import subprocess
machine.start()
machine.wait_for_console_text("entering runlevel 2")
machine.wait_until_succeeds("pgrep -x sshd", timeout=600)
def maps_pizlo(pid):
return int(machine.succeed(f"grep -c libpizlo /proc/{pid}/maps || true").strip() or 0) > 0
with subtest("no finit service crashed"):
# A crashing service restarts for a while before finit gives up.
machine.sleep(15)
status = machine.succeed("initctl status")
print(status)
assert "crashed" not in status, status
for service in ["dhcpcd", "keventd", "sshd", "syslogd"]:
row = next(l for l in status.splitlines() if f" {service} " in l)
assert " running " in row, row
with subtest("ifupdown-ng configured eth0"):
addr = machine.succeed("ip -4 -o addr show dev eth0")
print(addr)
assert "
${cfg.testing.network.ip}/24" in addr, addr
with subtest("PID 1, the shell and sshd are Fil-C"):
print(machine.succeed("readlink /proc/1/exe"))
assert maps_pizlo(1), "finit does not map libpizlo"
assert maps_pizlo("$$"), "the test shell does not map libpizlo"
sshd = machine.succeed("pgrep -o -x sshd").strip()
print(machine.succeed(f"readlink /proc/{sshd}/exe"))
assert maps_pizlo(sshd), "sshd does not map libpizlo"
with subtest("an ssh login gets a Fil-C shell"):
machine.succeed(
"mkdir -p -m 700 /root/.ssh",
"ssh-keygen -q -t ed25519 -N ''' -f /root/.ssh/id_ed25519",
"cp /root/.ssh/id_ed25519.pub /root/.ssh/authorized_keys",
)
out = machine.succeed(
"ssh -n -o StrictHostKeyChecking=no -o BatchMode=yes root@localhost "
"'echo $BASH_VERSION; readlink /proc/$$/exe; grep -c libpizlo /proc/$$/maps'"
)
print(out)
assert int(out.split()[-1]) > 0, out
with subtest("no native process but the allowed exceptions"):
# filc-ps reads the exceptions' closures from the Nix database,
# which this VM, with the host's store over 9p, does not have.
print(machine.succeed("filc-ps --allow
${expectedNative}/store-paths"))
with subtest("native ELF files belong to the expected exceptions"):
with open("
${closure}/store-paths") as f:
wrappers = [p.strip() for p in f if "-security-wrapper-" in p]
with open("allow", "w") as f:
f.write(open(allow).read() + "\n".join(wrappers) + "\n")
result = subprocess.run(
["
${audit}/bin/filc-audit", "--paths", "
${closure}/store-paths", "--allow", "allow"],
capture_output=True, text=True,
)
print(result.stdout, result.stderr)
assert result.returncode == 0, "native files outside the expected exceptions"
machine.shutdown()