133 lines
6.2 KiB
C
133 lines
6.2 KiB
C
/* svc_power_authtest.c — meow_svc_power II 期 IPC 鉴权逻辑 宿主自测（本程序非生产代码）。
|
||
*
|
||
* 通过 #include 生产源文件（meow_svc_power.c，用 #define main 改名避免入口冲突），在同一 TU 内直接
|
||
* 访问其 FILE-STATIC 函数 classify_exe / is_system_action / is_sys_identity / is_read_level，
|
||
* 验证鉴别/分级策略的决策表。
|
||
* 覆盖「真机需特权路径 /proc/pid/exe 判定」之外的所有纯逻辑分支；真实 pid→exe 解析留真机验证。
|
||
*
|
||
* 用途：dev docs 复现级宿主自测；不进入固件/不部署。用法：
|
||
* cc -Wall -Wextra -I../meow_launcherd svc_power_authtest.c -o svc_power_authtest && ./svc_power_authtest
|
||
*/
|
||
#define main meow_svc_power_prod_main_unused
|
||
#include "meow_svc_power.c"
|
||
#undef main
|
||
|
||
#include <stdio.h>
|
||
#include <string.h>
|
||
#include <stdlib.h>
|
||
|
||
static int g_fail = 0;
|
||
#define CHECK(cond) do { if (!(cond)) { printf(" FAIL: %s (line %d)\n", #cond, __LINE__); g_fail++; } \
|
||
else { printf(" ok : %s\n", #cond); } } while (0)
|
||
|
||
int main(void)
|
||
{
|
||
caller_t c;
|
||
|
||
printf("== classify_exe ==\n");
|
||
memset(&c, 0, sizeof c);
|
||
classify_exe("/usr/data/mnt/sd_0/MeowAPPs/os.meow.tst/meow", &c);
|
||
CHECK(c.kind == CALL_PKG && strcmp(c.pkg, "os.meow.tst") == 0);
|
||
|
||
memset(&c, 0, sizeof c);
|
||
classify_exe("/usr/data/mnt/sd_0/MeowAPPs/com.example.tool/meow", &c);
|
||
CHECK(c.kind == CALL_PKG && strcmp(c.pkg, "com.example.tool") == 0);
|
||
|
||
memset(&c, 0, sizeof c);
|
||
classify_exe("/usr/data/mnt/sd_0/MeowAPPs/os.meow.tst/sub/meow", &c);
|
||
CHECK(c.kind == CALL_PKG && strcmp(c.pkg, "os.meow.tst") == 0); /* 取首段目录 */
|
||
|
||
memset(&c, 0, sizeof c);
|
||
classify_exe("/usr/bin/meow_launcherd", &c);
|
||
CHECK(c.kind == CALL_SYS && strcmp(c.pkg, "os.meow.launcher") == 0);
|
||
|
||
memset(&c, 0, sizeof c);
|
||
classify_exe("/usr/bin/meow_svc_power", &c);
|
||
CHECK(c.kind == CALL_SYS); /* /usr/bin/meow_* 前缀批准 */
|
||
|
||
/* 2B 精确绑定：仅精确命中登记路径（meowpanel.conf 的 exec）才予 os.meow.panel。
|
||
* 旧启发式（路径含 /MeowPanel/ 或 meowpanel 子串）会被过宽放行，今已收紧为精确路径登记。 */
|
||
memset(&c, 0, sizeof c);
|
||
classify_exe("/usr/data/mnt/sd_0/MeowOS/opt/MeowPanel/meowpanel", &c);
|
||
CHECK(c.kind == CALL_SYS && strcmp(c.pkg, "os.meow.panel") == 0);
|
||
|
||
/* 反例：路径含 /MeowPanel/ 或 meowpanel 子串但并非精确登记路径 → 不再放行（CALL_OTHER） */
|
||
memset(&c, 0, sizeof c);
|
||
classify_exe("/usr/data/mnt/sd_0/MeowOS/opt/MeowPanel/backend/meowpanel", &c);
|
||
CHECK(c.kind == CALL_OTHER);
|
||
memset(&c, 0, sizeof c);
|
||
classify_exe("/usr/data/mnt/sd_0/MeowOS/opt/MeowPanel/evil", &c);
|
||
CHECK(c.kind == CALL_OTHER);
|
||
memset(&c, 0, sizeof c);
|
||
classify_exe("/usr/bin/meowpanel_fake", &c);
|
||
CHECK(c.kind == CALL_OTHER); /* 含 "meowpanel" 但非 /usr/bin/meow_* 精确前缀、非登记路径 */
|
||
|
||
memset(&c, 0, sizeof c);
|
||
classify_exe("/usr/data/meow/settings_tool", &c);
|
||
CHECK(c.kind == CALL_SYS); /* /usr/data/meow/ 批准 */
|
||
|
||
memset(&c, 0, sizeof c);
|
||
classify_exe("/usr/bin/bash", &c);
|
||
CHECK(c.kind == CALL_OTHER);
|
||
memset(&c, 0, sizeof c);
|
||
classify_exe("/bin/sh", &c);
|
||
CHECK(c.kind == CALL_OTHER);
|
||
memset(&c, 0, sizeof c);
|
||
classify_exe("/usr/data/mnt/sd_0/MeowAPPs/justadirty/k", &c);
|
||
CHECK(c.kind == CALL_PKG && strcmp(c.pkg, "justadirty") == 0); /* 第三方包（非 os.meow.*） */
|
||
CHECK(is_sys_identity(&c) == 0); /* 非系统身份 → 系统动作被拒 */
|
||
|
||
printf("== is_sys_identity ==\n");
|
||
c.kind = CALL_PKG; snprintf(c.pkg, sizeof c.pkg, "%s", "os.meow.tst");
|
||
CHECK(is_sys_identity(&c) == 1);
|
||
c.kind = CALL_PKG; snprintf(c.pkg, sizeof c.pkg, "%s", "com.example.tool");
|
||
CHECK(is_sys_identity(&c) == 0);
|
||
c.kind = CALL_SYS; snprintf(c.pkg, sizeof c.pkg, "%s", "os.meow.launcher");
|
||
CHECK(is_sys_identity(&c) == 1);
|
||
c.kind = CALL_OTHER; c.pkg[0] = 0;
|
||
CHECK(is_sys_identity(&c) == 0);
|
||
|
||
printf("== is_system_action ==\n");
|
||
CHECK(is_system_action(POWER_SHUTDOWN) == 1);
|
||
CHECK(is_system_action(POWER_REBOOT) == 1);
|
||
CHECK(is_system_action(POWER_UPGRADE) == 1);
|
||
CHECK(is_system_action(POWER_BACK_HIBY) == 1);
|
||
CHECK(is_system_action(POWER_SET_DEFAULT_MEOW) == 1);
|
||
CHECK(is_system_action(POWER_SET_DEFAULT_HIBY) == 1);
|
||
CHECK(is_system_action(POWER_STATUS) == 0);
|
||
CHECK(is_system_action(POWER_BATTERY) == 0);
|
||
CHECK(is_system_action(POWER_REBOOT_REASON) == 0);
|
||
CHECK(is_system_action(POWER_UPGRADE_STATUS) == 0);
|
||
CHECK(is_system_action(POWER_SCREEN) == 0);
|
||
CHECK(is_system_action(POWER_DAC) == 0);
|
||
|
||
printf("== is_read_level ==\n");
|
||
m_power_action_t a;
|
||
memset(&a, 0, sizeof a);
|
||
|
||
/* 读级（只读无副作用）→ 1：放宽到任意调用者 */
|
||
a.cmd = POWER_STATUS; CHECK(is_read_level(&a) == 1);
|
||
a.cmd = POWER_BATTERY; CHECK(is_read_level(&a) == 1);
|
||
a.cmd = POWER_REBOOT_REASON; CHECK(is_read_level(&a) == 1);
|
||
a.cmd = POWER_UPGRADE_STATUS; CHECK(is_read_level(&a) == 1);
|
||
|
||
/* DAC status(flag=2) 为读级；on/off(flag=0/1) 为动作级 */
|
||
a.cmd = POWER_DAC; a.flag = 2; CHECK(is_read_level(&a) == 1); /* dac status */
|
||
a.cmd = POWER_DAC; a.flag = 0; CHECK(is_read_level(&a) == 0); /* dac off */
|
||
a.cmd = POWER_DAC; a.flag = 1; CHECK(is_read_level(&a) == 0); /* dac on */
|
||
|
||
/* 动作级（有副作用/系统级）→ 0：走现有鉴权 */
|
||
a.cmd = POWER_SCREEN; a.flag = 0; CHECK(is_read_level(&a) == 0); /* screen off/on */
|
||
a.cmd = POWER_SCREEN; a.flag = 2; CHECK(is_read_level(&a) == 0); /* screen timeout 写 settings */
|
||
a.cmd = POWER_SHUTDOWN; CHECK(is_read_level(&a) == 0);
|
||
a.cmd = POWER_REBOOT; CHECK(is_read_level(&a) == 0);
|
||
a.cmd = POWER_UPGRADE; CHECK(is_read_level(&a) == 0);
|
||
a.cmd = POWER_BACK_HIBY; CHECK(is_read_level(&a) == 0);
|
||
a.cmd = POWER_SET_DEFAULT_MEOW; CHECK(is_read_level(&a) == 0);
|
||
a.cmd = POWER_SET_DEFAULT_HIBY; CHECK(is_read_level(&a) == 0);
|
||
|
||
if (g_fail) { printf("\nAUTH TEST: %d FAIL\n", g_fail); return 1; }
|
||
printf("\nAUTH TEST: ALL PASS\n");
|
||
return 0;
|
||
}
|