46 lines
2.9 KiB
Text
46 lines
2.9 KiB
Text
|
||
===== Pre‑cleanup: remove leftover profile =====
|
||
pre‑cleanup done
|
||
|
||
===== Step1 compile C elf =====
|
||
compile done: /home/fnzhang/Project/examples/AppArmor/demo1/demo_app
|
||
|
||
===== Step2 validate profile syntax =====
|
||
profile.elf syntax OK
|
||
profile.script syntax OK
|
||
|
||
===== Step3 install profile =====
|
||
profile installed & enforce enabled
|
||
|
||
===== Step4 run elf demo_app =====
|
||
[probe2] open /etc/shadow: Permission denied
|
||
[probe3] open /tmp/demo_forbidden.log: Permission denied
|
||
[probe1] write /tmp/demo_elf.log: ALLOWED
|
||
-- verify /tmp/demo_elf.log exists (allowed write):
|
||
-rw-r--r-- 1 root root 13 Sep 3 09:48 /tmp/demo_elf.log
|
||
|
||
===== Step5 run shell script =====
|
||
[probe1] shell try write /tmp/demo_sh.log
|
||
[probe1] write /tmp/demo_sh.log: ALLOWED
|
||
[probe2] shell try read /etc/shadow
|
||
/home/fnzhang/Project/examples/AppArmor/demo1/demo_shell.sh: line 8: /usr/bin/cat: Permission denied
|
||
[probe3] shell try write /tmp/demo_forbidden.log
|
||
/home/fnzhang/Project/examples/AppArmor/demo1/demo_shell.sh: line 12: /tmp/demo_forbidden.log: Permission denied
|
||
-- verify /tmp/demo_sh.log exists (allowed write):
|
||
-rw-r--r-- 1 root root 15 Sep 3 09:48 /tmp/demo_sh.log
|
||
|
||
===== Step6 aa-status snapshot =====
|
||
/home/fnzhang/Project/examples/AppArmor/demo1/demo_app: enforce
|
||
/home/fnzhang/Project/examples/AppArmor/demo1/demo_shell.sh: enforce
|
||
|
||
===== Step7 AppArmor DENIED logs =====
|
||
[397463.022144] audit: type=1400 audit(1788400106.547:1352): apparmor="DENIED" operation="mknod" class="file" profile="/home/fnzhang/Project/examples/AppArmor/demo1/demo_app" name="/tmp/demo_forbidden.log" pid=382024 comm="demo_app" requested_mask="c" denied_mask="c" fsuid=0 ouid=0
|
||
[397463.026257] audit: type=1400 audit(1788400106.552:1353): apparmor="DENIED" operation="exec" class="file" profile="/home/fnzhang/Project/examples/AppArmor/demo1/demo_shell.sh" name="/usr/bin/cat" pid=382031 comm="demo_shell.sh" requested_mask="x" denied_mask="x" fsuid=0 ouid=0
|
||
[397463.026325] audit: type=1400 audit(1788400106.552:1354): apparmor="DENIED" operation="open" class="file" profile="/home/fnzhang/Project/examples/AppArmor/demo1/demo_shell.sh" name="/etc/locale.alias" pid=382031 comm="demo_shell.sh" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
|
||
[397463.026690] audit: type=1400 audit(1788400106.553:1355): apparmor="DENIED" operation="mknod" class="file" profile="/home/fnzhang/Project/examples/AppArmor/demo1/demo_shell.sh" name="/tmp/demo_forbidden.log" pid=382029 comm="demo_shell.sh" requested_mask="c" denied_mask="c" fsuid=0 ouid=0
|
||
[397463.026706] audit: type=1400 audit(1788400106.553:1356): apparmor="DENIED" operation="open" class="file" profile="/home/fnzhang/Project/examples/AppArmor/demo1/demo_shell.sh" name="/etc/locale.alias" pid=382029 comm="demo_shell.sh" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
|
||
|
||
===== Step8 clean resources =====
|
||
|
||
========================================
|
||
Demo finished, report file: /home/fnzhang/Project/examples/AppArmor/demo1/report.txt
|