OpenCoverage

sandbox-seccomp-filter.c

Absolute File Name:

/home/opencoverage/opencoverage/guest-scripts/openssh/src/sandbox-seccomp-filter.c

Switch to Source code

Preprocessed file

Line Source Count

1 -

2 -

3 -

4 -

5 -

6 -

7 -

8 -

9 -

10 -

11 -

12 -

13 -

14 -

15 static const struct sock_filter preauth_insns[] = { -

16 -

17 -

18 { (unsigned short)(0x00 -

19 + -

20 0x00 -

21 + -

22 0x20), 0, 0, __builtin_offsetof ( -

23 struct seccomp_data -

24 , -

25 arch -

26 ) } -

27 -

28 , -

29 -

30 { (unsigned short)(0x05 -

31 + -

32 0x10 -

33 + -

34 0x00), -

35 1 -

36 , -

37 0 -

38 , (62|0x80000000|0x40000000) } -

39 , -

40 -

41 { (unsigned short)(0x06 -

42 + -

43 0x00), 0, 0, 0x00000000U } -

44 , -

45 -

46 -

47 { (unsigned short)(0x00 -

48 + -

49 0x00 -

50 + -

51 0x20), 0, 0, __builtin_offsetof ( -

52 struct seccomp_data -

53 , -

54 nr -

55 ) } -

56 -

57 , -

58 -

59 -

60 -

61 -

62 { (unsigned short)(0x05 -

63 + -

64 0x10 -

65 + -

66 0x00), -

67 0 -

68 , -

69 1 -

70 , -

71 ( -

72 6 -

73 ) -

74 } -

75 , -

76 { (unsigned short)(0x06 -

77 + -

78 0x00), 0, 0, 0x00050000U -

79 |( -

80 13 -

81 ) -

82 } -

83 , -

84 -

85 -

86 -

87 -

88 -

89 -

90 { (unsigned short)(0x05 -

91 + -

92 0x10 -

93 + -

94 0x00), -

95 0 -

96 , -

97 1 -

98 , -

99 ( -

100 5 -

101 ) -

102 } -

103 , -

104 { (unsigned short)(0x06 -

105 + -

106 0x00), 0, 0, 0x00050000U -

107 |( -

108 13 -

109 ) -

110 } -

111 , -

112 -

113 -

114 -

115 -

116 -

117 -

118 { (unsigned short)(0x05 -

119 + -

120 0x10 -

121 + -

122 0x00), -

123 0 -

124 , -

125 1 -

126 , -

127 ( -

128 2 -

129 ) -

130 } -

131 , -

132 { (unsigned short)(0x06 -

133 + -

134 0x00), 0, 0, 0x00050000U -

135 |( -

136 13 -

137 ) -

138 } -

139 , -

140 -

141 -

142 -

143 { (unsigned short)(0x05 -

144 + -

145 0x10 -

146 + -

147 0x00), -

148 0 -

149 , -

150 1 -

151 , -

152 ( -

153 257 -

154 ) -

155 } -

156 , -

157 { (unsigned short)(0x06 -

158 + -

159 0x00), 0, 0, 0x00050000U -

160 |( -

161 13 -

162 ) -

163 } -

164 , -

165 -

166 -

167 -

168 { (unsigned short)(0x05 -

169 + -

170 0x10 -

171 + -

172 0x00), -

173 0 -

174 , -

175 1 -

176 , -

177 ( -

178 262 -

179 ) -

180 } -

181 , -

182 { (unsigned short)(0x06 -

183 + -

184 0x00), 0, 0, 0x00050000U -

185 |( -

186 13 -

187 ) -

188 } -

189 , -

190 -

191 -

192 -

193 { (unsigned short)(0x05 -

194 + -

195 0x10 -

196 + -

197 0x00), -

198 0 -

199 , -

200 1 -

201 , -

202 ( -

203 4 -

204 ) -

205 } -

206 , -

207 { (unsigned short)(0x06 -

208 + -

209 0x00), 0, 0, 0x00050000U -

210 |( -

211 13 -

212 ) -

213 } -

214 , -

215 -

216 -

217 -

218 -

219 -

220 -

221 -

222 -

223 { (unsigned short)(0x05 -

224 + -

225 0x10 -

226 + -

227 0x00), -

228 0 -

229 , -

230 1 -

231 , -

232 ( -

233 12 -

234 ) -

235 } -

236 , -

237 { (unsigned short)(0x06 -

238 + -

239 0x00), 0, 0, 0x7fff0000U } -

240 , -

241 -

242 -

243 -

244 { (unsigned short)(0x05 -

245 + -

246 0x10 -

247 + -

248 0x00), -

249 0 -

250 , -

251 1 -

252 , -

253 ( -

254 228 -

255 ) -

256 } -

257 , -

258 { (unsigned short)(0x06 -

259 + -

260 0x00), 0, 0, 0x7fff0000U } -

261 , -

262 -

263 -

264 -

265 { (unsigned short)(0x05 -

266 + -

267 0x10 -

268 + -

269 0x00), -

270 0 -

271 , -

272 1 -

273 , -

274 ( -

275 3 -

276 ) -

277 } -

278 , -

279 { (unsigned short)(0x06 -

280 + -

281 0x00), 0, 0, 0x7fff0000U } -

282 , -

283 -

284 -

285 -

286 { (unsigned short)(0x05 -

287 + -

288 0x10 -

289 + -

290 0x00), -

291 0 -

292 , -

293 1 -

294 , -

295 ( -

296 60 -

297 ) -

298 } -

299 , -

300 { (unsigned short)(0x06 -

301 + -

302 0x00), 0, 0, 0x7fff0000U } -

303 , -

304 -

305 -

306 -

307 { (unsigned short)(0x05 -

308 + -

309 0x10 -

310 + -

311 0x00), -

312 0 -

313 , -

314 1 -

315 , -

316 ( -

317 231 -

318 ) -

319 } -

320 , -

321 { (unsigned short)(0x06 -

322 + -

323 0x00), 0, 0, 0x7fff0000U } -

324 , -

325 -

326 -

327 -

328 { (unsigned short)(0x05 -

329 + -

330 0x10 -

331 + -

332 0x00), -

333 0 -

334 , -

335 1 -

336 , -

337 ( -

338 202 -

339 ) -

340 } -

341 , -

342 { (unsigned short)(0x06 -

343 + -

344 0x00), 0, 0, 0x7fff0000U } -

345 , -

346 -

347 -

348 -

349 { (unsigned short)(0x05 -

350 + -

351 0x10 -

352 + -

353 0x00), -

354 0 -

355 , -

356 1 -

357 , -

358 ( -

359 107 -

360 ) -

361 } -

362 , -

363 { (unsigned short)(0x06 -

364 + -

365 0x00), 0, 0, 0x7fff0000U } -

366 , -

367 -

368 -

369 -

370 -

371 -

372 -

373 { (unsigned short)(0x05 -

374 + -

375 0x10 -

376 + -

377 0x00), -

378 0 -

379 , -

380 1 -

381 , -

382 ( -

383 121 -

384 ) -

385 } -

386 , -

387 { (unsigned short)(0x06 -

388 + -

389 0x00), 0, 0, 0x7fff0000U } -

390 , -

391 -

392 -

393 -

394 { (unsigned short)(0x05 -

395 + -

396 0x10 -

397 + -

398 0x00), -

399 0 -

400 , -

401 1 -

402 , -

403 ( -

404 39 -

405 ) -

406 } -

407 , -

408 { (unsigned short)(0x06 -

409 + -

410 0x00), 0, 0, 0x7fff0000U } -

411 , -

412 -

413 -

414 -

415 { (unsigned short)(0x05 -

416 + -

417 0x10 -

418 + -

419 0x00), -

420 0 -

421 , -

422 1 -

423 , -

424 ( -

425 318 -

426 ) -

427 } -

428 , -

429 { (unsigned short)(0x06 -

430 + -

431 0x00), 0, 0, 0x7fff0000U } -

432 , -

433 -

434 -

435 -

436 { (unsigned short)(0x05 -

437 + -

438 0x10 -

439 + -

440 0x00), -

441 0 -

442 , -

443 1 -

444 , -

445 ( -

446 96 -

447 ) -

448 } -

449 , -

450 { (unsigned short)(0x06 -

451 + -

452 0x00), 0, 0, 0x7fff0000U } -

453 , -

454 -

455 -

456 -

457 { (unsigned short)(0x05 -

458 + -

459 0x10 -

460 + -

461 0x00), -

462 0 -

463 , -

464 1 -

465 , -

466 ( -

467 102 -

468 ) -

469 } -

470 , -

471 { (unsigned short)(0x06 -

472 + -

473 0x00), 0, 0, 0x7fff0000U } -

474 , -

475 -

476 -

477 -

478 -

479 -

480 -

481 { (unsigned short)(0x05 -

482 + -

483 0x10 -

484 + -

485 0x00), -

486 0 -

487 , -

488 1 -

489 , -

490 ( -

491 28 -

492 ) -

493 } -

494 , -

495 { (unsigned short)(0x06 -

496 + -

497 0x00), 0, 0, 0x7fff0000U } -

498 , -

499 -

500 -

501 -

502 { (unsigned short)(0x05 -

503 + -

504 0x10 -

505 + -

506 0x00), -

507 0 -

508 , -

509 1 -

510 , -

511 ( -

512 9 -

513 ) -

514 } -

515 , -

516 { (unsigned short)(0x06 -

517 + -

518 0x00), 0, 0, 0x7fff0000U } -

519 , -

520 -

521 -

522 -

523 -

524 -

525 -

526 { (unsigned short)(0x05 -

527 + -

528 0x10 -

529 + -

530 0x00), -

531 0 -

532 , -

533 1 -

534 , -

535 ( -

536 25 -

537 ) -

538 } -

539 , -

540 { (unsigned short)(0x06 -

541 + -

542 0x00), 0, 0, 0x7fff0000U } -

543 , -

544 -

545 -

546 -

547 { (unsigned short)(0x05 -

548 + -

549 0x10 -

550 + -

551 0x00), -

552 0 -

553 , -

554 1 -

555 , -

556 ( -

557 11 -

558 ) -

559 } -

560 , -

561 { (unsigned short)(0x06 -

562 + -

563 0x00), 0, 0, 0x7fff0000U } -

564 , -

565 -

566 -

567 -

568 { (unsigned short)(0x05 -

569 + -

570 0x10 -

571 + -

572 0x00), -

573 0 -

574 , -

575 1 -

576 , -

577 ( -

578 35 -

579 ) -

580 } -

581 , -

582 { (unsigned short)(0x06 -

583 + -

584 0x00), 0, 0, 0x7fff0000U } -

585 , -

586 -

587 -

588 -

589 -

590 -

591 -

592 { (unsigned short)(0x05 -

593 + -

594 0x10 -

595 + -

596 0x00), -

597 0 -

598 , -

599 1 -

600 , -

601 ( -

602 7 -

603 ) -

604 } -

605 , -

606 { (unsigned short)(0x06 -

607 + -

608 0x00), 0, 0, 0x7fff0000U } -

609 , -

610 -

611 -

612 -

613 { (unsigned short)(0x05 -

614 + -

615 0x10 -

616 + -

617 0x00), -

618 0 -

619 , -

620 1 -

621 , -

622 ( -

623 270 -

624 ) -

625 } -

626 , -

627 { (unsigned short)(0x06 -

628 + -

629 0x00), 0, 0, 0x7fff0000U } -

630 , -

631 -

632 -

633 -

634 { (unsigned short)(0x05 -

635 + -

636 0x10 -

637 + -

638 0x00), -

639 0 -

640 , -

641 1 -

642 , -

643 ( -

644 0 -

645 ) -

646 } -

647 , -

648 { (unsigned short)(0x06 -

649 + -

650 0x00), 0, 0, 0x7fff0000U } -

651 , -

652 -

653 -

654 -

655 { (unsigned short)(0x05 -

656 + -

657 0x10 -

658 + -

659 0x00), -

660 0 -

661 , -

662 1 -

663 , -

664 ( -

665 14 -

666 ) -

667 } -

668 , -

669 { (unsigned short)(0x06 -

670 + -

671 0x00), 0, 0, 0x7fff0000U } -

672 , -

673 -

674 -

675 -

676 { (unsigned short)(0x05 -

677 + -

678 0x10 -

679 + -

680 0x00), -

681 0 -

682 , -

683 1 -

684 , -

685 ( -

686 23 -

687 ) -

688 } -

689 , -

690 { (unsigned short)(0x06 -

691 + -

692 0x00), 0, 0, 0x7fff0000U } -

693 , -

694 -

695 -

696 -

697 { (unsigned short)(0x05 -

698 + -

699 0x10 -

700 + -

701 0x00), -

702 0 -

703 , -

704 1 -

705 , -

706 ( -

707 48 -

708 ) -

709 } -

710 , -

711 { (unsigned short)(0x06 -

712 + -

713 0x00), 0, 0, 0x7fff0000U } -

714 , -

715 -

716 -

717 -

718 -

719 -

720 -

721 { (unsigned short)(0x05 -

722 + -

723 0x10 -

724 + -

725 0x00), -

726 0 -

727 , -

728 1 -

729 , -

730 ( -

731 201 -

732 ) -

733 } -

734 , -

735 { (unsigned short)(0x06 -

736 + -

737 0x00), 0, 0, 0x7fff0000U } -

738 , -

739 -

740 -

741 -

742 { (unsigned short)(0x05 -

743 + -

744 0x10 -

745 + -

746 0x00), -

747 0 -

748 , -

749 1 -

750 , -

751 ( -

752 1 -

753 ) -

754 } -

755 , -

756 { (unsigned short)(0x06 -

757 + -

758 0x00), 0, 0, 0x7fff0000U } -

759 , -

760 -

761 { (unsigned short)(0x06 -

762 + -

763 0x00), 0, 0, 0x00000000U } -

764 , -

765 }; -

766 -

767 static const struct sock_fprog preauth_program = { -

768 .len = (unsigned short)(sizeof(preauth_insns)/sizeof(preauth_insns[0])), -

769 .filter = (struct sock_filter *)preauth_insns, -

770 }; -

771 -

772 struct ssh_sandbox { -

773 pid_t child_pid; -

774 }; -

775 -

776 struct ssh_sandbox * -

777 ssh_sandbox_init(struct monitor *monitor) -

778 { -

779 struct ssh_sandbox *box; -

780 -

781 -

782 -

783 -

784 -

785 debug3("%s: preparing seccomp filter sandbox", __func__); -

786 box = xcalloc(1, sizeof(*box)); -

787 box->child_pid = 0; -

788 -

789

return

never executed: return box;

box;

never executed: return box;

790 } -

791 void -

792 ssh_sandbox_child(struct ssh_sandbox *box) -

793 { -

794 struct rlimit rl_zero; -

795 int nnp_failed = 0; -

796 -

797 -

798 rl_zero.rlim_cur = rl_zero.rlim_max = 0; -

799

if (setrlimit(

setrlimit( RLI...rl_zero) == -1	Description
TRUE	never evaluated
FALSE	never evaluated

800

RLIMIT_FSIZE

setrlimit( RLI...rl_zero) == -1	Description
TRUE	never evaluated
FALSE	never evaluated

801

, &rl_zero) == -1

setrlimit( RLI...rl_zero) == -1	Description
TRUE	never evaluated
FALSE	never evaluated

)

802

fatal("%s: setrlimit(RLIMIT_FSIZE, { 0, 0 }): %s",

never executed: fatal("%s: setrlimit(RLIMIT_FSIZE, { 0, 0 }): %s", __func__, strerror( (*__errno_location ()) ));

803

__func__, strerror(

never executed: fatal("%s: setrlimit(RLIMIT_FSIZE, { 0, 0 }): %s", __func__, strerror( (*__errno_location ()) ));

804

(*__errno_location ())

never executed: fatal("%s: setrlimit(RLIMIT_FSIZE, { 0, 0 }): %s", __func__, strerror( (*__errno_location ()) ));

805

));

never executed: fatal("%s: setrlimit(RLIMIT_FSIZE, { 0, 0 }): %s", __func__, strerror( (*__errno_location ()) ));

806

if (setrlimit(

setrlimit( RLI...rl_zero) == -1	Description
TRUE	never evaluated
FALSE	never evaluated

807

RLIMIT_NOFILE

setrlimit( RLI...rl_zero) == -1	Description
TRUE	never evaluated
FALSE	never evaluated

808

, &rl_zero) == -1

setrlimit( RLI...rl_zero) == -1	Description
TRUE	never evaluated
FALSE	never evaluated

)

809

fatal("%s: setrlimit(RLIMIT_NOFILE, { 0, 0 }): %s",

never executed: fatal("%s: setrlimit(RLIMIT_NOFILE, { 0, 0 }): %s", __func__, strerror( (*__errno_location ()) ));

810

__func__, strerror(

never executed: fatal("%s: setrlimit(RLIMIT_NOFILE, { 0, 0 }): %s", __func__, strerror( (*__errno_location ()) ));

811

(*__errno_location ())

never executed: fatal("%s: setrlimit(RLIMIT_NOFILE, { 0, 0 }): %s", __func__, strerror( (*__errno_location ()) ));

812

));

never executed: fatal("%s: setrlimit(RLIMIT_NOFILE, { 0, 0 }): %s", __func__, strerror( (*__errno_location ()) ));

813

if (setrlimit(

setrlimit( __R...rl_zero) == -1	Description
TRUE	never evaluated
FALSE	never evaluated

814

__RLIMIT_NPROC

setrlimit( __R...rl_zero) == -1	Description
TRUE	never evaluated
FALSE	never evaluated

815

, &rl_zero) == -1

setrlimit( __R...rl_zero) == -1	Description
TRUE	never evaluated
FALSE	never evaluated

)

816

fatal("%s: setrlimit(RLIMIT_NPROC, { 0, 0 }): %s",

never executed: fatal("%s: setrlimit(RLIMIT_NPROC, { 0, 0 }): %s", __func__, strerror( (*__errno_location ()) ));

817

__func__, strerror(

never executed: fatal("%s: setrlimit(RLIMIT_NPROC, { 0, 0 }): %s", __func__, strerror( (*__errno_location ()) ));

818

(*__errno_location ())

never executed: fatal("%s: setrlimit(RLIMIT_NPROC, { 0, 0 }): %s", __func__, strerror( (*__errno_location ()) ));

819

));

never executed: fatal("%s: setrlimit(RLIMIT_NPROC, { 0, 0 }): %s", __func__, strerror( (*__errno_location ()) ));

820 -

821 -

822 -

823 -

824 -

825 debug3("%s: setting PR_SET_NO_NEW_PRIVS", __func__); -

826

if (prctl(

prctl( 38 , 1, 0, 0, 0) == -1	Description
TRUE	never evaluated
FALSE	never evaluated

827

prctl( 38 , 1, 0, 0, 0) == -1	Description
TRUE	never evaluated
FALSE	never evaluated

828

, 1, 0, 0, 0) == -1

prctl( 38 , 1, 0, 0, 0) == -1	Description
TRUE	never evaluated
FALSE	never evaluated

) {

829 debug("%s: prctl(PR_SET_NO_NEW_PRIVS): %s", -

830 __func__, strerror( -

831 (*__errno_location ()) -

832 )); -

833 nnp_failed = 1; -

834

}

never executed: end of block

835 debug3("%s: attaching seccomp filter program", __func__); -

836

if (prctl(

prctl( 22 , 2 ...program) == -1	Description
TRUE	never evaluated
FALSE	never evaluated

837

prctl( 22 , 2 ...program) == -1	Description
TRUE	never evaluated
FALSE	never evaluated

838

prctl( 22 , 2 ...program) == -1	Description
TRUE	never evaluated
FALSE	never evaluated

839

prctl( 22 , 2 ...program) == -1	Description
TRUE	never evaluated
FALSE	never evaluated

840

, &preauth_program) == -1

prctl( 22 , 2 ...program) == -1	Description
TRUE	never evaluated
FALSE	never evaluated

)

841

debug("%s: prctl(PR_SET_SECCOMP): %s",

never executed: debug("%s: prctl(PR_SET_SECCOMP): %s", __func__, strerror( (*__errno_location ()) ));

842

__func__, strerror(

never executed: debug("%s: prctl(PR_SET_SECCOMP): %s", __func__, strerror( (*__errno_location ()) ));

843

(*__errno_location ())

never executed: debug("%s: prctl(PR_SET_SECCOMP): %s", __func__, strerror( (*__errno_location ()) ));

844

));

never executed: debug("%s: prctl(PR_SET_SECCOMP): %s", __func__, strerror( (*__errno_location ()) ));

845

else if (nnp_failed

nnp_failed	Description
TRUE	never evaluated
FALSE	never evaluated

)

846

fatal("%s: SECCOMP_MODE_FILTER activated but "

never executed: fatal("%s: SECCOMP_MODE_FILTER activated but " "PR_SET_NO_NEW_PRIVS failed", __func__);

847

"PR_SET_NO_NEW_PRIVS failed", __func__);

never executed: fatal("%s: SECCOMP_MODE_FILTER activated but " "PR_SET_NO_NEW_PRIVS failed", __func__);

848

}

never executed: end of block

849 -

850 void -

851 ssh_sandbox_parent_finish(struct ssh_sandbox *box) -

852 { -

853 free(box); -

854 debug3("%s: finished", __func__); -

855

}

never executed: end of block

856 -

857 void -

858 ssh_sandbox_parent_preauth(struct ssh_sandbox *box, pid_t child_pid) -

859 { -

860 box->child_pid = child_pid; -

861

}

never executed: end of block

Switch to Source code

Preprocessed file

Generated by Squish Coco 4.2.2