code wiki / _hdl_build / nx_hostop_dns_gate.nx
`nx_hostop_dns_gate.nx` source

1// nx_hostop_dns_gate.nx -- R6 PROOF: the host-operator translates the publisher's pub_dns directive into the host
2// apply command (fail-closed on malformed). File-based. license_tier: ORIGINAL  expect_exit: 0
3import "nx_syscalls.nx"
4import "nx_hostop.nx"
5import "nx_runpath.nx"
6
7func g_w(s: *u8) -> i64 { var n: i64=0; while s[n]!=(0 as u8){n=n+1} sys_write(1,s,n); return 0 }
8func g_n(v: i64) -> i64 { var m: i64=v; if m<0{g_w("-" as *u8);m=0-m} let t:*u8=sys_mmap(24); var k:i64=0; if m==0{t[0]=48 as u8;k=1} while m>0{t[k]=(48+(m%10)) as u8;m=m/10;k=k+1} var i:i64=0; let o:*u8=sys_mmap(24); while i<k{o[i]=t[k-1-i];i=i+1} sys_write(1,o,k); return 0 }
9func g_row(id: *u8, ok: i64, pass: *i64) -> i64 { g_w("  " as *u8); g_w(id); g_w(": " as *u8); if ok==1 { g_w("OK\n" as *u8); pass[0]=pass[0]+1 } else { g_w("FAIL\n" as *u8) } return 0 }
10func sv_write(path: *u8, content: *u8) -> i64 { let fd: i64 = sys_openat_wr(path, 0x1a4); if fd<0 { return 0 } var n: i64=0; while content[n]!=(0 as u8){n=n+1} sys_write(fd, content, n); sys_close(fd); return 1 }
11
12func main() -> i64 {
13    let pass: *i64 = sys_mmap(8) as *i64; pass[0]=0
14    g_w("=== NX-HOSTOP-DNS GATE (translate pub_dns directive -> host apply command; fail-closed) ===\n" as *u8)
15    let wsid: *u8 = sys_mmap(64); rp_wsid(wsid); rp_ensure(wsid)
16    let D: *u8 = sys_mmap(512); rp_path(wsid, "hod" as *u8, D); __syscall(83, D as i64, 493, 0, 0, 0, 0)
17
18    let good: *u8 = sys_mmap(700); pub_join(D, "good.conf" as *u8, good)
19    sv_write(good, "publish-endpoint domain=nishifamily.com host=192.168.8.240 port=443 proto=https" as *u8)
20    let bad: *u8 = sys_mmap(700); pub_join(D, "bad.conf" as *u8, bad)
21    sv_write(bad, "publish-endpoint domain=nishifamily.com proto=https" as *u8)   // missing host=/port=
22
23    let out: *u8 = sys_mmap(512)
24    let ng: i64 = hostop_dns_apply(good, out, 512)
25    let cmd_ok: i64 = ((ng > 0) as i64) & (pub_substr(out, ng, "nx_aw_hostctl setdns" as *u8)) & (pub_substr(out, ng, "nishifamily.com" as *u8)) & (pub_substr(out, ng, "192.168.8.240" as *u8))
26    let nb: i64 = hostop_dns_apply(bad, out, 512)
27
28    g_w("  good_len=" as *u8); g_n(ng); g_w(" cmd='" as *u8); if ng>0 { sys_write(1, out, ng) } g_w("'  bad=" as *u8); g_n(nb); g_w("\n" as *u8)
29    g_row("translate a well-formed directive into the host apply command (setdns + domain + host)" as *u8, cmd_ok, pass)
30    g_row("FAIL-CLOSED: a malformed directive (missing host/port) is rejected (<0)" as *u8, (nb < 0) as i64, pass)
31
32    g_w("NX-HOSTOP-DNS rows=2 pass=" as *u8); g_n(pass[0])
33    if pass[0]==2 { g_w(" verdict=GREEN\n" as *u8); sys_exit(0); return 0 }
34    g_w(" verdict=RED\n" as *u8); sys_exit(1); return 1
35}
nx_hostop_dns_gate.nx source

`nx_hostop_dns_gate.nx` source
