]>
git.ipfire.org Git - thirdparty/systemd.git/blob - src/journal/test-journal-verify.c
1 /*-*- Mode: C; c-basic-offset: 8; indent-tabs-mode: nil -*-*/
4 This file is part of systemd.
6 Copyright 2012 Lennart Poettering
8 systemd is free software; you can redistribute it and/or modify it
9 under the terms of the GNU Lesser General Public License as published by
10 the Free Software Foundation; either version 2.1 of the License, or
11 (at your option) any later version.
13 systemd is distributed in the hope that it will be useful, but
14 WITHOUT ANY WARRANTY; without even the implied warranty of
15 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
16 Lesser General Public License for more details.
18 You should have received a copy of the GNU Lesser General Public License
19 along with systemd; If not, see <http://www.gnu.org/licenses/>.
27 #include "journal-file.h"
28 #include "journal-verify.h"
31 #include "terminal-util.h"
34 #define N_ENTRIES 6000
35 #define RANDOM_RANGE 77
37 static void bit_toggle(const char *fn
, uint64_t p
) {
42 fd
= open(fn
, O_RDWR
|O_CLOEXEC
);
45 r
= pread(fd
, &b
, 1, p
/8);
50 r
= pwrite(fd
, &b
, 1, p
/8);
56 static int raw_verify(const char *fn
, const char *verification_key
) {
60 r
= journal_file_open(fn
, O_RDONLY
, 0666, true, !!verification_key
, NULL
, NULL
, NULL
, &f
);
64 r
= journal_file_verify(f
, verification_key
, NULL
, NULL
, NULL
, false);
65 journal_file_close(f
);
70 int main(int argc
, char *argv
[]) {
71 char t
[] = "/tmp/journal-XXXXXX";
74 const char *verification_key
= argv
[1];
75 usec_t from
= 0, to
= 0, total
= 0;
76 char a
[FORMAT_TIMESTAMP_MAX
];
77 char b
[FORMAT_TIMESTAMP_MAX
];
78 char c
[FORMAT_TIMESPAN_MAX
];
82 /* journal_file_open requires a valid machine id */
83 if (access("/etc/machine-id", F_OK
) != 0)
84 return EXIT_TEST_SKIP
;
86 log_set_max_level(LOG_DEBUG
);
88 assert_se(mkdtemp(t
));
89 assert_se(chdir(t
) >= 0);
91 log_info("Generating...");
93 assert_se(journal_file_open("test.journal", O_RDWR
|O_CREAT
, 0666, true, !!verification_key
, NULL
, NULL
, NULL
, &f
) == 0);
95 for (n
= 0; n
< N_ENTRIES
; n
++) {
97 struct dual_timestamp ts
;
100 dual_timestamp_get(&ts
);
102 assert_se(asprintf(&test
, "RANDOM=%lu", random() % RANDOM_RANGE
));
104 iovec
.iov_base
= (void*) test
;
105 iovec
.iov_len
= strlen(test
);
107 assert_se(journal_file_append_entry(f
, &ts
, &iovec
, 1, NULL
, NULL
, NULL
) == 0);
112 journal_file_close(f
);
114 log_info("Verifying...");
116 assert_se(journal_file_open("test.journal", O_RDONLY
, 0666, true, !!verification_key
, NULL
, NULL
, NULL
, &f
) == 0);
117 /* journal_file_print_header(f); */
118 journal_file_dump(f
);
120 assert_se(journal_file_verify(f
, verification_key
, &from
, &to
, &total
, true) >= 0);
122 if (verification_key
&& JOURNAL_HEADER_SEALED(f
->header
))
123 log_info("=> Validated from %s to %s, %s missing",
124 format_timestamp(a
, sizeof(a
), from
),
125 format_timestamp(b
, sizeof(b
), to
),
126 format_timespan(c
, sizeof(c
), total
> to
? total
- to
: 0, 0));
128 journal_file_close(f
);
130 if (verification_key
) {
131 log_info("Toggling bits...");
133 assert_se(stat("test.journal", &st
) >= 0);
135 for (p
= 38448*8+0; p
< ((uint64_t) st
.st_size
* 8); p
++) {
136 bit_toggle("test.journal", p
);
138 log_info("[ %"PRIu64
"+%"PRIu64
"]", p
/ 8, p
% 8);
140 if (raw_verify("test.journal", verification_key
) >= 0)
141 log_notice(ANSI_HIGHLIGHT_RED
">>>> %"PRIu64
" (bit %"PRIu64
") can be toggled without detection." ANSI_NORMAL
, p
/ 8, p
% 8);
143 bit_toggle("test.journal", p
);
147 log_info("Exiting...");
149 assert_se(rm_rf(t
, REMOVE_ROOT
|REMOVE_PHYSICAL
) >= 0);