summaryrefslogtreecommitdiffstats
path: root/testsuite/systemtap.examples/general/badname.stp
diff options
context:
space:
mode:
authorJosh Stone <jistone@redhat.com>2009-09-16 15:52:17 -0700
committerJosh Stone <jistone@redhat.com>2009-09-16 15:52:17 -0700
commitac505f97f1e85d95c9fe2b0401a375c2c8cd1cb9 (patch)
tree2de027dca59eb1c2048ee4faf30b8bfc90a725f5 /testsuite/systemtap.examples/general/badname.stp
parent0fc4239f159fe56cf2637265797751427f08e09b (diff)
downloadsystemtap-steved-ac505f97f1e85d95c9fe2b0401a375c2c8cd1cb9.tar.gz
systemtap-steved-ac505f97f1e85d95c9fe2b0401a375c2c8cd1cb9.tar.xz
systemtap-steved-ac505f97f1e85d95c9fe2b0401a375c2c8cd1cb9.zip
Add the badname.stp example
This is a toy script I wrote a while back to demonstrate how SystemTap could be used to enforce filesystem naming rules.
Diffstat (limited to 'testsuite/systemtap.examples/general/badname.stp')
-rwxr-xr-xtestsuite/systemtap.examples/general/badname.stp28
1 files changed, 28 insertions, 0 deletions
diff --git a/testsuite/systemtap.examples/general/badname.stp b/testsuite/systemtap.examples/general/badname.stp
new file mode 100755
index 00000000..153e08c5
--- /dev/null
+++ b/testsuite/systemtap.examples/general/badname.stp
@@ -0,0 +1,28 @@
+#!/usr/bin/stap -g
+# badname.stp
+# Prevent the creation of files with undesirable names.
+# Source: http://blog.cuviper.com/2009/04/08/hacking-linux-filenames/
+
+# return non-zero if the filename should be blocked
+function filter:long (name:string)
+{
+ return euid() && isinstr(name, "XXX")
+}
+
+global squash_inode_permission
+probe kernel.function("may_create@fs/namei.c")
+{
+ # screen out the conditions which may_create will fail anyway
+ if ($child->d_inode || $dir->i_flags & 16) next
+
+ # check that the new file meets our naming rules
+ if (filter(kernel_string($child->d_name->name)))
+ squash_inode_permission[tid()] = 1
+}
+probe kernel.function("inode_permission@fs/namei.c").return !,
+ kernel.function("permission@fs/namei.c").return
+{
+ if (!$return && squash_inode_permission[tid()])
+ $return = -13 # -EACCES (Permission denied)
+ delete squash_inode_permission[tid()]
+}