3571020550

Build # 3571020550

Build Type

github

Committed by GitHub

Commit Message

<a href="https://github.com/google/santa/commit/<a class=hub.com/google/santa/commit/<a class="double-link" href="https://git"><a class=hub.com/google/santa/commit/<a class="double-link" href="https://git"><a class=hub.com/google/santa/commit/<a class="double-link" href="https://git"><a class=hub.com/google/santa/commit/<a class="double-link" href="https://git"><a class=hub.com/google/santa/commit/5a32eae0f6a8b9b0d2373b037688e38b66b91b3f">5a32eae0f">&lt;a href=&quot;https://github.com/google/santa/commit/</a><a class="double-link" href="https://github.com/google/santa/commit/&lt;a class=&quot;double-link&quot; href=&quot;https://git">&lt;a class=</a>hub.com/google/santa/commit/&lt;a class=&quot;double-link&quot; href=&quot;https://git">&lt;a class=</a>hub.com/google/santa/commit/&lt;a class=&quot;double-link&quot; href=&quot;https://git">&lt;a class=</a>hub.com/google/santa/commit/5a32eae0f6a8b9b0d2373b037688e38b66b91b3f">5a32eae0f</a><a href="https://github.com/google/santa/commit/5a32eae0f6a8b9b0d2373b037688e38b66b91b3f">&lt;a href=&quot;https://github.com/google/santa/commit/5a32eae0f6a8b9b0d2373b037688e38b66b91b3f&quot;&gt;&amp;quot;&amp;gt;&amp;amp;lt;a href=&amp;amp;quot;https://github.com/google/santa/commit/&amp;lt;/a&amp;gt;&amp;lt;a class=&amp;quot;double-link&amp;quot; href=&amp;quot;https://github.com/google/santa/commit/&amp;amp;lt;a class=&amp;amp;quot;double-link&amp;amp;quot; href=&amp;amp;quot;https://git&amp;quot;&amp;gt;&amp;amp;lt;a class=&amp;lt;/a&amp;gt;hub.com/google/santa/commit/5a32eae0f6a8b9b0d2373b037688e38b66b91b3f&amp;quot;&amp;gt;5a32eae0f&amp;lt;/a&amp;gt;&amp;lt;a href=&amp;quot;https://github.com/google/santa/commit/5a32eae0f6a8b9b0d2373b037688e38b66b91b3f&amp;quot;&amp;gt;&amp;amp;lt;a href=&amp;amp;quot;https://github.com/google/santa/commit/5a32eae0f6a8b9b0d2373b037688e38b&amp;lt;/a&amp;gt;</a>66b91b3f&quot;&gt;&amp;quot;&amp;gt;Merge &amp;lt;/a&amp;gt;&amp;lt;a class=&amp;quot;double-link&amp;quot; href=&amp;quot;https://github.com/google/santa/commit/&amp;lt;a class=&amp;quot;double-link&amp;quot; href=&amp;quot;https://github.com/google/santa/commit/&lt;a class=&quot;double-link&quot; href=&quot;https://github.com/google/santa/commit/ad6275957&quot;&gt;ad6275957&lt;/a&gt;&lt;a href=&quot;https://github.com/google/santa/commit/5a32eae0f6a8... (continued)

Pull Request Pull Request #943: Rename santa_vnode_id_t to SantaVnode

Run Details

3072 of 6526 branches covered (47.07%)

Branch coverage included in aggregate %.

24 of 24 new or added lines in 6 files covered. (100.0%)

11317 of 16263 relevant lines covered (69.59%)

18551.84 hits per line

Source File
Press 'n' to go to next uncovered line, 'b' for previous

0.0

/Source/santactl/Commands/SNTCommandCheckCache.m

/// Copyright 2016-2022 Google Inc. All rights reserved.
///
/// Licensed under the Apache License, Version 2.0 (the "License");
/// you may not use this file except in compliance with the License.
/// You may obtain a copy of the License at
///
///    http://www.apache.org/licenses/LICENSE-2.0
///
///    Unless required by applicable law or agreed to in writing, software
///    distributed under the License is distributed on an "AS IS" BASIS,
///    WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
///    See the License for the specific language governing permissions and
///    limitations under the License.

#import <Foundation/Foundation.h>
#import <MOLXPCConnection/MOLXPCConnection.h>

#include <sys/stat.h>

#import "Source/common/SNTLogging.h"
#import "Source/common/SNTXPCControlInterface.h"
#import "Source/santactl/SNTCommand.h"
#import "Source/santactl/SNTCommandController.h"

#ifdef DEBUG

@interface SNTCommandCheckCache : SNTCommand <SNTCommandProtocol>
@end

@implementation SNTCommandCheckCache

REGISTER_COMMAND_NAME(@"checkcache")

+ (BOOL)requiresRoot {
  return NO;
}

+ (BOOL)requiresDaemonConn {
  return YES;
}

+ (NSString *)shortHelpText {
  return @"Prints the status of a file in the kernel cache.";
}

+ (NSString *)longHelpText {
  return (@"Checks the in-kernel cache for desired file.\n"
          @"Returns 0 if successful, 1 otherwise");
}

- (void)runWithArguments:(NSArray *)arguments {
  SantaVnode vnodeID = [self vnodeIDForFile:arguments.firstObject];
  [[self.daemonConn remoteObjectProxy]
    checkCacheForVnodeID:vnodeID
               withReply:^(santa_action_t action) {
                 if (action == ACTION_RESPOND_ALLOW) {
                   LOGI(@"File exists in [allowlist] kernel cache");
                   exit(0);
                 } else if (action == ACTION_RESPOND_DENY) {
                   LOGI(@"File exists in [blocklist] kernel cache");
                   exit(0);
                 } else if (action == ACTION_RESPOND_ALLOW_COMPILER) {
                   LOGI(@"File exists in [allowlist compiler] kernel cache");
                   exit(0);
                 } else if (action == ACTION_UNSET) {
                   LOGE(@"File does not exist in cache");
                   exit(1);
                 }
               }];
}

- (SantaVnode)vnodeIDForFile:(NSString *)path {
  struct stat fstat = {};
  stat(path.fileSystemRepresentation, &fstat);
  SantaVnode ret = {.fsid = fstat.st_dev, .fileid = fstat.st_ino};
  return ret;
}

@end

#endif

1	/// Copyright 2016-2022 Google Inc. All rights reserved.
2	///
3	/// Licensed under the Apache License, Version 2.0 (the "License");
4	/// you may not use this file except in compliance with the License.
5	/// You may obtain a copy of the License at
6	///
7	/// http://www.apache.org/licenses/LICENSE-2.0
8	///
9	/// Unless required by applicable law or agreed to in writing, software
10	/// distributed under the License is distributed on an "AS IS" BASIS,
11	/// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12	/// See the License for the specific language governing permissions and
13	/// limitations under the License.
14
15	#import <Foundation/Foundation.h>
16	#import <MOLXPCConnection/MOLXPCConnection.h>
17
18	#include <sys/stat.h>
19
20	#import "Source/common/SNTLogging.h"
21	#import "Source/common/SNTXPCControlInterface.h"
22	#import "Source/santactl/SNTCommand.h"
23	#import "Source/santactl/SNTCommandController.h"
24
25	#ifdef DEBUG
26
27	@interface SNTCommandCheckCache : SNTCommand <SNTCommandProtocol>
28	@end
29
30	@implementation SNTCommandCheckCache
31
32	REGISTER_COMMAND_NAME(@"checkcache")
33
34	+ (BOOL)requiresRoot {	×
35	return NO;	×
36	}	×
37
38	+ (BOOL)requiresDaemonConn {	×
39	return YES;	×
40	}	×
41
42	+ (NSString *)shortHelpText {	×
43	return @"Prints the status of a file in the kernel cache.";	×
44	}	×
45
46	+ (NSString *)longHelpText {	×
47	return (@"Checks the in-kernel cache for desired file.\n"	×
48	@"Returns 0 if successful, 1 otherwise");	×
49	}	×
50
51	- (void)runWithArguments:(NSArray *)arguments {	×
52	SantaVnode vnodeID = [self vnodeIDForFile:arguments.firstObject];	×
53	[[self.daemonConn remoteObjectProxy]	×
54	checkCacheForVnodeID:vnodeID	×
55	withReply:^(santa_action_t action) {	×
56	if (action == ACTION_RESPOND_ALLOW) {	×
57	LOGI(@"File exists in [allowlist] kernel cache");	×
58	exit(0);	×
59	} else if (action == ACTION_RESPOND_DENY) {	×
60	LOGI(@"File exists in [blocklist] kernel cache");	×
61	exit(0);	×
62	} else if (action == ACTION_RESPOND_ALLOW_COMPILER) {	×
63	LOGI(@"File exists in [allowlist compiler] kernel cache");	×
64	exit(0);	×
65	} else if (action == ACTION_UNSET) {	×
66	LOGE(@"File does not exist in cache");	×
67	exit(1);	×
68	}	×
69	}];	×
70	}	×
71
72	- (SantaVnode)vnodeIDForFile:(NSString *)path {	×
73	struct stat fstat = {};	×
74	stat(path.fileSystemRepresentation, &fstat);	×
75	SantaVnode ret = {.fsid = fstat.st_dev, .fileid = fstat.st_ino};	×
76	return ret;	×
77	}	×
78
79	@end
80
81	#endif

google / santa / 3571020550

Source File Press 'n' to go to next uncovered line, 'b' for previous

Source File
Press 'n' to go to next uncovered line, 'b' for previous