Adds support for the exec action

This commit is contained in:
Felipe Zimmerle
2017-11-05 11:46:29 -03:00
parent 7bec78a5a5
commit cb3363c7d5
9 changed files with 1026 additions and 722 deletions

61
src/actions/exec.cc Normal file
View File

@@ -0,0 +1,61 @@
/*
* ModSecurity, http://www.modsecurity.org/
* Copyright (c) 2015 Trustwave Holdings, Inc. (http://www.trustwave.com/)
*
* You may not use this file except in compliance with
* the License. You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* If any of the files related to licensing are missing or if you have any
* other questions related to licensing please contact Trustwave Holdings, Inc.
* directly using the email address security@modsecurity.org.
*
*/
#include "src/actions/exec.h"
#include <iostream>
#include <string>
#include "modsecurity/actions/action.h"
#include "modsecurity/transaction.h"
#include "modsecurity/rule.h"
#include "src/macro_expansion.h"
#include "src/utils/system.h"
#include "src/engine/lua.h"
namespace modsecurity {
namespace actions {
bool Exec::init(std::string *error) {
std::string err;
m_script = utils::find_resource(m_parser_payload, "", &err);
if (m_script.size() == 0) {
error->assign("exec: Script not found: " + err);
return false;
}
if (engine::Lua::isCompatible(m_script, &m_lua, &err) == false) {
error->assign("exec: " + err);
return false;
}
return true;
}
bool Exec::evaluate(Rule *rule, Transaction *t) {
t->debug(8, "Running script... " + m_script);
m_lua.run(t);
return true;
}
} // namespace actions
} // namespace modsecurity

51
src/actions/exec.h Normal file
View File

@@ -0,0 +1,51 @@
/*
* ModSecurity, http://www.modsecurity.org/
* Copyright (c) 2015 Trustwave Holdings, Inc. (http://www.trustwave.com/)
*
* You may not use this file except in compliance with
* the License. You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* If any of the files related to licensing are missing or if you have any
* other questions related to licensing please contact Trustwave Holdings, Inc.
* directly using the email address security@modsecurity.org.
*
*/
#include <string>
#include "modsecurity/actions/action.h"
#include "src/engine/lua.h"
#ifndef SRC_ACTIONS_EXEC_H_
#define SRC_ACTIONS_EXEC_H_
class Transaction;
namespace modsecurity {
class Transaction;
namespace actions {
class Exec : public Action {
public:
explicit Exec(std::string action)
: Action(action),
m_script("") { }
~Exec() { }
bool evaluate(Rule *rule, Transaction *transaction) override;
bool init(std::string *error) override;
private:
std::string m_script;
engine::Lua m_lua;
};
} // namespace actions
} // namespace modsecurity
#endif // SRC_ACTIONS_EXEC_H_