Move profile fingerprints to separate package

profile/fingerprint/const.go

@@ -0,0 +1,8 @@
+package profile
+
+// Platform identifiers
+const (
+	PlatformLinux   = "linux"
+	PlatformWindows = "windows"
+	PlatformMac     = "macos"
+)

profile/fingerprint/const_darwin.go

@@ -0,0 +1,6 @@
+package profile
+
+// OS Identifier
+const (
+	osIdentifier = PlatformMac
+)

profile/fingerprint/const_linux.go

@@ -0,0 +1,6 @@
+package profile
+
+// OS Identifier
+const (
+	osIdentifier = PlatformLinux
+)

profile/fingerprint/const_windows.go

@@ -0,0 +1,6 @@
+package profile
+
+// OS Identifier
+const (
+	osIdentifier = PlatformWindows
+)

profile/fingerprint/fingerprint.go

@@ -0,0 +1,49 @@
+package profile
+
+var (
+	fingerprintWeights = map[string]int{
+		"full_path":    2,
+		"partial_path": 1,
+		"md5_sum":      4,
+		"sha1_sum":     5,
+		"sha256_sum":   6,
+	}
+)
+
+// Fingerprint links processes to profiles.
+type Fingerprint struct {
+	OS       string
+	Type     string
+	Value    string
+	Comment  string
+	LastUsed int64
+}
+
+// MatchesOS returns whether the Fingerprint is applicable for the current OS.
+func (fp *Fingerprint) MatchesOS() bool {
+	return fp.OS == osIdentifier
+}
+
+// GetFingerprintWeight returns the weight of the given fingerprint type.
+func GetFingerprintWeight(fpType string) (weight int) {
+	weight, ok := fingerprintWeights[fpType]
+	if ok {
+		return weight
+	}
+	return 0
+}
+
+// TODO: move to profile
+/*
+// AddFingerprint adds the given fingerprint to the profile.
+func (profile *Profile) AddFingerprint(fp *Fingerprint) {
+	if fp.OS == "" {
+		fp.OS = osIdentifier
+	}
+	if fp.LastUsed == 0 {
+		fp.LastUsed = time.Now().Unix()
+	}
+
+	profile.Fingerprints = append(profile.Fingerprints, fp)
+}
+*/

profile/fingerprint/identifier_linux.go

@@ -0,0 +1,47 @@
+package profile
+
+import (
+	"path/filepath"
+	"strings"
+
+	"github.com/safing/portbase/utils"
+)
+
+// GetPathIdentifier returns the identifier from the given path
+func GetPathIdentifier(path string) string {
+	// clean path
+	// TODO: is this necessary?
+	cleanedPath, err := filepath.EvalSymlinks(path)
+	if err == nil {
+		path = cleanedPath
+	} else {
+		path = filepath.Clean(path)
+	}
+
+	splittedPath := strings.Split(path, "/")
+
+	// strip sensitive data
+	switch {
+	case strings.HasPrefix(path, "/home/"):
+		splittedPath = splittedPath[3:]
+	case strings.HasPrefix(path, "/root/"):
+		splittedPath = splittedPath[2:]
+	}
+
+	// common directories with executable
+	if i := utils.IndexOfString(splittedPath, "bin"); i > 0 {
+		splittedPath = splittedPath[i:]
+		return strings.Join(splittedPath, "/")
+	}
+	if i := utils.IndexOfString(splittedPath, "sbin"); i > 0 {
+		splittedPath = splittedPath[i:]
+		return strings.Join(splittedPath, "/")
+	}
+
+	// shorten to max 3
+	if len(splittedPath) > 3 {
+		splittedPath = splittedPath[len(splittedPath)-3:]
+	}
+
+	return strings.Join(splittedPath, "/")
+}

profile/fingerprint/identifier_linux_test.go

@@ -0,0 +1,22 @@
+package profile
+
+import "testing"
+
+func testPathID(t *testing.T, execPath, identifierPath string) {
+	result := GetPathIdentifier(execPath)
+	if result != identifierPath {
+		t.Errorf("unexpected identifier path for %s: got %s, expected %s", execPath, result, identifierPath)
+	}
+}
+
+func TestGetPathIdentifier(t *testing.T) {
+	testPathID(t, "/bin/bash", "bin/bash")
+	testPathID(t, "/home/user/bin/bash", "bin/bash")
+	testPathID(t, "/home/user/project/main", "project/main")
+	testPathID(t, "/root/project/main", "project/main")
+	testPathID(t, "/tmp/a/b/c/d/install.sh", "c/d/install.sh")
+	testPathID(t, "/lib/systemd/systemd-udevd", "lib/systemd/systemd-udevd")
+	testPathID(t, "/bundle/ruby/2.4.0/bin/passenger", "bin/passenger")
+	testPathID(t, "/usr/sbin/cron", "sbin/cron")
+	testPathID(t, "/usr/local/bin/python", "bin/python")
+}