Commit b481341e authored by Jeff Xu's avatar Jeff Xu Committed by Andrew Morton
Browse files

selftest: test system mappings are sealed 

Add sysmap_is_sealed.c to test system mappings are sealed.

Note: CONFIG_MSEAL_SYSTEM_MAPPINGS must be set, as indicated in
config file.

Link: https://lkml.kernel.org/r/20250305021711.3867874-8-jeffxu@google.com


Signed-off-by: default avatarJeff Xu <jeffxu@chromium.org>
Reviewed-by: default avatarLorenzo Stoakes <lorenzo.stoakes@oracle.com>
Reviewed-by: default avatarKees Cook <kees@kernel.org>
Cc: Adhemerval Zanella <adhemerval.zanella@linaro.org>
Cc: Alexander Mikhalitsyn <aleksandr.mikhalitsyn@canonical.com>
Cc: Alexey Dobriyan <adobriyan@gmail.com>
Cc: Andrei Vagin <avagin@gmail.com>
Cc: Anna-Maria Behnsen <anna-maria@linutronix.de>
Cc: Ard Biesheuvel <ardb@kernel.org>
Cc: Benjamin Berg <benjamin@sipsolutions.net>
Cc: Christoph Hellwig <hch@lst.de>
Cc: Dave Hansen <dave.hansen@linux.intel.com>
Cc: David Rientjes <rientjes@google.com>
Cc: David S. Miller <davem@davemloft.net>
Cc: Elliot Hughes <enh@google.com>
Cc: Florian Faineli <f.fainelli@gmail.com>
Cc: Greg Ungerer <gerg@kernel.org>
Cc: Guenter Roeck <groeck@chromium.org>
Cc: Heiko Carstens <hca@linux.ibm.com>
Cc: Helge Deller <deller@gmx.de>
Cc: Hyeonggon Yoo <42.hyeyoo@gmail.com>
Cc: Ingo Molnar <mingo@kernel.org>
Cc: Jann Horn <jannh@google.com>
Cc: Jason A. Donenfeld <jason@zx2c4.com>
Cc: Johannes Berg <johannes@sipsolutions.net>
Cc: Jorge Lucangeli Obes <jorgelo@chromium.org>
Cc: Liam R. Howlett <Liam.Howlett@oracle.com>
Cc: Linus Waleij <linus.walleij@linaro.org>
Cc: Mark Rutland <mark.rutland@arm.com>
Cc: Matthew Wilcow (Oracle) <willy@infradead.org>
Cc: Michael Ellerman <mpe@ellerman.id.au>
Cc: Michal Hocko <mhocko@suse.com>
Cc: Miguel Ojeda <ojeda@kernel.org>
Cc: Mike Rapoport <mike.rapoport@gmail.com>
Cc: Oleg Nesterov <oleg@redhat.com>
Cc: Pedro Falcato <pedro.falcato@gmail.com>
Cc: Peter Xu <peterx@redhat.com>
Cc: Randy Dunlap <rdunlap@infradead.org>
Cc: Stephen Röttger <sroettger@google.com>
Cc: Thomas Weißschuh <thomas.weissschuh@linutronix.de>
Cc: Vlastimil Babka <vbabka@suse.cz>
Signed-off-by: default avatarAndrew Morton <akpm@linux-foundation.org>
parent a8c15bb4

tools/testing/selftests/Makefile

+1 −0
Original line number Diff line number Diff line
@@ -62,6 +62,7 @@ TARGETS += mount 
TARGETS += mount_setattr

TARGETS += move_mount_set_group

TARGETS += mqueue

TARGETS += mseal_system_mappings

TARGETS += nci

TARGETS += net

TARGETS += net/af_unix

tools/testing/selftests/mseal_system_mappings/.gitignore

0 → 100644
+2 −0
Original line number Diff line number Diff line 
# SPDX-License-Identifier: GPL-2.0-only

sysmap_is_sealed

tools/testing/selftests/mseal_system_mappings/Makefile

0 → 100644
+6 −0
Original line number Diff line number Diff line 
# SPDX-License-Identifier: GPL-2.0-only

CFLAGS += -std=c99 -pthread -Wall $(KHDR_INCLUDES)



TEST_GEN_PROGS := sysmap_is_sealed



include ../lib.mk

tools/testing/selftests/mseal_system_mappings/config

0 → 100644
+1 −0
Original line number Diff line number Diff line 
CONFIG_MSEAL_SYSTEM_MAPPINGS=y

tools/testing/selftests/mseal_system_mappings/sysmap_is_sealed.c

0 → 100644
+119 −0
Original line number Diff line number Diff line 
// SPDX-License-Identifier: GPL-2.0-only

/*

 * test system mappings are sealed when

 * KCONFIG_MSEAL_SYSTEM_MAPPINGS=y

 */



#define _GNU_SOURCE

#include <stdio.h>

#include <errno.h>

#include <unistd.h>

#include <string.h>

#include <stdbool.h>



#include "../kselftest.h"

#include "../kselftest_harness.h"



#define VMFLAGS "VmFlags:"

#define MSEAL_FLAGS "sl"

#define MAX_LINE_LEN 512



bool has_mapping(char *name, FILE *maps)

{

	char line[MAX_LINE_LEN];



	while (fgets(line, sizeof(line), maps)) {

		if (strstr(line, name))

			return true;

	}



	return false;

}



bool mapping_is_sealed(char *name, FILE *maps)

{

	char line[MAX_LINE_LEN];



	while (fgets(line, sizeof(line), maps)) {

		if (!strncmp(line, VMFLAGS, strlen(VMFLAGS))) {

			if (strstr(line, MSEAL_FLAGS))

				return true;



			return false;

		}

	}



	return false;

}



FIXTURE(basic) {

	FILE *maps;

};



FIXTURE_SETUP(basic)

{

	self->maps = fopen("/proc/self/smaps", "r");

	if (!self->maps)

		SKIP(return, "Could not open /proc/self/smap, errno=%d",

			errno);

};



FIXTURE_TEARDOWN(basic)

{

	if (self->maps)

		fclose(self->maps);

};



FIXTURE_VARIANT(basic)

{

	char *name;

	bool sealed;

};



FIXTURE_VARIANT_ADD(basic, vdso) {

	.name = "[vdso]",

	.sealed = true,

};



FIXTURE_VARIANT_ADD(basic, vvar) {

	.name = "[vvar]",

	.sealed = true,

};



FIXTURE_VARIANT_ADD(basic, vvar_vclock) {

	.name = "[vvar_vclock]",

	.sealed = true,

};



FIXTURE_VARIANT_ADD(basic, sigpage) {

	.name = "[sigpage]",

	.sealed = true,

};



FIXTURE_VARIANT_ADD(basic, vectors) {

	.name = "[vectors]",

	.sealed = true,

};



FIXTURE_VARIANT_ADD(basic, uprobes) {

	.name = "[uprobes]",

	.sealed = true,

};



FIXTURE_VARIANT_ADD(basic, stack) {

	.name = "[stack]",

	.sealed = false,

};



TEST_F(basic, check_sealed)

{

	if (!has_mapping(variant->name, self->maps)) {

		SKIP(return, "could not find the mapping, %s",

			variant->name);

	}



	EXPECT_EQ(variant->sealed,

		mapping_is_sealed(variant->name, self->maps));

};



TEST_HARNESS_MAIN