1 #!/bin/bash 1 #!/bin/bash 2 # SPDX-License-Identifier: GPL-2.0 2 # SPDX-License-Identifier: GPL-2.0 3 # Copyright (C) 2018 Joe Lawrence <joe.lawrence 3 # Copyright (C) 2018 Joe Lawrence <joe.lawrence@redhat.com> 4 4 5 . $(dirname $0)/functions.sh 5 . $(dirname $0)/functions.sh 6 6 7 MOD_LIVEPATCH1=test_klp_livepatch !! 7 MOD_LIVEPATCH=test_klp_livepatch 8 MOD_LIVEPATCH2=test_klp_syscall << 9 MOD_LIVEPATCH3=test_klp_callbacks_demo << 10 MOD_REPLACE=test_klp_atomic_replace 8 MOD_REPLACE=test_klp_atomic_replace 11 9 12 setup_config 10 setup_config 13 11 14 12 15 # - load a livepatch that modifies the output 13 # - load a livepatch that modifies the output from /proc/cmdline and 16 # verify correct behavior 14 # verify correct behavior 17 # - unload the livepatch and make sure the pat 15 # - unload the livepatch and make sure the patch was removed 18 16 19 start_test "basic function patching" 17 start_test "basic function patching" 20 18 21 load_lp $MOD_LIVEPATCH1 !! 19 load_lp $MOD_LIVEPATCH 22 20 23 if [[ "$(cat /proc/cmdline)" != "$MOD_LIVEPATC !! 21 if [[ "$(cat /proc/cmdline)" != "$MOD_LIVEPATCH: this has been live patched" ]] ; then 24 echo -e "FAIL\n\n" 22 echo -e "FAIL\n\n" 25 die "livepatch kselftest(s) failed" 23 die "livepatch kselftest(s) failed" 26 fi 24 fi 27 25 28 disable_lp $MOD_LIVEPATCH1 !! 26 disable_lp $MOD_LIVEPATCH 29 unload_lp $MOD_LIVEPATCH1 !! 27 unload_lp $MOD_LIVEPATCH 30 28 31 if [[ "$(cat /proc/cmdline)" == "$MOD_LIVEPATC !! 29 if [[ "$(cat /proc/cmdline)" == "$MOD_LIVEPATCH: this has been live patched" ]] ; then 32 echo -e "FAIL\n\n" 30 echo -e "FAIL\n\n" 33 die "livepatch kselftest(s) failed" 31 die "livepatch kselftest(s) failed" 34 fi 32 fi 35 33 36 check_result "% insmod test_modules/$MOD_LIVEP !! 34 check_result "% insmod test_modules/$MOD_LIVEPATCH.ko 37 livepatch: enabling patch '$MOD_LIVEPATCH1' !! 35 livepatch: enabling patch '$MOD_LIVEPATCH' 38 livepatch: '$MOD_LIVEPATCH1': initializing pat !! 36 livepatch: '$MOD_LIVEPATCH': initializing patching transition 39 livepatch: '$MOD_LIVEPATCH1': starting patchin !! 37 livepatch: '$MOD_LIVEPATCH': starting patching transition 40 livepatch: '$MOD_LIVEPATCH1': completing patch !! 38 livepatch: '$MOD_LIVEPATCH': completing patching transition 41 livepatch: '$MOD_LIVEPATCH1': patching complet !! 39 livepatch: '$MOD_LIVEPATCH': patching complete 42 % echo 0 > /sys/kernel/livepatch/$MOD_LIVEPATC !! 40 % echo 0 > /sys/kernel/livepatch/$MOD_LIVEPATCH/enabled 43 livepatch: '$MOD_LIVEPATCH1': initializing unp !! 41 livepatch: '$MOD_LIVEPATCH': initializing unpatching transition 44 livepatch: '$MOD_LIVEPATCH1': starting unpatch !! 42 livepatch: '$MOD_LIVEPATCH': starting unpatching transition 45 livepatch: '$MOD_LIVEPATCH1': completing unpat !! 43 livepatch: '$MOD_LIVEPATCH': completing unpatching transition 46 livepatch: '$MOD_LIVEPATCH1': unpatching compl !! 44 livepatch: '$MOD_LIVEPATCH': unpatching complete 47 % rmmod $MOD_LIVEPATCH1" !! 45 % rmmod $MOD_LIVEPATCH" 48 46 49 47 50 # - load a livepatch that modifies the output 48 # - load a livepatch that modifies the output from /proc/cmdline and 51 # verify correct behavior 49 # verify correct behavior 52 # - load another livepatch and verify that bot 50 # - load another livepatch and verify that both livepatches are active 53 # - unload the second livepatch and verify tha 51 # - unload the second livepatch and verify that the first is still active 54 # - unload the first livepatch and verify none 52 # - unload the first livepatch and verify none are active 55 53 56 start_test "multiple livepatches" 54 start_test "multiple livepatches" 57 55 58 load_lp $MOD_LIVEPATCH1 !! 56 load_lp $MOD_LIVEPATCH 59 57 60 grep 'live patched' /proc/cmdline > /dev/kmsg 58 grep 'live patched' /proc/cmdline > /dev/kmsg 61 grep 'live patched' /proc/meminfo > /dev/kmsg 59 grep 'live patched' /proc/meminfo > /dev/kmsg 62 60 63 load_lp $MOD_REPLACE replace=0 61 load_lp $MOD_REPLACE replace=0 64 62 65 grep 'live patched' /proc/cmdline > /dev/kmsg 63 grep 'live patched' /proc/cmdline > /dev/kmsg 66 grep 'live patched' /proc/meminfo > /dev/kmsg 64 grep 'live patched' /proc/meminfo > /dev/kmsg 67 65 68 disable_lp $MOD_REPLACE 66 disable_lp $MOD_REPLACE 69 unload_lp $MOD_REPLACE 67 unload_lp $MOD_REPLACE 70 68 71 grep 'live patched' /proc/cmdline > /dev/kmsg 69 grep 'live patched' /proc/cmdline > /dev/kmsg 72 grep 'live patched' /proc/meminfo > /dev/kmsg 70 grep 'live patched' /proc/meminfo > /dev/kmsg 73 71 74 disable_lp $MOD_LIVEPATCH1 !! 72 disable_lp $MOD_LIVEPATCH 75 unload_lp $MOD_LIVEPATCH1 !! 73 unload_lp $MOD_LIVEPATCH 76 74 77 grep 'live patched' /proc/cmdline > /dev/kmsg 75 grep 'live patched' /proc/cmdline > /dev/kmsg 78 grep 'live patched' /proc/meminfo > /dev/kmsg 76 grep 'live patched' /proc/meminfo > /dev/kmsg 79 77 80 check_result "% insmod test_modules/$MOD_LIVEP !! 78 check_result "% insmod test_modules/$MOD_LIVEPATCH.ko 81 livepatch: enabling patch '$MOD_LIVEPATCH1' !! 79 livepatch: enabling patch '$MOD_LIVEPATCH' 82 livepatch: '$MOD_LIVEPATCH1': initializing pat !! 80 livepatch: '$MOD_LIVEPATCH': initializing patching transition 83 livepatch: '$MOD_LIVEPATCH1': starting patchin !! 81 livepatch: '$MOD_LIVEPATCH': starting patching transition 84 livepatch: '$MOD_LIVEPATCH1': completing patch !! 82 livepatch: '$MOD_LIVEPATCH': completing patching transition 85 livepatch: '$MOD_LIVEPATCH1': patching complet !! 83 livepatch: '$MOD_LIVEPATCH': patching complete 86 $MOD_LIVEPATCH1: this has been live patched !! 84 $MOD_LIVEPATCH: this has been live patched 87 % insmod test_modules/$MOD_REPLACE.ko replace= 85 % insmod test_modules/$MOD_REPLACE.ko replace=0 88 livepatch: enabling patch '$MOD_REPLACE' 86 livepatch: enabling patch '$MOD_REPLACE' 89 livepatch: '$MOD_REPLACE': initializing patchi 87 livepatch: '$MOD_REPLACE': initializing patching transition 90 livepatch: '$MOD_REPLACE': starting patching t 88 livepatch: '$MOD_REPLACE': starting patching transition 91 livepatch: '$MOD_REPLACE': completing patching 89 livepatch: '$MOD_REPLACE': completing patching transition 92 livepatch: '$MOD_REPLACE': patching complete 90 livepatch: '$MOD_REPLACE': patching complete 93 $MOD_LIVEPATCH1: this has been live patched !! 91 $MOD_LIVEPATCH: this has been live patched 94 $MOD_REPLACE: this has been live patched 92 $MOD_REPLACE: this has been live patched 95 % echo 0 > /sys/kernel/livepatch/$MOD_REPLACE/ 93 % echo 0 > /sys/kernel/livepatch/$MOD_REPLACE/enabled 96 livepatch: '$MOD_REPLACE': initializing unpatc 94 livepatch: '$MOD_REPLACE': initializing unpatching transition 97 livepatch: '$MOD_REPLACE': starting unpatching 95 livepatch: '$MOD_REPLACE': starting unpatching transition 98 livepatch: '$MOD_REPLACE': completing unpatchi 96 livepatch: '$MOD_REPLACE': completing unpatching transition 99 livepatch: '$MOD_REPLACE': unpatching complete 97 livepatch: '$MOD_REPLACE': unpatching complete 100 % rmmod $MOD_REPLACE 98 % rmmod $MOD_REPLACE 101 $MOD_LIVEPATCH1: this has been live patched !! 99 $MOD_LIVEPATCH: this has been live patched 102 % echo 0 > /sys/kernel/livepatch/$MOD_LIVEPATC !! 100 % echo 0 > /sys/kernel/livepatch/$MOD_LIVEPATCH/enabled 103 livepatch: '$MOD_LIVEPATCH1': initializing unp !! 101 livepatch: '$MOD_LIVEPATCH': initializing unpatching transition 104 livepatch: '$MOD_LIVEPATCH1': starting unpatch !! 102 livepatch: '$MOD_LIVEPATCH': starting unpatching transition 105 livepatch: '$MOD_LIVEPATCH1': completing unpat !! 103 livepatch: '$MOD_LIVEPATCH': completing unpatching transition 106 livepatch: '$MOD_LIVEPATCH1': unpatching compl !! 104 livepatch: '$MOD_LIVEPATCH': unpatching complete 107 % rmmod $MOD_LIVEPATCH1" !! 105 % rmmod $MOD_LIVEPATCH" 108 106 109 107 110 # - load a livepatch that modifies the output 108 # - load a livepatch that modifies the output from /proc/cmdline and 111 # verify correct behavior 109 # verify correct behavior 112 # - load two additional livepatches and check !! 110 # - load an atomic replace livepatch and verify that only the second is active 113 # applied !! 111 # - remove the first livepatch and verify that the atomic replace livepatch 114 # - load an atomic replace livepatch and check !! 112 # is still active 115 # disabled << 116 # - remove all livepatches besides the atomic << 117 # atomic replace livepatch is still active << 118 # - remove the atomic replace livepatch and ve 113 # - remove the atomic replace livepatch and verify that none are active 119 114 120 start_test "atomic replace livepatch" 115 start_test "atomic replace livepatch" 121 116 122 load_lp $MOD_LIVEPATCH1 !! 117 load_lp $MOD_LIVEPATCH 123 118 124 grep 'live patched' /proc/cmdline > /dev/kmsg 119 grep 'live patched' /proc/cmdline > /dev/kmsg 125 grep 'live patched' /proc/meminfo > /dev/kmsg 120 grep 'live patched' /proc/meminfo > /dev/kmsg 126 121 127 for mod in $MOD_LIVEPATCH2 $MOD_LIVEPATCH3; do << 128 load_lp "$mod" << 129 done << 130 << 131 mods=(/sys/kernel/livepatch/*) << 132 nmods=${#mods[@]} << 133 if [ "$nmods" -ne 3 ]; then << 134 die "Expecting three modules listed, f << 135 fi << 136 << 137 load_lp $MOD_REPLACE replace=1 122 load_lp $MOD_REPLACE replace=1 138 123 139 grep 'live patched' /proc/cmdline > /dev/kmsg 124 grep 'live patched' /proc/cmdline > /dev/kmsg 140 grep 'live patched' /proc/meminfo > /dev/kmsg 125 grep 'live patched' /proc/meminfo > /dev/kmsg 141 126 142 loop_until 'mods=(/sys/kernel/livepatch/*); nm !! 127 unload_lp $MOD_LIVEPATCH 143 die "Expecting only one moduled listed << 144 << 145 # These modules were disabled by the atomic re << 146 for mod in $MOD_LIVEPATCH3 $MOD_LIVEPATCH2 $MO << 147 unload_lp "$mod" << 148 done << 149 128 150 grep 'live patched' /proc/cmdline > /dev/kmsg 129 grep 'live patched' /proc/cmdline > /dev/kmsg 151 grep 'live patched' /proc/meminfo > /dev/kmsg 130 grep 'live patched' /proc/meminfo > /dev/kmsg 152 131 153 disable_lp $MOD_REPLACE 132 disable_lp $MOD_REPLACE 154 unload_lp $MOD_REPLACE 133 unload_lp $MOD_REPLACE 155 134 156 grep 'live patched' /proc/cmdline > /dev/kmsg 135 grep 'live patched' /proc/cmdline > /dev/kmsg 157 grep 'live patched' /proc/meminfo > /dev/kmsg 136 grep 'live patched' /proc/meminfo > /dev/kmsg 158 137 159 check_result "% insmod test_modules/$MOD_LIVEP !! 138 check_result "% insmod test_modules/$MOD_LIVEPATCH.ko 160 livepatch: enabling patch '$MOD_LIVEPATCH1' !! 139 livepatch: enabling patch '$MOD_LIVEPATCH' 161 livepatch: '$MOD_LIVEPATCH1': initializing pat !! 140 livepatch: '$MOD_LIVEPATCH': initializing patching transition 162 livepatch: '$MOD_LIVEPATCH1': starting patchin !! 141 livepatch: '$MOD_LIVEPATCH': starting patching transition 163 livepatch: '$MOD_LIVEPATCH1': completing patch !! 142 livepatch: '$MOD_LIVEPATCH': completing patching transition 164 livepatch: '$MOD_LIVEPATCH1': patching complet !! 143 livepatch: '$MOD_LIVEPATCH': patching complete 165 $MOD_LIVEPATCH1: this has been live patched !! 144 $MOD_LIVEPATCH: this has been live patched 166 % insmod test_modules/$MOD_LIVEPATCH2.ko << 167 livepatch: enabling patch '$MOD_LIVEPATCH2' << 168 livepatch: '$MOD_LIVEPATCH2': initializing pat << 169 livepatch: '$MOD_LIVEPATCH2': starting patchin << 170 livepatch: '$MOD_LIVEPATCH2': completing patch << 171 livepatch: '$MOD_LIVEPATCH2': patching complet << 172 % insmod test_modules/$MOD_LIVEPATCH3.ko << 173 livepatch: enabling patch '$MOD_LIVEPATCH3' << 174 livepatch: '$MOD_LIVEPATCH3': initializing pat << 175 $MOD_LIVEPATCH3: pre_patch_callback: vmlinux << 176 livepatch: '$MOD_LIVEPATCH3': starting patchin << 177 livepatch: '$MOD_LIVEPATCH3': completing patch << 178 $MOD_LIVEPATCH3: post_patch_callback: vmlinux << 179 livepatch: '$MOD_LIVEPATCH3': patching complet << 180 % insmod test_modules/$MOD_REPLACE.ko replace= 145 % insmod test_modules/$MOD_REPLACE.ko replace=1 181 livepatch: enabling patch '$MOD_REPLACE' 146 livepatch: enabling patch '$MOD_REPLACE' 182 livepatch: '$MOD_REPLACE': initializing patchi 147 livepatch: '$MOD_REPLACE': initializing patching transition 183 livepatch: '$MOD_REPLACE': starting patching t 148 livepatch: '$MOD_REPLACE': starting patching transition 184 livepatch: '$MOD_REPLACE': completing patching 149 livepatch: '$MOD_REPLACE': completing patching transition 185 livepatch: '$MOD_REPLACE': patching complete 150 livepatch: '$MOD_REPLACE': patching complete 186 $MOD_REPLACE: this has been live patched 151 $MOD_REPLACE: this has been live patched 187 % rmmod $MOD_LIVEPATCH3 !! 152 % rmmod $MOD_LIVEPATCH 188 % rmmod $MOD_LIVEPATCH2 << 189 % rmmod $MOD_LIVEPATCH1 << 190 $MOD_REPLACE: this has been live patched 153 $MOD_REPLACE: this has been live patched 191 % echo 0 > /sys/kernel/livepatch/$MOD_REPLACE/ 154 % echo 0 > /sys/kernel/livepatch/$MOD_REPLACE/enabled 192 livepatch: '$MOD_REPLACE': initializing unpatc 155 livepatch: '$MOD_REPLACE': initializing unpatching transition 193 livepatch: '$MOD_REPLACE': starting unpatching 156 livepatch: '$MOD_REPLACE': starting unpatching transition 194 livepatch: '$MOD_REPLACE': completing unpatchi 157 livepatch: '$MOD_REPLACE': completing unpatching transition 195 livepatch: '$MOD_REPLACE': unpatching complete 158 livepatch: '$MOD_REPLACE': unpatching complete 196 % rmmod $MOD_REPLACE" 159 % rmmod $MOD_REPLACE" 197 160 198 161 199 exit 0 162 exit 0
Linux® is a registered trademark of Linus Torvalds in the United States and other countries.
TOMOYO® is a registered trademark of NTT DATA CORPORATION.