libseccomp/tests/12-sim-basic_masked_ops.c

   1 /**
   2  * Seccomp Library test program
   3  *
   4  * Copyright (c) 2012 Red Hat <pmoore@redhat.com>
   5  * Author: Paul Moore <paul@paul-moore.com>
   6  */
   7
   8 /*
   9  * This library is free software; you can redistribute it and/or modify it
  10  * under the terms of version 2.1 of the GNU Lesser General Public License as
  11  * published by the Free Software Foundation.
  12  *
  13  * This library is distributed in the hope that it will be useful, but WITHOUT
  14  * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
  15  * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU Lesser General Public License
  16  * for more details.
  17  *
  18  * You should have received a copy of the GNU Lesser General Public License
  19  * along with this library; if not, see <http://www.gnu.org/licenses>.
  20  */
  21
  22 #include <errno.h>
  23 #include <unistd.h>
  24
  25 #include <seccomp.h>
  26
  27 #include "util.h"
  28
  29 int main(int argc, char *argv[])
  30 {
  31         int rc;
  32         struct util_options opts;
  33         scmp_filter_ctx ctx = NULL;
  34
  35         rc = util_getopt(argc, argv, &opts);
  36         if (rc < 0)
  37                 goto out;
  38
  39         ctx = seccomp_init(SCMP_ACT_KILL);
  40         if (ctx == NULL)
  41                 return ENOMEM;
  42
  43         /* the syscall and argument numbers are all fake to make the test
  44          * simpler */
  45
  46         rc = seccomp_rule_add_exact(ctx, SCMP_ACT_ALLOW, 1000, 3,
  47                                     SCMP_A0(SCMP_CMP_EQ, 0),
  48                                     SCMP_A1(SCMP_CMP_EQ, 1),
  49                                     SCMP_A2(SCMP_CMP_EQ, 2));
  50         if (rc != 0)
  51                 goto out;
  52
  53         rc = seccomp_rule_add_exact(ctx, SCMP_ACT_ALLOW, 1000, 3,
  54                                     SCMP_A0(SCMP_CMP_EQ, 0),
  55                                     SCMP_A1(SCMP_CMP_MASKED_EQ, 0x00ff, 1),
  56                                     SCMP_A2(SCMP_CMP_EQ, 2));
  57         if (rc != 0)
  58                 goto out;
  59
  60         rc = seccomp_rule_add_exact(ctx, SCMP_ACT_ALLOW, 1000, 3,
  61                                     SCMP_A0(SCMP_CMP_EQ, 0),
  62                                     SCMP_A1(SCMP_CMP_MASKED_EQ, 0xffff, 11),
  63                                     SCMP_A2(SCMP_CMP_EQ, 2));
  64         if (rc != 0)
  65                 goto out;
  66
  67         rc = seccomp_rule_add_exact(ctx, SCMP_ACT_ALLOW, 1000, 3,
  68                                     SCMP_A0(SCMP_CMP_EQ, 0),
  69                                     SCMP_A1(SCMP_CMP_MASKED_EQ, 0xffff, 111),
  70                                     SCMP_A2(SCMP_CMP_EQ, 2));
  71         if (rc != 0)
  72                 goto out;
  73
  74         rc = seccomp_rule_add_exact(ctx, SCMP_ACT_ALLOW, 1000, 3,
  75                                     SCMP_A0(SCMP_CMP_EQ, 0),
  76                                     SCMP_A1(SCMP_CMP_MASKED_EQ, 0xff00, 1000),
  77                                     SCMP_A2(SCMP_CMP_EQ, 2));
  78         if (rc != 0)
  79                 goto out;
  80
  81         rc = util_filter_output(&opts, ctx);
  82         if (rc)
  83                 goto out;
  84
  85 out:
  86         seccomp_release(ctx);
  87         return (rc < 0 ? -rc : rc);
  88 }