fnzhang/examples
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

cmake可见性和AppArmor示例

Browse source
This commit is contained in:
NoDistanceY 2026-09-03 10:39:21 +08:00
commit 4b4b933e3d
19 changed files with 661 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

46
AppArmor/demo1/report.txt Normal file
View file

@ -0,0 +1,46 @@
===== Pre‑cleanup: remove leftover profile =====
pre‑cleanup done
===== Step1 compile C elf =====
compile done: /home/fnzhang/Project/examples/AppArmor/demo1/demo_app
===== Step2 validate profile syntax =====
profile.elf syntax OK
profile.script syntax OK
===== Step3 install profile =====
profile installed & enforce enabled
===== Step4 run elf demo_app =====
[probe2] open /etc/shadow: Permission denied
[probe3] open /tmp/demo_forbidden.log: Permission denied
[probe1] write /tmp/demo_elf.log: ALLOWED
-- verify /tmp/demo_elf.log exists (allowed write):
-rw-r--r-- 1 root root 13 Sep 3 09:48 /tmp/demo_elf.log
===== Step5 run shell script =====
[probe1] shell try write /tmp/demo_sh.log
[probe1] write /tmp/demo_sh.log: ALLOWED
[probe2] shell try read /etc/shadow
/home/fnzhang/Project/examples/AppArmor/demo1/demo_shell.sh: line 8: /usr/bin/cat: Permission denied
[probe3] shell try write /tmp/demo_forbidden.log
/home/fnzhang/Project/examples/AppArmor/demo1/demo_shell.sh: line 12: /tmp/demo_forbidden.log: Permission denied
-- verify /tmp/demo_sh.log exists (allowed write):
-rw-r--r-- 1 root root 15 Sep 3 09:48 /tmp/demo_sh.log
===== Step6 aa-status snapshot =====
/home/fnzhang/Project/examples/AppArmor/demo1/demo_app: enforce
/home/fnzhang/Project/examples/AppArmor/demo1/demo_shell.sh: enforce
===== Step7 AppArmor DENIED logs =====
[397463.022144] audit: type=1400 audit(1788400106.547:1352): apparmor="DENIED" operation="mknod" class="file" profile="/home/fnzhang/Project/examples/AppArmor/demo1/demo_app" name="/tmp/demo_forbidden.log" pid=382024 comm="demo_app" requested_mask="c" denied_mask="c" fsuid=0 ouid=0
[397463.026257] audit: type=1400 audit(1788400106.552:1353): apparmor="DENIED" operation="exec" class="file" profile="/home/fnzhang/Project/examples/AppArmor/demo1/demo_shell.sh" name="/usr/bin/cat" pid=382031 comm="demo_shell.sh" requested_mask="x" denied_mask="x" fsuid=0 ouid=0
[397463.026325] audit: type=1400 audit(1788400106.552:1354): apparmor="DENIED" operation="open" class="file" profile="/home/fnzhang/Project/examples/AppArmor/demo1/demo_shell.sh" name="/etc/locale.alias" pid=382031 comm="demo_shell.sh" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
[397463.026690] audit: type=1400 audit(1788400106.553:1355): apparmor="DENIED" operation="mknod" class="file" profile="/home/fnzhang/Project/examples/AppArmor/demo1/demo_shell.sh" name="/tmp/demo_forbidden.log" pid=382029 comm="demo_shell.sh" requested_mask="c" denied_mask="c" fsuid=0 ouid=0
[397463.026706] audit: type=1400 audit(1788400106.553:1356): apparmor="DENIED" operation="open" class="file" profile="/home/fnzhang/Project/examples/AppArmor/demo1/demo_shell.sh" name="/etc/locale.alias" pid=382029 comm="demo_shell.sh" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
===== Step8 clean resources =====
========================================
Demo finished, report file: /home/fnzhang/Project/examples/AppArmor/demo1/report.txt