anti
8dd4c78b33
Rename the container-side logging module decnet_logging → syslog_bridge (canonical at templates/syslog_bridge.py, synced into each template by the deployer). Drop the stale per-template copies; setuptools find was picking them up anyway. Swap useradd/USER/chown "decnet" for "logrelay" so no obvious token appears in the rendered container image. Apply the same cloaking pattern to the telnet template that SSH got: syslog pipe moves to /run/systemd/journal/syslog-relay and the relay is cat'd via exec -a "systemd-journal-fwd". rsyslog.d conf rename 99-decnet.conf → 50-journal-forward.conf. SSH capture script: /var/decnet/captured → /var/lib/systemd/coredump (real systemd path), logger tag decnet-capture → systemd-journal. Compose volume updated to match the new in-container quarantine path. SD element ID shifts decnet@55555 → relay@55555; synced across collector, parser, sniffer, prober, formatter, tests, and docs so the host-side pipeline still matches what containers emit.
190 lines
6.6 KiB
Python
190 lines
6.6 KiB
Python
"""
|
|
Tests for templates/postgres/server.py
|
|
|
|
Covers the PostgreSQL startup / MD5-auth handshake happy path and regression
|
|
tests for zero/tiny/huge msg_len in both the startup and auth states.
|
|
"""
|
|
|
|
import importlib.util
|
|
import struct
|
|
import sys
|
|
from unittest.mock import MagicMock
|
|
|
|
import pytest
|
|
from hypothesis import given, settings
|
|
from hypothesis import strategies as st
|
|
|
|
from .conftest import _FUZZ_SETTINGS, make_fake_syslog_bridge, run_with_timeout
|
|
|
|
|
|
# ── Helpers ───────────────────────────────────────────────────────────────────
|
|
|
|
def _load_postgres():
|
|
for key in list(sys.modules):
|
|
if key in ("postgres_server", "syslog_bridge"):
|
|
del sys.modules[key]
|
|
sys.modules["syslog_bridge"] = make_fake_syslog_bridge()
|
|
spec = importlib.util.spec_from_file_location("postgres_server", "templates/postgres/server.py")
|
|
mod = importlib.util.module_from_spec(spec)
|
|
spec.loader.exec_module(mod)
|
|
return mod
|
|
|
|
|
|
def _make_protocol(mod):
|
|
proto = mod.PostgresProtocol()
|
|
transport = MagicMock()
|
|
written: list[bytes] = []
|
|
transport.write.side_effect = written.append
|
|
proto.connection_made(transport)
|
|
return proto, transport, written
|
|
|
|
|
|
def _startup_msg(user: str = "postgres", database: str = "postgres") -> bytes:
|
|
"""Build a valid PostgreSQL startup message."""
|
|
params = f"user\x00{user}\x00database\x00{database}\x00\x00".encode()
|
|
protocol = struct.pack(">I", 0x00030000)
|
|
body = protocol + params
|
|
msg_len = struct.pack(">I", 4 + len(body))
|
|
return msg_len + body
|
|
|
|
|
|
def _ssl_request() -> bytes:
|
|
return struct.pack(">II", 8, 80877103)
|
|
|
|
|
|
def _password_msg(password: str = "wrongpass") -> bytes:
|
|
pw = password.encode() + b"\x00"
|
|
return b"p" + struct.pack(">I", 4 + len(pw)) + pw
|
|
|
|
|
|
@pytest.fixture
|
|
def postgres_mod():
|
|
return _load_postgres()
|
|
|
|
|
|
# ── Happy path ────────────────────────────────────────────────────────────────
|
|
|
|
def test_ssl_request_returns_N(postgres_mod):
|
|
proto, _, written = _make_protocol(postgres_mod)
|
|
proto.data_received(_ssl_request())
|
|
assert b"N" in b"".join(written)
|
|
|
|
|
|
def test_startup_sends_auth_challenge(postgres_mod):
|
|
proto, _, written = _make_protocol(postgres_mod)
|
|
proto.data_received(_startup_msg())
|
|
resp = b"".join(written)
|
|
# AuthenticationMD5Password = 'R' + len(12) + type(5) + salt(4)
|
|
assert resp[0:1] == b"R"
|
|
|
|
|
|
def test_startup_logs_username():
|
|
mod = _load_postgres()
|
|
log_mock = sys.modules["syslog_bridge"]
|
|
proto, _, _ = _make_protocol(mod)
|
|
proto.data_received(_startup_msg(user="attacker"))
|
|
log_mock.syslog_line.assert_called()
|
|
calls_str = str(log_mock.syslog_line.call_args_list)
|
|
assert "attacker" in calls_str
|
|
|
|
|
|
def test_state_becomes_auth_after_startup(postgres_mod):
|
|
proto, _, _ = _make_protocol(postgres_mod)
|
|
proto.data_received(_startup_msg())
|
|
assert proto._state == "auth"
|
|
|
|
|
|
def test_password_triggers_close(postgres_mod):
|
|
proto, transport, _ = _make_protocol(postgres_mod)
|
|
proto.data_received(_startup_msg())
|
|
transport.reset_mock()
|
|
proto.data_received(_password_msg())
|
|
transport.close.assert_called()
|
|
|
|
|
|
def test_partial_startup_waits(postgres_mod):
|
|
proto, transport, _ = _make_protocol(postgres_mod)
|
|
proto.data_received(b"\x00\x00\x00") # only 3 bytes — not enough for msg_len
|
|
transport.close.assert_not_called()
|
|
assert proto._state == "startup"
|
|
|
|
|
|
def test_connection_lost_does_not_raise(postgres_mod):
|
|
proto, _, _ = _make_protocol(postgres_mod)
|
|
proto.connection_lost(None)
|
|
|
|
|
|
# ── Regression: startup state bad msg_len ────────────────────────────────────
|
|
|
|
def test_zero_msg_len_startup_closes(postgres_mod):
|
|
proto, transport, _ = _make_protocol(postgres_mod)
|
|
run_with_timeout(proto.data_received, b"\x00\x00\x00\x00")
|
|
transport.close.assert_called()
|
|
|
|
|
|
def test_msg_len_4_startup_closes(postgres_mod):
|
|
proto, transport, _ = _make_protocol(postgres_mod)
|
|
# msg_len=4 means zero-byte body — too small for startup (needs protocol version)
|
|
run_with_timeout(proto.data_received, struct.pack(">I", 4) + b"\x00" * 4)
|
|
transport.close.assert_called()
|
|
|
|
|
|
def test_msg_len_7_startup_closes(postgres_mod):
|
|
proto, transport, _ = _make_protocol(postgres_mod)
|
|
run_with_timeout(proto.data_received, struct.pack(">I", 7) + b"\x00" * 7)
|
|
transport.close.assert_called()
|
|
|
|
|
|
def test_huge_msg_len_startup_closes(postgres_mod):
|
|
proto, transport, _ = _make_protocol(postgres_mod)
|
|
run_with_timeout(proto.data_received, struct.pack(">I", 0x7FFFFFFF) + b"\x00" * 4)
|
|
transport.close.assert_called()
|
|
|
|
|
|
# ── Regression: auth state bad msg_len ───────────────────────────────────────
|
|
|
|
def test_zero_msg_len_auth_closes(postgres_mod):
|
|
proto, transport, _ = _make_protocol(postgres_mod)
|
|
proto.data_received(_startup_msg())
|
|
transport.reset_mock()
|
|
# 'p' + msg_len=0
|
|
run_with_timeout(proto.data_received, b"p" + struct.pack(">I", 0))
|
|
transport.close.assert_called()
|
|
|
|
|
|
def test_msg_len_1_auth_closes(postgres_mod):
|
|
proto, transport, _ = _make_protocol(postgres_mod)
|
|
proto.data_received(_startup_msg())
|
|
transport.reset_mock()
|
|
run_with_timeout(proto.data_received, b"p" + struct.pack(">I", 1) + b"\x00" * 5)
|
|
transport.close.assert_called()
|
|
|
|
|
|
def test_huge_msg_len_auth_closes(postgres_mod):
|
|
proto, transport, _ = _make_protocol(postgres_mod)
|
|
proto.data_received(_startup_msg())
|
|
transport.reset_mock()
|
|
run_with_timeout(proto.data_received, b"p" + struct.pack(">I", 0x7FFFFFFF) + b"\x00" * 5)
|
|
transport.close.assert_called()
|
|
|
|
|
|
# ── Fuzz ──────────────────────────────────────────────────────────────────────
|
|
|
|
@pytest.mark.fuzz
|
|
@given(data=st.binary(min_size=0, max_size=512))
|
|
@settings(**_FUZZ_SETTINGS)
|
|
def test_fuzz_startup_state(data):
|
|
mod = _load_postgres()
|
|
proto, _, _ = _make_protocol(mod)
|
|
run_with_timeout(proto.data_received, data)
|
|
|
|
|
|
@pytest.mark.fuzz
|
|
@given(data=st.binary(min_size=0, max_size=512))
|
|
@settings(**_FUZZ_SETTINGS)
|
|
def test_fuzz_auth_state(data):
|
|
mod = _load_postgres()
|
|
proto, _, _ = _make_protocol(mod)
|
|
proto.data_received(_startup_msg())
|
|
run_with_timeout(proto.data_received, data)
|