Integrate parts of meta-intel-iot-security

Adds the recipes of the sub layers
 - meta-security-framework
 - meta-security-smack

Change-Id: I618608008a3b3d1d34adb6e38048110f13ac0643
Signed-off-by: José Bollo <jose.bollo@iot.bzh>

4 files changed, 190 insertions, 0 deletions

diff --git a/meta-security/recipes-test/udp-smack-test/files/udp_client.c b/meta-security/recipes-test/udp-smack-test/files/udp_client.c
new file mode 100644
index 000000000..4d3afbe6c
--- /dev/null
+++ b/meta-security/recipes-test/udp-smack-test/files/udp_client.c
@@ -0,0 +1,75 @@
+// (C) Copyright 2015 Intel Corporation

+//

+// Permission is hereby granted, free of charge, to any person obtaining a copy

+// of this software and associated documentation files (the "Software"), to deal

+// in the Software without restriction, including without limitation the rights

+// to use, copy, modify, merge, publish, distribute, sublicense, and/or sell

+// copies of the Software, and to permit persons to whom the Software is

+// furnished to do so, subject to the following conditions:

+//

+// The above copyright notice and this permission notice shall be included in

+// all copies or substantial portions of the Software.

+//

+// THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR

+// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,

+// FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE

+// AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER

+// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,

+// OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN

+// THE SOFTWARE.

+#include <sys/socket.h>

+#include <stdio.h>

+#include <netinet/in.h>

+#include <netdb.h>

+#include <string.h>

+

+int main(int argc, char* argv[])

+{

+	char* message = "hello";

+	int sock, ret;

+	struct sockaddr_in server_addr;

+	struct hostent*  host = gethostbyname("localhost");

+	char* label;

+	char* attr = "security.SMACK64IPOUT";

+	int port;

+	if (argc != 3)

+	{

+		perror("Client: Argument missing, please provide port and  label for SMACK64IPOUT");

+		return 2;

+	}

+

+	port = atoi(argv[1]);

+	label = argv[2];

+	sock = socket(AF_INET, SOCK_DGRAM,0);

+	if(sock < 0)

+	{

+		perror("Client: Socket failure");

+		return 2;

+	}

+	

+

+	if(fsetxattr(sock, attr, label, strlen(label),0) < 0)

+	{

+		perror("Client: Unable to set attribute ");

+		return 2;

+	}

+

+

+	server_addr.sin_family = AF_INET;

+	server_addr.sin_port = htons(port);

+	bcopy((char*) host->h_addr, (char*) &server_addr.sin_addr.s_addr,host->h_length);

+	bzero(&(server_addr.sin_zero),8);

+	

+	ret = sendto(sock, message, strlen(message),0,(const struct sockaddr*)&server_addr,

+			sizeof(struct sockaddr_in));

+

+	close(sock);

+	if(ret < 0)

+	{

+		perror("Client: Error sending message\n");

+		return 1;

+	}

+	

+	return 0;

+}

+

diff --git a/meta-security/recipes-test/udp-smack-test/files/udp_server.c b/meta-security/recipes-test/udp-smack-test/files/udp_server.c
new file mode 100644
index 000000000..cbab71e65
--- /dev/null
+++ b/meta-security/recipes-test/udp-smack-test/files/udp_server.c
@@ -0,0 +1,93 @@
+// (C) Copyright 2015 Intel Corporation

+//

+// Permission is hereby granted, free of charge, to any person obtaining a copy

+// of this software and associated documentation files (the "Software"), to deal

+// in the Software without restriction, including without limitation the rights

+// to use, copy, modify, merge, publish, distribute, sublicense, and/or sell

+// copies of the Software, and to permit persons to whom the Software is

+// furnished to do so, subject to the following conditions:

+//

+// The above copyright notice and this permission notice shall be included in

+// all copies or substantial portions of the Software.

+//

+// THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR

+// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,

+// FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE

+// AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER

+// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,

+// OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN

+// THE SOFTWARE.

+#include <sys/socket.h>

+#include <stdio.h>

+#include <netinet/in.h>

+#include <netdb.h>

+#include <string.h>

+

+int main(int argc, char* argv[])

+{

+	int sock,ret;

+	struct sockaddr_in server_addr, client_addr;

+	socklen_t len;

+	char message[5];

+	char* label;

+	char* attr = "security.SMACK64IPIN";

+	int port;

+

+	if(argc != 3)

+	{

+		perror("Server: Argument missing, please provide port and label for SMACK64IPIN");

+		return 2;

+	}

+	

+	port = atoi(argv[1]);

+	label = argv[2];

+

+	struct timeval timeout;

+	timeout.tv_sec = 15;

+	timeout.tv_usec = 0;

+

+	sock = socket(AF_INET,SOCK_DGRAM,0);

+	if(sock < 0)

+	{

+		perror("Server: Socket error");

+		return 2;

+	}

+	

+

+	if(fsetxattr(sock, attr, label, strlen(label), 0) < 0)

+	{

+		perror("Server: Unable to set attribute ");

+		return 2;

+	}

+

+	server_addr.sin_family = AF_INET;         

+	server_addr.sin_port = htons(port);     

+	server_addr.sin_addr.s_addr = INADDR_ANY; 

+	bzero(&(server_addr.sin_zero),8); 

+	

+

+	if(setsockopt(sock, SOL_SOCKET, SO_RCVTIMEO, &timeout, sizeof(timeout)) < 0)

+	{

+		perror("Server: Set timeout failed\n");

+		return 2;

+	}

+

+	if(bind(sock, (struct sockaddr*) &server_addr, sizeof(server_addr)) < 0)

+	{

+		perror("Server: Bind failure");

+		return 2;

+	}

+

+	len = sizeof(client_addr);

+	ret = recvfrom(sock, message, sizeof(message), 0, (struct sockaddr*)&client_addr,

+					&len);

+	close(sock);

+	if(ret < 0)

+	{

+		perror("Server: Error receiving");

+		return 1;

+

+	}

+	return 0;

+}

+

diff --git a/meta-security/recipes-test/udp-smack-test/udp-smack-test.bb b/meta-security/recipes-test/udp-smack-test/udp-smack-test.bb
new file mode 100644
index 000000000..478e3688d
--- /dev/null
+++ b/meta-security/recipes-test/udp-smack-test/udp-smack-test.bb
@@ -0,0 +1,20 @@
+SUMMARY = "Binary used to test smack udp sockets"
+DESCRIPTION = "Server and client binaries used to test smack attributes on UDP sockets"
+LICENSE = "MIT"
+LIC_FILES_CHKSUM = "file://${COMMON_LICENSE_DIR}/MIT;md5=0835ade698e0bcf8506ecda2f7b4f302"
+
+SRC_URI = "file://udp_server.c \
+           file://udp_client.c \
+" 
+
+S = "${WORKDIR}"
+do_compile() {
+    ${CC} udp_client.c ${LDFLAGS} -o udp_client
+    ${CC} udp_server.c ${LDFLAGS} -o udp_server
+}
+
+do_install() {
+    install -d ${D}${bindir}
+    install -m 0755 udp_server ${D}${bindir}
+    install -m 0755 udp_client ${D}${bindir}
+}
diff --git a/meta-security/recipes-test/udp-smack-test/udp-smack-test.bbappend b/meta-security/recipes-test/udp-smack-test/udp-smack-test.bbappend
new file mode 100644
index 000000000..bf79ba4d4
--- /dev/null
+++ b/meta-security/recipes-test/udp-smack-test/udp-smack-test.bbappend
@@ -0,0 +1,2 @@
+inherit deploy-files
+DEPLOY_FILES_FROM[target] = "${WORKDIR}/udp_client ${WORKDIR}/udp_server"