libseccomp/tests/21-live-basic_allow.py

   1 #!/usr/bin/env python
   2
   3 #
   4 # Seccomp Library test program
   5 #
   6 # Copyright (c) 2013 Red Hat <pmoore@redhat.com>
   7 # Author: Paul Moore <paul@paul-moore.com>
   8 #
   9
  10 #
  11 # This library is free software; you can redistribute it and/or modify it
  12 # under the terms of version 2.1 of the GNU Lesser General Public License as
  13 # published by the Free Software Foundation.
  14 #
  15 # This library is distributed in the hope that it will be useful, but WITHOUT
  16 # ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
  17 # FITNESS FOR A PARTICULAR PURPOSE.  See the GNU Lesser General Public License
  18 # for more details.
  19 #
  20 # You should have received a copy of the GNU Lesser General Public License
  21 # along with this library; if not, see <http://www.gnu.org/licenses>.
  22 #
  23
  24 import argparse
  25 import sys
  26
  27 import util
  28
  29 from seccomp import *
  30
  31 def test():
  32     action = util.parse_action(sys.argv[1])
  33     if not action == ALLOW:
  34         quit(1)
  35     util.install_trap()
  36     f = SyscallFilter(TRAP)
  37     # NOTE: additional syscalls required for python
  38     f.add_rule(ALLOW, "stat")
  39     f.add_rule(ALLOW, "fstat")
  40     f.add_rule(ALLOW, "open")
  41     f.add_rule(ALLOW, "openat")
  42     f.add_rule(ALLOW, "mmap")
  43     f.add_rule(ALLOW, "munmap")
  44     f.add_rule(ALLOW, "read")
  45     f.add_rule(ALLOW, "write")
  46     f.add_rule(ALLOW, "close")
  47     f.add_rule(ALLOW, "rt_sigaction")
  48     f.add_rule(ALLOW, "rt_sigreturn")
  49     f.add_rule(ALLOW, "sigreturn")
  50     f.add_rule(ALLOW, "brk")
  51     f.add_rule(ALLOW, "exit_group")
  52     f.load()
  53     try:
  54         util.write_file("/dev/null")
  55     except OSError as ex:
  56         quit(ex.errno)
  57     quit(160)
  58
  59 test()
  60
  61 # kate: syntax python;
  62 # kate: indent-mode python; space-indent on; indent-width 4; mixedindent off;