Context Navigation

source: trunk/test/testrun_1b.sh@ 560

Last change on this file since 560 was 539, checked in by katerina, 6 years ago
Fixes for tickets #431 (OpenBSD compatibility) and #432 (compiler warnings).
File size: 14.4 KB

Rev	Line
[1]	1	#! /bin/sh
	2
[27]	3	#
	4	# Copyright Rainer Wichmann (2006)
	5	#
	6	# License Information:
	7	# This program is free software; you can redistribute it and/or modify
	8	# it under the terms of the GNU General Public License as published by
	9	# the Free Software Foundation; either version 2 of the License, or
	10	# (at your option) any later version.
	11	#
	12	# This program is distributed in the hope that it will be useful,
	13	# but WITHOUT ANY WARRANTY; without even the implied warranty of
	14	# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
	15	# GNU General Public License for more details.
	16	#
	17	# You should have received a copy of the GNU General Public License
	18	# along with this program; if not, write to the Free Software
	19	# Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
	20	#
[1]	21
[170]	22	MAXTEST=7; export MAXTEST
[19]	23	LOGFILE="$PW_DIR/.samhain_log"; export LOGFILE
	24	RCFILE="$PW_DIR/testrc_1.dyn"; export RCFILE
[1]	25
[170]	26	testrun1b_modrc ()
	27	{
	28	ORIGINAL="\[EOF\]"
	29	REPLACEMENT="\[PortCheck\]"
	30	ex -s $RCFILE <<EOF
	31	%s/$ORIGINAL/$REPLACEMENT/g
	32	wq
	33	EOF
	34
	35	echo "PortCheckActive = yes" >>"$RCFILE"
	36	echo "PortCheckInterface = 127.0.0.1" >>"$RCFILE"
	37	}
	38
[19]	39	testrun1b_internal ()
[1]	40	{
[19]	41	BUILDOPTS="$1"
[1]	42	#
	43	# test standalone compilation
	44	#
[19]	45	[ -z "$verbose" ] \|\| { echo; echo "${S}Building standalone agent${E}"; echo; }
[1]	46	#
	47	if test -r "Makefile"; then
[22]	48	$MAKE distclean >/dev/null >&1
[1]	49	fi
	50	#
[159]	51	# Bootstrapping
[1]	52	#
[159]	53	${TOP_SRCDIR}/configure >/dev/null 2>/dev/null
	54	if test x$? = x0; then
	55	[ -z "$verbose" ] \|\| log_msg_ok "configure (bootstrap)...";
	56	$MAKE > /dev/null 2>&1
	57	if test x$? = x0; then
	58	[ -z "$verbose" ] \|\| log_msg_ok "make (bootstrap)...";
	59	else
	60	[ -z "$quiet" ] && log_msg_fail "make (bootstrap)...";
	61	return 1
	62	fi
	63
	64	else
	65	[ -z "$quiet" ] && log_msg_fail "configure (bootstrap)...";
	66	return 1
	67	fi
[1]	68	#
	69	#
[539]	70	${TOP_SRCDIR}/configure ${BUILDOPTS} 2>/dev/null
[159]	71	#
	72	#
[1]	73	if test x$? = x0; then
[19]	74	[ -z "$verbose" ] \|\| log_msg_ok "configure...";
[22]	75	$MAKE > /dev/null 2>&1
[1]	76	if test x$? = x0; then
[19]	77	[ -z "$verbose" ] \|\| log_msg_ok "make...";
[1]	78	else
[19]	79	[ -z "$quiet" ] && log_msg_fail "make...";
	80	return 1
[1]	81	fi
	82
	83	else
[19]	84	[ -z "$quiet" ] && log_msg_fail "configure...";
	85	return 1
[1]	86	fi
	87
[19]	88	SKIP=`awk '/^__ARCHIVE_FOLLOWS__/ { print NR + 1; exit 0; }' ${SCRIPTDIR}/test.sh`
[1]	89
[19]	90	tail -n "+$SKIP" ${SCRIPTDIR}/test.sh >/dev/null 2>&1
	91	if [ $? -eq 0 ]; then
[159]	92	tail -n "+$SKIP" ${SCRIPTDIR}/test.sh \| gunzip -c - 2>/dev/null \| tar xf - && \
[19]	93	mv "./testrc.gpg.asc" "$RCFILE"
	94	else
[159]	95	tail "+$SKIP" ${SCRIPTDIR}/test.sh \| gunzip -c - 2>/dev/null \| tar xf - && \
[19]	96	mv "./testrc.gpg.asc" "$RCFILE"
	97	fi
	98	if test x$? = x0; then
	99	[ -z "$verbose" ] \|\| log_msg_ok "extract gpg signed files...";
	100	else
	101	[ -z "$quiet" ] && log_msg_fail "extract gpg signed files...";
	102	return 1
	103	fi
	104
[52]	105	if test "x$2" = "x"; then
	106	:
	107	else
	108	CONVERT="$2"
	109	if test -f "${TOP_SRCDIR}/stealth_template.jpg"; then
	110	[ -z "$verbose" ] \|\| log_msg_ok "convert..."
	111	"${CONVERT}" +compress "${TOP_SRCDIR}/stealth_template.jpg" stealth_template.ps >/dev/null
	112	else
	113	[ -z "$quiet" ] && log_msg_fail "cannot find file stealth_template.jpg"
	114	return 1
	115	fi
	116	if [ $? -ne 0 ]; then
	117	[ -z "$quiet" ] && log_msg_fail "${CONVERT} +compress ${TOP_SRCDIR}/stealth_template.jpg stealth_template.ps";
	118	return 1
	119	fi
	120
	121	[ -z "$verbose" ] \|\| log_msg_ok "hide..."
	122	./samhain_stealth -s stealth_template.ps "$RCFILE" >/dev/null
	123	if [ $? -ne 0 ]; then
	124	[ -z "$quiet" ] && log_msg_fail "${CONVERT} +compress ${TOP_SRCDIR}/stealth_template.jpg stealth_template.ps";
	125	return 1
	126	fi
	127
	128	mv -f stealth_template.ps "$RCFILE"
	129	if [ $? -ne 0 ]; then
	130	[ -z "$quiet" ] && log_msg_fail "mv -f stealth_template.ps $RCFILE";
	131	return 1
	132	fi
	133
	134	fi
	135
[1]	136	rm -f ./.samhain_file
	137	rm -f ./.samhain_log
	138	rm -f ./.samhain_lock
	139
[19]	140	./samhain -t init -p none -l info
[1]	141
	142	if test x$? = x0; then
[19]	143	[ -z "$verbose" ] \|\| log_msg_ok "init...";
	144	else
	145	[ -z "$quiet" ] && log_msg_fail "init...";
	146	return 1
	147	fi
[1]	148
[19]	149	mv $PW_DIR/.samhain_file.asc $PW_DIR/.samhain_file
	150	}
[1]	151
[169]	152	testrun1b_nogpg ()
	153	{
	154	BUILDOPTS="$1"
	155	#
	156	# test standalone compilation
	157	#
	158	[ -z "$verbose" ] \|\| { echo; echo "${S}Building standalone agent${E}"; echo; }
	159	#
	160	if test -r "Makefile"; then
	161	$MAKE distclean >/dev/null >&1
	162	fi
	163
	164	${TOP_SRCDIR}/configure ${BUILDOPTS} 2>/dev/null
	165	#
	166	#
	167	if test x$? = x0; then
	168	[ -z "$verbose" ] \|\| log_msg_ok "configure...";
	169	$MAKE > /dev/null 2>&1
	170	if test x$? = x0; then
	171	[ -z "$verbose" ] \|\| log_msg_ok "make...";
	172	else
	173	[ -z "$quiet" ] && log_msg_fail "make...";
	174	return 1
	175	fi
	176
	177	else
	178	[ -z "$quiet" ] && log_msg_fail "configure...";
	179	return 1
	180	fi
	181
	182	rm -f ./.samhain_file
	183	rm -f ./.samhain_log
	184	rm -f ./.samhain_lock
	185
	186	cp "${SCRIPTDIR}/testrc_1" "${RCFILE}"
	187
[170]	188	if test "x$2" = "xmodrc"; then
	189	[ -z "$verbose" ] \|\| log_msg_ok "mod rc...";
	190	testrun1b_modrc
	191	fi
	192
[169]	193	./samhain -t init -p none -l info
	194
	195	if test x$? = x0; then
	196	[ -z "$verbose" ] \|\| log_msg_ok "init...";
	197	else
	198	[ -z "$quiet" ] && log_msg_fail "init...";
	199	return 1
	200	fi
	201
	202	}
	203
[19]	204	do_test_1b () {
	205
	206	./samhain -t check -p none -l info
	207
	208	if test x$? = x0; then
	209	./samhain -j -L $LOGFILE >"${LOGFILE}.tmp" && mv "${LOGFILE}.tmp" "${LOGFILE}"
	210	if [ $? -ne 0 ]; then
	211	[ -z "$quiet" ] && log_msg_fail "mv logfile...";
	212	return 1
[1]	213	fi
[19]	214	[ -z "$verbose" ] \|\| log_msg_ok "check...";
	215	else
	216	[ -z "$quiet" ] && log_msg_fail "check...";
	217	return 1
	218	fi
	219	#
	220	tmp=`egrep "Checking.*/etc(>\|\")" $LOGFILE 2>/dev/null \| wc -l`
	221	if [ $tmp -ne 2 ]; then
	222	[ -z "$verbose" ] \|\| log_msg_fail "/etc";
[60]	223	return 1
[19]	224	fi
	225	tmp=`egrep "Checking.*(>\|\")" $LOGFILE 2>/dev/null \| wc -l`
[262]	226	if [ $tmp -ne 10 ]; then
[19]	227	[ -z "$verbose" ] \|\| log_msg_fail "checking";
[60]	228	return 1
[19]	229	fi
[60]	230	egrep "ADDED" $LOGFILE >/dev/null 2>&1
	231	if [ $? -eq 0 ]; then
	232	[ -z "$verbose" ] \|\| log_msg_fail "init was incomplete";
	233	return 1
	234	fi
[19]	235	#
	236	return 0
[1]	237	}
	238
[19]	239	do_test_1b_2 () {
[1]	240
[19]	241	rm -f $PW_DIR/test_log_prelude
[1]	242
[206]	243	[ -z "$verbose" ] \|\| { echo " starting prelude-manager.."; echo " ($PM --textmod -l $PW_DIR/test_log_prelude --listen 127.0.0.1:5500 >/dev/null 2>&1 &)"; }
[20]	244	"$PM" --textmod -l $PW_DIR/test_log_prelude --listen 127.0.0.1:5500 >/dev/null 2>&1 &
[19]	245	PID=$!
[1]	246
[51]	247	five_sec_sleep
[20]	248
	249	./samhain -t check -p none -l info --set-prelude-severity=info --prelude --server-addr 127.0.0.1:5500 >/dev/null
[19]	250
	251	if test x$? = x0; then
	252	./samhain -j -L $LOGFILE >"${LOGFILE}.tmp" && mv "${LOGFILE}.tmp" "${LOGFILE}"
	253	if [ $? -ne 0 ]; then
	254	[ -z "$quiet" ] && log_msg_fail "mv logfile...";
	255	kill $PID
	256	return 1
	257	fi
	258	[ -z "$verbose" ] \|\| log_msg_ok "check...";
	259	else
	260	[ -z "$quiet" ] && log_msg_fail "check...";
	261	kill $PID
	262	return 1
	263	fi
	264	#
	265	tmp=`egrep 'File original:.name=etc.path=/etc' test_log_prelude 2>/dev/null \| wc -l`
[81]	266	if [ $tmp -lt 1 ]; then
[19]	267	[ -z "$verbose" ] \|\| log_msg_fail "/etc";
[206]	268	kill $PID
	269	return 1
[19]	270	fi
	271	tmp=`egrep 'Classification text: Checking' test_log_prelude 2>/dev/null \| wc -l`
[81]	272	if [ $tmp -lt 1 ]; then
[19]	273	[ -z "$verbose" ] \|\| log_msg_fail "checking";
[206]	274	kill $PID
	275	return 1
[19]	276	fi
[170]	277	#
	278	if test "x$2" = "xmodrc"; then
	279	tmp=`egrep 'Classification text: Service opened' test_log_prelude 2>/dev/null \| wc -l`
	280	if [ $tmp -lt 1 ]; then
	281	[ -z "$verbose" ] \|\| log_msg_fail "service";
[206]	282	kill $PID
	283	return 1
[170]	284	fi
	285	tmp=`egrep 'Service: port=5500' test_log_prelude 2>/dev/null \| wc -l`
	286	if [ $tmp -lt 1 ]; then
	287	[ -z "$verbose" ] \|\| log_msg_fail "port 5500";
[206]	288	kill $PID
	289	return 1
[170]	290	fi
[19]	291	fi
	292	#
	293	kill $PID
	294	return 0
	295	}
[1]	296
[19]	297	testrun1b ()
	298	{
	299	log_start "RUN STANDALONE W/STEALTH W/GPG"
	300	GPG=`find_path gpg`
	301	if [ -z "$GPG" ]; then
	302	log_skip 1 $MAXTEST 'gpg not found in $PATH'
	303	log_skip 2 $MAXTEST 'gpg not found in $PATH'
[100]	304	log_skip 3 $MAXTEST 'gpg not found in $PATH'
[170]	305	log_skip 4 $MAXTEST 'gpg not found in $PATH'
	306	log_skip 5 $MAXTEST 'gpg not found in $PATH'
	307	log_skip 6 $MAXTEST 'gpg not found in $PATH'
	308	log_skip 7 $MAXTEST 'gpg not found in $PATH'
[19]	309	else
	310	eval "$GPG" --list-keys 0F571F6C >/dev/null 2>/dev/null
	311	if [ $? -ne 0 ]; then
	312	log_skip 1 $MAXTEST 'public PGP key 0x0F571F6C not present'
	313	log_skip 2 $MAXTEST 'public PGP key 0x0F571F6C not present'
[100]	314	log_skip 3 $MAXTEST 'public PGP key 0x0F571F6C not present'
[163]	315	log_skip 4 $MAXTEST 'public PGP key 0x0F571F6C not present'
	316	log_skip 5 $MAXTEST 'public PGP key 0x0F571F6C not present'
[170]	317	log_skip 6 $MAXTEST 'public PGP key 0x0F571F6C not present'
	318	log_skip 7 $MAXTEST 'public PGP key 0x0F571F6C not present'
[19]	319	else
[52]	320	#
	321	# ------------- first test -------------
	322	#
[163]	323	BUILDOPTS="--quiet $TRUST --enable-debug --with-gpg=${GPG} --enable-micro-stealth=137 --enable-login-watch --prefix=$PW_DIR --localstatedir=$PW_DIR --with-config-file=$RCFILE --with-log-file=$PW_DIR/.samhain_log --with-pid-file=$PW_DIR/.samhain_lock --with-data-file=$PW_DIR/.samhain_file"
[52]	324	testrun1b_internal "${BUILDOPTS}"
[19]	325	do_test_1b
	326	if [ $? -eq 0 ]; then
	327	log_ok 1 $MAXTEST 'gpg signed config/database files'
	328	else
	329	log_fail 1 $MAXTEST 'gpg signed config/database files'
	330	fi
[52]	331
	332
	333	#
	334	# ------------- second test -------------
	335	#
[163]	336	BUILDOPTS="--quiet $TRUST --enable-debug --with-gpg=${GPG} --with-checksum --enable-micro-stealth=137 --enable-login-watch --prefix=$PW_DIR --localstatedir=$PW_DIR --with-config-file=$RCFILE --with-log-file=$PW_DIR/.samhain_log --with-pid-file=$PW_DIR/.samhain_lock --with-data-file=$PW_DIR/.samhain_file"
	337	testrun1b_internal "${BUILDOPTS}"
	338	do_test_1b
	339	if [ $? -eq 0 ]; then
	340	log_ok 2 $MAXTEST 'gpg signed config/database files'
	341	else
	342	log_fail 2 $MAXTEST 'gpg signed config/database files'
	343	fi
	344
	345
	346	#
	347	# ------------- third test -------------
	348	#
	349	BUILDOPTS="--quiet $TRUST --enable-debug --with-gpg=${GPG} --with-checksum --with-fp=EF6CEF54701A0AFDB86AF4C31AAD26C80F571F6C --enable-micro-stealth=137 --enable-login-watch --prefix=$PW_DIR --localstatedir=$PW_DIR --with-config-file=$RCFILE --with-log-file=$PW_DIR/.samhain_log --with-pid-file=$PW_DIR/.samhain_lock --with-data-file=$PW_DIR/.samhain_file"
	350	testrun1b_internal "${BUILDOPTS}"
	351	do_test_1b
	352	if [ $? -eq 0 ]; then
	353	log_ok 3 $MAXTEST 'gpg signed config/database files'
	354	else
	355	log_fail 3 $MAXTEST 'gpg signed config/database files'
	356	fi
	357
	358
	359	#
	360	# ------------- fourth test -------------
	361	#
[52]	362	PRECONV=`find_path convert`
	363	"${PRECONV}" --help \| grep ImageMagick >/dev/null 2>&1 && \
	364	CONVERT="${PRECONV}"
	365
	366	if [ -z "$CONVERT" ]; then
	367	log_skip 2 $MAXTEST 'ImageMagick convert not found in $PATH'
	368	else
[159]	369	BUILDOPTS="--quiet $TRUST --enable-debug --with-gpg=${GPG} --with-checksum --enable-stealth=137 --enable-login-watch --prefix=$PW_DIR --localstatedir=$PW_DIR --with-config-file=$RCFILE --with-log-file=$PW_DIR/.samhain_log --with-pid-file=$PW_DIR/.samhain_lock --with-data-file=$PW_DIR/.samhain_file"
[52]	370	testrun1b_internal "${BUILDOPTS}" "$CONVERT"
	371	do_test_1b
	372	if [ $? -eq 0 ]; then
[163]	373	log_ok 4 $MAXTEST 'gpg signed config/database files'
[52]	374	else
[163]	375	log_fail 4 $MAXTEST 'gpg signed config/database files'
[52]	376	fi
	377	fi
	378
	379
	380	#
[163]	381	# ------------- fifth test -------------
[52]	382	#
[170]	383	if ! test -d /var/run/prelude-manager
[96]	384	then
[170]	385	[ -z "$verbose" ] \|\| log_msg_ok "create /var/run/prelude-manager...";
	386	sudo mkdir /var/run/prelude-manager
	387	sudo chown prelude:rainer /var/run/prelude-manager
	388	sudo chmod 770 /var/run/prelude-manager
[96]	389	fi
	390	#
[19]	391	PM=`find_path prelude-manager`
	392	if [ -z "$PM" ]; then
[163]	393	log_skip 5 $MAXTEST 'prelude-manager not found in $PATH'
[19]	394	elif [ -z "$doall" ]; then
[163]	395	log_skip 5 $MAXTEST 'logging to prelude (or use --really-all)'
[19]	396	else
[159]	397	BUILDOPTS="--quiet $TRUST --enable-debug --with-prelude --with-gpg=${GPG} --with-checksum --enable-micro-stealth=137 --enable-login-watch --prefix=$PW_DIR --localstatedir=$PW_DIR --with-config-file=$RCFILE --with-log-file=$PW_DIR/.samhain_log --with-pid-file=$PW_DIR/.samhain_lock --with-data-file=$PW_DIR/.samhain_file"
[20]	398	testrun1b_internal "${BUILDOPTS} CFLAGS=-DSH_NOFAILOVER=1"
[19]	399	do_test_1b_2
	400	if [ $? -eq 0 ]; then
[163]	401	log_ok 5 $MAXTEST 'logging to prelude'
[19]	402	else
[163]	403	log_fail 5 $MAXTEST 'logging to prelude'
[19]	404	fi
	405	fi
[169]	406
	407	#
	408	# ------------- sixth test -------------
	409	#
[170]	410	if ! test -d /var/run/prelude-manager
[169]	411	then
[170]	412	[ -z "$verbose" ] \|\| log_msg_ok "create /var/run/prelude-manager...";
	413	sudo mkdir /var/run/prelude-manager
	414	sudo chown prelude:rainer /var/run/prelude-manager
	415	sudo chmod 770 /var/run/prelude-manager
[169]	416	fi
	417	#
	418	PM=`find_path prelude-manager`
	419	if [ -z "$PM" ]; then
	420	log_skip 6 $MAXTEST 'prelude-manager not found in $PATH'
	421	elif [ -z "$doall" ]; then
	422	log_skip 6 $MAXTEST 'logging to prelude (or use --really-all)'
	423	else
	424	BUILDOPTS="--quiet $TRUST --with-prelude --enable-login-watch --enable-mounts-check --enable-process-check --enable-port-check --enable-suidcheck --prefix=$PW_DIR --localstatedir=$PW_DIR --with-config-file=$RCFILE --with-log-file=$PW_DIR/.samhain_log --with-pid-file=$PW_DIR/.samhain_lock --with-data-file=$PW_DIR/.samhain_file"
	425	testrun1b_nogpg "${BUILDOPTS} CFLAGS=-DSH_NOFAILOVER=1"
	426	do_test_1b_2
	427	if [ $? -eq 0 ]; then
	428	log_ok 6 $MAXTEST 'logging to prelude'
	429	else
	430	log_fail 6 $MAXTEST 'logging to prelude'
	431	fi
	432	fi
	433
[170]	434	#
	435	# ------------- seventh test -----------
	436	#
	437	if ! test -d /var/run/prelude-manager
	438	then
	439	[ -z "$verbose" ] \|\| log_msg_ok "create /var/run/prelude-manager...";
	440	sudo mkdir /var/run/prelude-manager
	441	sudo chown prelude:rainer /var/run/prelude-manager
	442	sudo chmod 770 /var/run/prelude-manager
	443	fi
	444	#
	445	PM=`find_path prelude-manager`
	446	if [ -z "$PM" ]; then
	447	log_skip 7 $MAXTEST 'prelude-manager not found in $PATH'
	448	elif [ -z "$doall" ]; then
	449	log_skip 7 $MAXTEST 'logging to prelude (or use --really-all)'
	450	else
	451	BUILDOPTS="--quiet $TRUST --with-prelude --enable-login-watch --enable-mounts-check --enable-process-check --enable-port-check --enable-suidcheck --prefix=$PW_DIR --localstatedir=$PW_DIR --with-config-file=$RCFILE --with-log-file=$PW_DIR/.samhain_log --with-pid-file=$PW_DIR/.samhain_lock --with-data-file=$PW_DIR/.samhain_file"
	452	testrun1b_nogpg "${BUILDOPTS} CFLAGS=-DSH_NOFAILOVER=1" "modrc"
	453	do_test_1b_2
	454	if [ $? -eq 0 ]; then
	455	log_ok 7 $MAXTEST 'logging to prelude'
	456	else
	457	log_fail 7 $MAXTEST 'logging to prelude'
	458	fi
	459	fi
	460
[19]	461	fi
	462	fi
	463	log_end "RUN STANDALONE W/STEALTH W/GPG"
	464	return 0
	465	}
[1]	466

Note: See TracBrowser for help on using the repository browser.

Download in other formats: