adulau/aha
1
0
Fork 0
mirror of https://github.com/adulau/aha.git synced 2024-12-27 19:26:25 +00:00
Code Issues Projects Releases Packages Wiki Activity

Temporary code to randomly insult user when vi is started multiple times

Browse source
This commit is contained in:
Gerard Wagener 2010-01-08 22:23:41 +01:00
parent cfaae0fe35
commit 16989baa5f
1 changed files with 8 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

11
aha/aha.py
View file

@ -2,7 +2,7 @@
#Core of the adaptive honeypot alternative #Core of the adaptive honeypot alternative
# (c) Gerard Wagener # (c) Gerard Wagener
#License GPL #License GPL
import os,sys import os,sys,random
from pyinotify import * from pyinotify import *
from ctypes import * from ctypes import *
KERNEL_OUT="/home/gerard/kernel/linux-2.6/out" KERNEL_OUT="/home/gerard/kernel/linux-2.6/out"
@ -22,7 +22,6 @@ class KERNEL_ERRORS():
self.evec = (EPERM,ENOENT,EIO,ENOMEM,EACESS,EFAULT,EPIPE,ETXTBSY) self.evec = (EPERM,ENOENT,EIO,ENOMEM,EACESS,EFAULT,EPIPE,ETXTBSY)
class ReplyMessage(Structure): class ReplyMessage(Structure):
_fields_ = [ ("block" , c_int), ("exitcode" , c_int), _fields_ = [ ("block" , c_int), ("exitcode" , c_int),
("substitue" ,c_int),("insult" , c_int) ] ("substitue" ,c_int),("insult" , c_int) ]
@ -61,15 +60,21 @@ class KernelEvents(ProcessEvent):
return msg return msg
def decision(self,filekey,msg): def decision(self,filekey,msg):
insultmaxidx = 3
print msg print msg
try: try:
command = msg['file'][0] command = msg['file'][0]
print "Got command: ",command print "Got command: ",command
if msg['file'][0] == '/usr/bin/vi': if msg['file'][0] == '/usr/bin/bvi':
self.create_message(filekey, block=1, self.create_message(filekey, block=1,
exitcode=KERNEL_ERRORS.ENOMEM, exitcode=KERNEL_ERRORS.ENOMEM,
insult = 0, substitue=0) insult = 0, substitue=0)
return return
if msg['file'][0] == '/usr/bin/vi':
# The index 0 is reserved
idx = random.randint(1,insultmaxidx)
self.create_message(filekey, block=0, exitcode=0, insult=idx, substitue=0)
return
except KeyError,e: except KeyError,e:
pass pass
except IndexError,w: except IndexError,w: