Blame tests/38-basic-pfc_coverage.pfc
|
Packit Service |
8eee21 |
#
|
|
Packit Service |
8eee21 |
# pseudo filter code start
|
|
Packit Service |
8eee21 |
#
|
|
Packit Service |
8eee21 |
# filter for arch x86_64 (3221225534)
|
|
Packit Service |
8eee21 |
if ($arch == 3221225534)
|
|
Packit Service |
8eee21 |
# filter for syscall "exit" (60) [priority: 65535]
|
|
Packit Service |
8eee21 |
if ($syscall == 60)
|
|
Packit Service |
8eee21 |
action TRACE(1);
|
|
Packit Service |
8eee21 |
# filter for syscall "fstat" (5) [priority: 65535]
|
|
Packit Service |
8eee21 |
if ($syscall == 5)
|
|
Packit Service |
8eee21 |
action KILL_PROCESS;
|
|
Packit Service |
8eee21 |
# filter for syscall "close" (3) [priority: 65535]
|
|
Packit Service |
8eee21 |
if ($syscall == 3)
|
|
Packit Service |
8eee21 |
action ERRNO(1);
|
|
Packit Service |
8eee21 |
# filter for syscall "open" (2) [priority: 65535]
|
|
Packit Service |
8eee21 |
if ($syscall == 2)
|
|
Packit Service |
8eee21 |
action KILL;
|
|
Packit Service |
8eee21 |
# filter for syscall "write" (1) [priority: 65527]
|
|
Packit Service |
8eee21 |
if ($syscall == 1)
|
|
Packit Service |
8eee21 |
if ($a0.hi32 == 0)
|
|
Packit Service |
8eee21 |
if ($a0.lo32 == 0)
|
|
Packit Service |
8eee21 |
else
|
|
Packit Service |
8eee21 |
if ($a1.hi32 > 0)
|
|
Packit Service |
8eee21 |
else
|
|
Packit Service |
8eee21 |
if ($a1.hi32 == 0)
|
|
Packit Service |
8eee21 |
if ($a1.lo32 > 1)
|
|
Packit Service |
8eee21 |
else
|
|
Packit Service |
8eee21 |
if ($a2.hi32 > 0)
|
|
Packit Service |
8eee21 |
else
|
|
Packit Service |
8eee21 |
if ($a2.hi32 == 0)
|
|
Packit Service |
8eee21 |
if ($a2.lo32 >= 2)
|
|
Packit Service |
8eee21 |
else
|
|
Packit Service |
8eee21 |
action TRAP;
|
|
Packit Service |
8eee21 |
else
|
|
Packit Service |
8eee21 |
action TRAP;
|
|
Packit Service |
8eee21 |
else
|
|
Packit Service |
8eee21 |
if ($a2.hi32 > 0)
|
|
Packit Service |
8eee21 |
else
|
|
Packit Service |
8eee21 |
if ($a2.hi32 == 0)
|
|
Packit Service |
8eee21 |
if ($a2.lo32 >= 2)
|
|
Packit Service |
8eee21 |
else
|
|
Packit Service |
8eee21 |
action TRAP;
|
|
Packit Service |
8eee21 |
else
|
|
Packit Service |
8eee21 |
action TRAP;
|
|
Packit Service |
8eee21 |
else
|
|
Packit Service |
8eee21 |
if ($a1.hi32 > 0)
|
|
Packit Service |
8eee21 |
else
|
|
Packit Service |
8eee21 |
if ($a1.hi32 == 0)
|
|
Packit Service |
8eee21 |
if ($a1.lo32 > 1)
|
|
Packit Service |
8eee21 |
else
|
|
Packit Service |
8eee21 |
if ($a2.hi32 > 0)
|
|
Packit Service |
8eee21 |
else
|
|
Packit Service |
8eee21 |
if ($a2.hi32 == 0)
|
|
Packit Service |
8eee21 |
if ($a2.lo32 >= 2)
|
|
Packit Service |
8eee21 |
else
|
|
Packit Service |
8eee21 |
action TRAP;
|
|
Packit Service |
8eee21 |
else
|
|
Packit Service |
8eee21 |
action TRAP;
|
|
Packit Service |
8eee21 |
else
|
|
Packit Service |
8eee21 |
if ($a2.hi32 > 0)
|
|
Packit Service |
8eee21 |
else
|
|
Packit Service |
8eee21 |
if ($a2.hi32 == 0)
|
|
Packit Service |
8eee21 |
if ($a2.lo32 >= 2)
|
|
Packit Service |
8eee21 |
else
|
|
Packit Service |
8eee21 |
action TRAP;
|
|
Packit Service |
8eee21 |
else
|
|
Packit Service |
8eee21 |
action TRAP;
|
|
Packit Service |
8eee21 |
# filter for syscall "read" (0) [priority: 65525]
|
|
Packit Service |
8eee21 |
if ($syscall == 0)
|
|
Packit Service |
8eee21 |
if ($a0.hi32 == 0)
|
|
Packit Service |
8eee21 |
if ($a0.lo32 == 0)
|
|
Packit Service |
8eee21 |
if ($a1.hi32 > 0)
|
|
Packit Service |
8eee21 |
if ($a2.hi32 > 0)
|
|
Packit Service |
8eee21 |
if ($a3.hi32 & 0x00000000 == 0)
|
|
Packit Service |
8eee21 |
if ($a3.lo32 & 0x0000000f == 3)
|
|
Packit Service |
8eee21 |
action KILL;
|
|
Packit Service |
8eee21 |
else
|
|
Packit Service |
8eee21 |
if ($a2.hi32 == 0)
|
|
Packit Service |
8eee21 |
if ($a2.lo32 > 2)
|
|
Packit Service |
8eee21 |
if ($a3.hi32 & 0x00000000 == 0)
|
|
Packit Service |
8eee21 |
if ($a3.lo32 & 0x0000000f == 3)
|
|
Packit Service |
8eee21 |
action KILL;
|
|
Packit Service |
8eee21 |
else
|
|
Packit Service |
8eee21 |
if ($a1.hi32 == 0)
|
|
Packit Service |
8eee21 |
if ($a1.lo32 >= 1)
|
|
Packit Service |
8eee21 |
if ($a2.hi32 > 0)
|
|
Packit Service |
8eee21 |
if ($a3.hi32 & 0x00000000 == 0)
|
|
Packit Service |
8eee21 |
if ($a3.lo32 & 0x0000000f == 3)
|
|
Packit Service |
8eee21 |
action KILL;
|
|
Packit Service |
8eee21 |
else
|
|
Packit Service |
8eee21 |
if ($a2.hi32 == 0)
|
|
Packit Service |
8eee21 |
if ($a2.lo32 > 2)
|
|
Packit Service |
8eee21 |
if ($a3.hi32 & 0x00000000 == 0)
|
|
Packit Service |
8eee21 |
if ($a3.lo32 & 0x0000000f == 3)
|
|
Packit Service |
8eee21 |
action KILL;
|
|
Packit Service |
8eee21 |
# default action
|
|
Packit Service |
8eee21 |
action ALLOW;
|
|
Packit Service |
8eee21 |
# filter for arch x86 (1073741827)
|
|
Packit Service |
8eee21 |
if ($arch == 1073741827)
|
|
Packit Service |
8eee21 |
# filter for syscall "fstat" (108) [priority: 65535]
|
|
Packit Service |
8eee21 |
if ($syscall == 108)
|
|
Packit Service |
8eee21 |
action KILL_PROCESS;
|
|
Packit Service |
8eee21 |
# filter for syscall "close" (6) [priority: 65535]
|
|
Packit Service |
8eee21 |
if ($syscall == 6)
|
|
Packit Service |
8eee21 |
action ERRNO(1);
|
|
Packit Service |
8eee21 |
# filter for syscall "open" (5) [priority: 65535]
|
|
Packit Service |
8eee21 |
if ($syscall == 5)
|
|
Packit Service |
8eee21 |
action KILL;
|
|
Packit Service |
8eee21 |
# filter for syscall "exit" (1) [priority: 65535]
|
|
Packit Service |
8eee21 |
if ($syscall == 1)
|
|
Packit Service |
8eee21 |
action TRACE(1);
|
|
Packit Service |
8eee21 |
# filter for syscall "write" (4) [priority: 65532]
|
|
Packit Service |
8eee21 |
if ($syscall == 4)
|
|
Packit Service |
8eee21 |
if ($a0 == 0)
|
|
Packit Service |
8eee21 |
else
|
|
Packit Service |
8eee21 |
if ($a1 > 1)
|
|
Packit Service |
8eee21 |
else
|
|
Packit Service |
8eee21 |
if ($a2 >= 2)
|
|
Packit Service |
8eee21 |
else
|
|
Packit Service |
8eee21 |
action TRAP;
|
|
Packit Service |
8eee21 |
# filter for syscall "read" (3) [priority: 65531]
|
|
Packit Service |
8eee21 |
if ($syscall == 3)
|
|
Packit Service |
8eee21 |
if ($a0 == 0)
|
|
Packit Service |
8eee21 |
if ($a1 >= 1)
|
|
Packit Service |
8eee21 |
if ($a2 > 2)
|
|
Packit Service |
8eee21 |
if ($a3 & 0x0000000f == 3)
|
|
Packit Service |
8eee21 |
action KILL;
|
|
Packit Service |
8eee21 |
# default action
|
|
Packit Service |
8eee21 |
action ALLOW;
|
|
Packit Service |
8eee21 |
# invalid architecture action
|
|
Packit Service |
8eee21 |
action KILL;
|
|
Packit Service |
8eee21 |
#
|
|
Packit Service |
8eee21 |
# pseudo filter code end
|
|
Packit Service |
8eee21 |
#
|