Example #1
0
 private void checkProgramTree(String pid) {
   // Check the process tree to ensure that the given PID exists in it. If not,
   // then add it and recursively check its parents so that this process
   // eventually joins the main process tree.
   try {
     if (localCache.containsKey(pid)) {
       return;
     }
     Program processVertex = createProgramVertex(pid);
     if (processVertex == null) {
       return;
     }
     Agent tempAgent = new Agent();
     tempAgent.addAnnotation("uid", processVertex.removeAnnotation("uid"));
     tempAgent.addAnnotation("gid", processVertex.removeAnnotation("gid"));
     putVertex(processVertex);
     putVertex(tempAgent);
     putEdge(new WasControlledBy(processVertex, tempAgent));
     localCache.put(pid, processVertex);
     String ppid = processVertex.getAnnotation("ppid");
     if (Integer.parseInt(ppid) >= 0) {
       checkProgramTree(ppid);
       WasTriggeredBy triggerEdge =
           new WasTriggeredBy((Program) localCache.get(pid), (Program) localCache.get(ppid));
       putEdge(triggerEdge);
     }
   } catch (Exception exception) {
     Logger.getLogger(LinuxFUSE.class.getName()).log(Level.SEVERE, null, exception);
   }
 }
Example #2
0
  @Override
  public boolean launch(String arguments) {
    if (arguments == null) {
      return false;
    }

    try {
      localHostAddress = InetAddress.getLocalHost().getHostAddress();
      localHostName = InetAddress.getLocalHost().getHostName();
    } catch (Exception ex) {
      localHostAddress = null;
      localHostName = null;
      Logger.getLogger(LinuxFUSE.class.getName()).log(Level.WARNING, null, ex);
    }

    try {
      BufferedReader confReader = new BufferedReader(new FileReader("/etc/fuse.conf"));
      String line;
      boolean found = false;
      while ((line = confReader.readLine()) != null) {
        // Check if the line "user_allow_other" exists in the config file.
        if (line.trim().equalsIgnoreCase("user_allow_other")) {
          found = true;
          break;
        }
      }
      if (!found) {
        // File /etc/fuse.conf not configured correctly.
        return false;
      }
    } catch (Exception ex) {
      // File /etc/fuse.conf does not exist or is configured incorrectly.
      Logger.getLogger(LinuxFUSE.class.getName()).log(Level.WARNING, null, ex);
      return false;
    }

    try {
      // The argument to this reporter is the mount point for FUSE.
      mountPoint = arguments;
      localCache = Collections.synchronizedMap(new HashMap<String, AbstractVertex>());
      links = Collections.synchronizedMap(new HashMap<String, String>());

      // Create a new directory as the mount point for FUSE.
      java.io.File mount = new java.io.File(mountPoint);
      if (mount.exists()) {
        return false;
      } else {
        int exitValue = Runtime.getRuntime().exec("mkdir " + mountPoint).waitFor();
        if (exitValue != 0) {
          return false;
        }
      }

      mountPath = (new java.io.File(mountPoint)).getAbsolutePath();
      myPID = ManagementFactory.getRuntimeMXBean().getName().split("@")[0].trim();

      // Load the native library.
      System.loadLibrary("LinuxFUSE");

      // Get the system boot time from the proc filesystem.
      boottime = 0;
      try {
        BufferedReader boottimeReader = new BufferedReader(new FileReader("/proc/stat"));
        String line;
        while ((line = boottimeReader.readLine()) != null) {
          StringTokenizer st = new StringTokenizer(line);
          if (st.nextToken().equals("btime")) {
            boottime = Long.parseLong(st.nextToken()) * 1000;
            break;
          } else {
            continue;
          }
        }
        boottimeReader.close();
      } catch (Exception exception) {
        Logger.getLogger(LinuxFUSE.class.getName()).log(Level.SEVERE, null, exception);
      }

      // Create an initial root vertex which will be used as the root of the
      // process tree.
      Program rootVertex = new Program();
      rootVertex.addAnnotation("pidname", "System");
      rootVertex.addAnnotation("pid", "0");
      rootVertex.addAnnotation("ppid", "0");
      String stime_readable =
          new java.text.SimpleDateFormat(simpleDatePattern).format(new java.util.Date(boottime));
      String stime = Long.toString(boottime);
      rootVertex.addAnnotation("boottime_unix", stime);
      rootVertex.addAnnotation("boottime_simple", stime_readable);
      localCache.put("0", rootVertex);
      putVertex(rootVertex);

      String path = "/proc";
      String currentProgram;
      java.io.File folder = new java.io.File(path);
      java.io.File[] listOfFiles = folder.listFiles();

      // Build the process tree using the directories under /proc/. Directories
      // which have a numeric name represent processes.
      for (int i = 0; i < listOfFiles.length; i++) {
        if (listOfFiles[i].isDirectory()) {

          currentProgram = listOfFiles[i].getName();
          try {
            Integer.parseInt(currentProgram);
            Program processVertex = createProgramVertex(currentProgram);
            String ppid = (String) processVertex.getAnnotation("ppid");
            localCache.put(currentProgram, processVertex);
            putVertex(processVertex);
            if (Integer.parseInt(ppid) >= 0) {
              if (((Program) localCache.get(ppid) != null) && (processVertex != null)) {
                WasTriggeredBy triggerEdge =
                    new WasTriggeredBy(processVertex, (Program) localCache.get(ppid));
                putEdge(triggerEdge);
              }
            }
          } catch (Exception exception) {
            continue;
          }
        }
      }

      Runnable FUSEThread =
          new Runnable() {

            public void run() {
              try {
                // Launch FUSE from the native library.
                launchFUSE(mountPoint);
              } catch (Exception exception) {
                Logger.getLogger(LinuxFUSE.class.getName()).log(Level.SEVERE, null, exception);
              }
            }
          };
      new Thread(FUSEThread, "LinuxFUSE-Thread").start();

    } catch (Exception exception) {
      Logger.getLogger(LinuxFUSE.class.getName()).log(Level.SEVERE, null, exception);
      return false;
    }

    return true;
  }
Example #3
0
  private Program createProgramVertex(String pid) {
    // The process vertex is created using the proc filesystem.
    Program resultVertex = new Program();
    try {
      BufferedReader procReader = new BufferedReader(new FileReader("/proc/" + pid + "/status"));
      String nameline = procReader.readLine();
      procReader.readLine();
      String tgidline = procReader.readLine();
      procReader.readLine();
      String ppidline = procReader.readLine();
      String tracerpidline = procReader.readLine();
      String uidline = procReader.readLine();
      String gidline = procReader.readLine();
      procReader.close();

      BufferedReader statReader = new BufferedReader(new FileReader("/proc/" + pid + "/stat"));
      String statline = statReader.readLine();
      statReader.close();

      BufferedReader cmdlineReader =
          new BufferedReader(new FileReader("/proc/" + pid + "/cmdline"));
      String cmdline = cmdlineReader.readLine();
      cmdlineReader.close();
      if (cmdline == null) {
        cmdline = "";
      } else {
        cmdline = cmdline.replace("\0", " ");
        cmdline = cmdline.replace("\"", "'");
      }

      String stats[] = statline.split("\\s+");
      long elapsedtime = Long.parseLong(stats[21]) * 10;
      long starttime = boottime + elapsedtime;
      String stime_readable =
          new java.text.SimpleDateFormat(simpleDatePattern).format(new java.util.Date(starttime));
      String stime = Long.toString(starttime);

      StringTokenizer st1 = new StringTokenizer(nameline);
      st1.nextToken();
      String name = st1.nextToken();

      StringTokenizer st3 = new StringTokenizer(ppidline);
      st3.nextToken();
      String ppid = st3.nextToken("").trim();

      if (ppid.equals(myPID)) {
        // Return null if this was our own child process.
        return null;
      }

      StringTokenizer st5 = new StringTokenizer(uidline);
      st5.nextToken();
      String uid = st5.nextToken().trim();

      StringTokenizer st6 = new StringTokenizer(gidline);
      st6.nextToken();
      String gid = st6.nextToken().trim();

      if (refreshHost) {
        try {
          localHostAddress = InetAddress.getLocalHost().getHostAddress();
          localHostName = InetAddress.getLocalHost().getHostName();
        } catch (Exception ex) {
          localHostAddress = null;
          localHostName = null;
          Logger.getLogger(LinuxFUSE.class.getName()).log(Level.WARNING, null, ex);
        }
      }

      resultVertex.addAnnotation("pidname", name);
      resultVertex.addAnnotation("pid", pid);
      resultVertex.addAnnotation("ppid", ppid);
      resultVertex.addAnnotation("uid", uid);
      resultVertex.addAnnotation("gid", gid);
      resultVertex.addAnnotation("starttime_unix", stime);
      resultVertex.addAnnotation("starttime_simple", stime_readable);
      resultVertex.addAnnotation("group", stats[4]);
      resultVertex.addAnnotation("sessionid", stats[5]);
      resultVertex.addAnnotation("commandline", cmdline);
      resultVertex.addAnnotation("hostname", localHostName);
      resultVertex.addAnnotation("hostaddress", localHostAddress);
    } catch (Exception exception) {
      Logger.getLogger(LinuxFUSE.class.getName()).log(Level.SEVERE, null, exception);
      return null;
    }

    try {
      BufferedReader environReader =
          new BufferedReader(new FileReader("/proc/" + pid + "/environ"));
      String environ = environReader.readLine();
      environReader.close();
      if (environ != null) {
        environ = environ.replace("\0", ", ");
        environ = environ.replace("\"", "'");
        resultVertex.addAnnotation("environment", environ);
      }
    } catch (Exception exception) {
      // Unable to access the environment variables
    }
    return resultVertex;
  }