projects/linux·blob master · refs

154 lines · 6.2 KiB

1# SPDX-License-Identifier: GPL-2.0
2CFLAGS = -Wall
3CFLAGS += -Wno-nonnull
4CFLAGS += $(KHDR_INCLUDES)
5
6LDLIBS += -lcap
7
8ALIGNS := 0x1000 0x200000 0x1000000
9ALIGN_PIES := $(patsubst %,load_address.%,$(ALIGNS))
10ALIGN_STATIC_PIES := $(patsubst %,load_address.static.%,$(ALIGNS))
11ALIGNMENT_TESTS := $(ALIGN_PIES) $(ALIGN_STATIC_PIES)
12
13TEST_PROGS := binfmt_script.py check-exec-tests.sh
14TEST_GEN_PROGS := execveat non-regular $(ALIGNMENT_TESTS)
15TEST_GEN_PROGS_EXTENDED := false inc set-exec script-exec.inc script-noexec.inc
16TEST_GEN_FILES := execveat.symlink execveat.denatured script subdir
17# Makefile is a run-time dependency, since it's accessed by the execveat test
18TEST_FILES := Makefile
19
20TEST_GEN_PROGS += recursion-depth
21TEST_GEN_PROGS += null-argv
22TEST_GEN_PROGS += check-exec
23
24# binfmt_misc must not be reachable as an exec source or as a stacking layer,
25# or an 'F' entry can pin the instance that owns it. Unprivileged, no bpf.
26TEST_GEN_PROGS += binfmt_misc_selfpin
27
28# The interpreters an 'F' or 'B' entry pre-opens are charged against
29# UCOUNT_BINFMT_MISC_INTERPRETERS. Unprivileged, no bpf.
30TEST_GEN_PROGS += binfmt_misc_interplimit
31
32# 'D' (register disabled) binfmt_misc test: an entry that exists but does
33# not dispatch until it is enabled. Static magic entry, no bpf toolchain.
34TEST_GEN_PROGS += binfmt_misc_disabled
35
36# Static ('T' flag) transparent binfmt_misc test; the asserting interpreter
37# is shared with the bpf harness's transparent case. No bpf toolchain needed.
38TEST_GEN_PROGS += binfmt_misc_transparent
39TEST_GEN_FILES += binfmt_transparent_interp
40
41# 'L' (loader substitution) binfmt_misc test: the payload runs as the main
42# image with a copy of the system loader substituted for its PT_INTERP and
43# asserts the native identity from inside; the static build proves the
44# override is dropped for a binary without PT_INTERP.
45TEST_GEN_PROGS += binfmt_misc_loader
46TEST_GEN_FILES += binfmt_loader_payload binfmt_loader_payload_static
47
48# Only ASCII punctuation delimits the fields of a register string, so a new
49# flag character cannot change which strings register. No bpf toolchain.
50TEST_GEN_PROGS += binfmt_misc_delim
51
52# binfmt_misc bpf-backed ('B') handler test: a libbpf harness plus its
53# struct_ops objects and the test interpreter/app it routes between. Only
54# built when clang, bpftool, the vmlinux BTF and libbpf are all present
55# (HAVE_BPF_TOOLCHAIN=y forces it) so the other exec selftests don't grow
56# a bpf toolchain dependency.
57CLANG ?= clang
58BPFTOOL ?= bpftool
59VMLINUX_BTF ?= /sys/kernel/btf/vmlinux
60HAVE_BPF_TOOLCHAIN ?= $(shell command -v $(CLANG) >/dev/null 2>&1 && \
61 command -v $(BPFTOOL) >/dev/null 2>&1 && \
62 test -r $(VMLINUX_BTF) && \
63 pkg-config --exists libbpf 2>/dev/null && echo y)
64ifeq ($(HAVE_BPF_TOOLCHAIN),y)
65TEST_GEN_PROGS += binfmt_misc_bpf
66TEST_GEN_FILES += bpf_interp.bpf.o nix_origin.bpf.o transparent.bpf.o
67TEST_GEN_FILES += loader.bpf.o interp_bind.bpf.o
68TEST_GEN_FILES += binfmt_bpf_interp binfmt_bpf_app binfmt_bind_interp
69else
70$(info exec selftests: skipping binfmt_misc_bpf, needs clang, bpftool, vmlinux BTF and libbpf)
71endif
72
73EXTRA_CLEAN := $(OUTPUT)/subdir.moved $(OUTPUT)/execveat.moved $(OUTPUT)/xxxxx* \
74 $(OUTPUT)/S_I*.test
75
76LOCAL_HDRS += binfmt_misc_common.h
77
78include ../lib.mk
79
80CHECK_EXEC_SAMPLES := $(top_srcdir)/samples/check-exec
81
82$(OUTPUT)/subdir:
83 mkdir -p $@
84$(OUTPUT)/script: Makefile
85 echo '#!/bin/bash' > $@
86 echo 'exit $$*' >> $@
87 chmod +x $@
88$(OUTPUT)/execveat.symlink: $(OUTPUT)/execveat
89 cd $(OUTPUT) && ln -s -f $(shell basename $<) $(shell basename $@)
90$(OUTPUT)/execveat.denatured: $(OUTPUT)/execveat
91 cp $< $@
92 chmod -x $@
93$(OUTPUT)/load_address.0x%: load_address.c
94 $(CC) $(CFLAGS) $(LDFLAGS) -Wl,-z,max-page-size=$(lastword $(subst ., ,$@)) \
95 -fPIE -pie $< -o $@
96$(OUTPUT)/load_address.static.0x%: load_address.c
97 $(CC) $(CFLAGS) $(LDFLAGS) -Wl,-z,max-page-size=$(lastword $(subst ., ,$@)) \
98 -fPIE -static-pie $< -o $@
99$(OUTPUT)/false: false.c
100 $(CC) $(CFLAGS) $(LDFLAGS) -static $< -o $@
101$(OUTPUT)/inc: $(CHECK_EXEC_SAMPLES)/inc.c
102 $(CC) $(CFLAGS) $(LDFLAGS) $< -o $@
103$(OUTPUT)/set-exec: $(CHECK_EXEC_SAMPLES)/set-exec.c
104 $(CC) $(CFLAGS) $(LDFLAGS) $< -o $@
105$(OUTPUT)/script-exec.inc: $(CHECK_EXEC_SAMPLES)/script-exec.inc
106 cp $< $@
107$(OUTPUT)/script-noexec.inc: $(CHECK_EXEC_SAMPLES)/script-noexec.inc
108 cp $< $@
109
110# Reuses setup_userns()/write_file() from the filesystems selftests. Their
111# wrappers.h wants the uapi headers, so ask for them here rather than widening
112# CFLAGS for every program in this directory.
113$(OUTPUT)/binfmt_misc_selfpin: CFLAGS += $(TOOLS_INCLUDES)
114$(OUTPUT)/binfmt_misc_selfpin: ../filesystems/utils.c
115$(OUTPUT)/binfmt_misc_interplimit: CFLAGS += $(TOOLS_INCLUDES)
116$(OUTPUT)/binfmt_misc_interplimit: ../filesystems/utils.c
117
118# --- binfmt_misc bpf ('B') handler test ---------------------------------
119# The struct_ops bpf objects are compiled against the running kernel's BTF.
120# CLANG/BPFTOOL/VMLINUX_BTF are set above next to the toolchain check;
121# override LIBBPF_CFLAGS/LDLIBS to point at a libbpf install.
122BPF_CFLAGS ?= -I$(OUTPUT)
123LIBBPF_CFLAGS ?=
124LIBBPF_LDLIBS ?= -lbpf -lelf -lz
125
126$(OUTPUT)/vmlinux.h:
127 $(BPFTOOL) btf dump file $(VMLINUX_BTF) format c > $@
128
129# BPF_NO_KFUNC_PROTOTYPES: the programs declare the kfuncs they use themselves.
130$(OUTPUT)/%.bpf.o: %.bpf.c $(OUTPUT)/vmlinux.h
131 $(CLANG) -g -O2 -target bpf -mcpu=v3 -DBPF_NO_KFUNC_PROTOTYPES \
132 $(BPF_CFLAGS) $(LIBBPF_CFLAGS) -c $< -o $@
133
134$(OUTPUT)/binfmt_misc_bpf: binfmt_misc_bpf.c binfmt_misc_common.h
135 $(CC) $(CFLAGS) $(LIBBPF_CFLAGS) $(LDFLAGS) $< $(LIBBPF_LDLIBS) -o $@
136
137$(OUTPUT)/binfmt_bpf_interp: binfmt_bpf_interp.c
138 $(CC) $(CFLAGS) $(LDFLAGS) $< -o $@
139
140$(OUTPUT)/binfmt_bind_interp: binfmt_bind_interp.c
141 $(CC) $(CFLAGS) $(LDFLAGS) $< -o $@
142
143$(OUTPUT)/binfmt_loader_payload: binfmt_loader_payload.c binfmt_misc_common.h
144 $(CC) $(CFLAGS) $(LDFLAGS) -fPIE -pie $< -o $@
145
146$(OUTPUT)/binfmt_loader_payload_static: binfmt_loader_payload.c binfmt_misc_common.h
147 $(CC) $(CFLAGS) $(LDFLAGS) -static $< -o $@
148
149# PT_INTERP is set to the literal "$ORIGIN/binfmt_bpf_interp"; the nix_origin
150# handler resolves it relative to the binary at run time.
151$(OUTPUT)/binfmt_bpf_app: binfmt_bpf_app.c
152 $(CC) $(CFLAGS) $(LDFLAGS) -Wl,--dynamic-linker,'$$ORIGIN/binfmt_bpf_interp' $< -o $@
153
154EXTRA_CLEAN += $(OUTPUT)/vmlinux.h $(OUTPUT)/*.bpf.o