, EQ, 1)) f.add_rule_exactly(ALLOW, 1012, Arg(0, MASKED_EQ, 0x0000, 1)) f.add_rule_exactly(ALLOW, 1013, Arg(0, NE, 1), Arg(2, NE, 2)) f.add_rule_exactly(ALLOW, 1013, Arg(0, LT, 1), Arg(2, NE, 2)) f.add_rule_exactly(ALLOW, 1014, Arg(3, GE, 1), Arg(4, GE, 2)) f.add_rule_exactly(ALLOW, 1014, Arg(0, NE, 1), Arg(1, NE, 2)) f.add_rule_exactly(ALLOW, 1015, Arg(0, EQ, 4), Arg(1, EQ, 1)) f.add_rule_exactly(ALLOW, 1015, Arg(0, EQ, 4), Arg(1, NE, 1)) return f args = util.get_opt() ctx = test(args) util.filter_output(args, ctx) # kate: syntax python; # kate: indent-mode python; space-indent on; indent-width 4; mixedindent off;