newrelic_security 0.1.0

data/lib/newrelic_security/instrumentation-security/active_record/mysql2_adapter/instrumentation.rb

@@ -0,0 +1,187 @@
+require_relative 'prepend'
+require_relative 'chain'
+
+module NewRelic::Security
+  module Instrumentation
+    module ActiveRecord::ConnectionAdapters::Mysql2Adapter
+
+      def execute_on_enter(sql, name)
+        event = nil
+        NewRelic::Security::Agent.logger.debug "OnEnter : #{self.class}.#{__method__}"
+        hash = {}
+        hash[:sql] = sql  #sql query
+        hash[:parameters] = []
+        event = NewRelic::Security::Agent::Control::Collector.collect(SQL_DB_COMMAND, [hash], MYSQL) unless NewRelic::Security::Instrumentation::InstrumentationUtils.sql_filter_events?(hash[:sql])
+      rescue => exception
+        NewRelic::Security::Agent.logger.error "Exception in hook in #{self.class}.#{__method__}, #{exception.inspect}, #{exception.backtrace}"
+      ensure
+        yield
+        return event
+      end
+
+      def execute_on_exit(event)
+        NewRelic::Security::Agent.logger.debug "OnExit :  #{self.class}.#{__method__}"
+        NewRelic::Security::Agent::Utils.create_exit_event(event)
+      rescue => exception
+        NewRelic::Security::Agent.logger.error "Exception in hook in #{self.class}.#{__method__}, #{exception.inspect}, #{exception.backtrace}"
+      ensure
+        yield
+      end
+
+      def exec_query_on_enter(*var, **key_vars)
+        event = nil
+        NewRelic::Security::Agent.logger.debug "OnEnter : #{self.class}.#{__method__}"
+        type_casted_binds = []
+        binds = var[2] #third arg
+        if !binds.nil? && !binds.empty? #if bind params present
+          binds.each { |x|
+            if x.is_a? Integer or x.is_a? String
+              type_casted_binds << x
+            elsif x.is_a? Array and x[0].is_a? ::ActiveRecord::ConnectionAdapters::Column
+              type_casted_binds << x[1].to_s
+            else
+              type_casted_binds << x.value_before_type_cast.to_s
+            end
+          }
+          # binds_copy = binds.clone  #it is a shallow copy
+          # type_casted_binds = type_casted_binds(binds_copy.to_s)
+        end
+        hash = {}
+        hash[:sql] = var[0]  #sql query
+        hash[:parameters] = type_casted_binds #bind params
+        event = NewRelic::Security::Agent::Control::Collector.collect(SQL_DB_COMMAND, [hash], MYSQL) unless NewRelic::Security::Instrumentation::InstrumentationUtils.sql_filter_events?(hash[:sql])
+      rescue => exception
+        NewRelic::Security::Agent.logger.error "Exception in hook in #{self.class}.#{__method__}, #{exception.inspect}, #{exception.backtrace}"
+      ensure
+        yield
+        return event
+      end
+
+      def exec_query_on_exit(event)
+        NewRelic::Security::Agent.logger.debug "OnExit :  #{self.class}.#{__method__}"
+        NewRelic::Security::Agent::Utils.create_exit_event(event)
+      rescue => exception
+        NewRelic::Security::Agent.logger.error "Exception in hook in #{self.class}.#{__method__}, #{exception.inspect}, #{exception.backtrace}"
+      ensure
+        yield
+      end
+
+      def exec_insert_on_enter(*var, **key_vars)
+        event = nil
+        NewRelic::Security::Agent.logger.debug "OnEnter : #{self.class}.#{__method__}"
+        type_casted_binds = []
+        binds = var[2] #third arg
+        if !binds.nil? && !binds.empty? #if bind params present
+          binds.each { |x|
+            if x.is_a? Integer or x.is_a? String
+              type_casted_binds << x
+            elsif x.is_a? Array and x[0].is_a? ::ActiveRecord::ConnectionAdapters::Column
+              type_casted_binds << x[1].to_s
+            else
+              type_casted_binds << x.value_before_type_cast.to_s
+            end
+          }
+          # binds_copy = binds.clone  #it is a shallow copy
+          # type_casted_binds = type_casted_binds(binds_copy.to_s)
+        end
+        hash = {}
+        hash[:sql] = var[0]  #sql query
+        hash[:parameters] = type_casted_binds #bind params
+        event = NewRelic::Security::Agent::Control::Collector.collect(SQL_DB_COMMAND, [hash], MYSQL) unless NewRelic::Security::Instrumentation::InstrumentationUtils.sql_filter_events?(hash[:sql])
+      rescue => exception
+        NewRelic::Security::Agent.logger.error "Exception in hook in #{self.class}.#{__method__}, #{exception.inspect}, #{exception.backtrace}"
+      ensure
+        yield
+        return event
+      end
+
+      def exec_insert_on_exit(event)
+        NewRelic::Security::Agent.logger.debug "OnExit :  #{self.class}.#{__method__}"
+        NewRelic::Security::Agent::Utils.create_exit_event(event)
+      rescue => exception
+        NewRelic::Security::Agent.logger.error "Exception in hook in #{self.class}.#{__method__}, #{exception.inspect}, #{exception.backtrace}"
+      ensure
+        yield
+      end
+
+      def exec_update_on_enter(*var, **key_vars)
+        event = nil
+        NewRelic::Security::Agent.logger.debug "OnEnter : #{self.class}.#{__method__}"
+        type_casted_binds = []
+        binds = var[2] #third arg
+        if !binds.nil? && !binds.empty? #if bind params present
+          binds.each { |x|
+            if x.is_a? Integer or x.is_a? String
+              type_casted_binds << x
+            elsif x.is_a? Array and x[0].is_a? ::ActiveRecord::ConnectionAdapters::Column
+              type_casted_binds << x[1].to_s
+            else
+              type_casted_binds << x.value_before_type_cast.to_s
+            end
+          }
+          # binds_copy = binds.clone  #it is a shallow copy
+          # type_casted_binds = type_casted_binds(binds_copy.to_s)
+        end
+        hash = {}
+        hash[:sql] = var[0]  #sql query
+        hash[:parameters] = type_casted_binds #bind params
+        event = NewRelic::Security::Agent::Control::Collector.collect(SQL_DB_COMMAND, [hash], MYSQL) unless NewRelic::Security::Instrumentation::InstrumentationUtils.sql_filter_events?(hash[:sql])
+      rescue => exception
+        NewRelic::Security::Agent.logger.error "Exception in hook in #{self.class}.#{__method__}, #{exception.inspect}, #{exception.backtrace}"
+      ensure
+        yield
+        return event
+      end
+
+      def exec_update_on_exit(event)
+        NewRelic::Security::Agent.logger.debug "OnExit :  #{self.class}.#{__method__}"
+        NewRelic::Security::Agent::Utils.create_exit_event(event)
+      rescue => exception
+        NewRelic::Security::Agent.logger.error "Exception in hook in #{self.class}.#{__method__}, #{exception.inspect}, #{exception.backtrace}"
+      ensure
+        yield
+      end
+
+      def exec_delete_on_enter(*var, **key_vars)
+        event = nil
+        NewRelic::Security::Agent.logger.debug "OnEnter : #{self.class}.#{__method__}"
+        type_casted_binds = []
+        binds = var[2] #third arg
+        if !binds.nil? && !binds.empty? #if bind params present
+          binds.each { |x|
+            if x.is_a? Integer or x.is_a? String
+              type_casted_binds << x
+            elsif x.is_a? Array and x[0].is_a? ::ActiveRecord::ConnectionAdapters::Column
+              type_casted_binds << x[1].to_s
+            else
+              type_casted_binds << x.value_before_type_cast.to_s
+            end
+          }
+          # binds_copy = binds.clone  #it is a shallow copy
+          # type_casted_binds = type_casted_binds(binds_copy.to_s)
+        end
+        hash = {}
+        hash[:sql] = var[0]  #sql query
+        hash[:parameters] = type_casted_binds #bind params
+        event = NewRelic::Security::Agent::Control::Collector.collect(SQL_DB_COMMAND, [hash], MYSQL) unless NewRelic::Security::Instrumentation::InstrumentationUtils.sql_filter_events?(hash[:sql])
+      rescue => exception
+        NewRelic::Security::Agent.logger.error "Exception in hook in #{self.class}.#{__method__}, #{exception.inspect}, #{exception.backtrace}"
+      ensure
+        yield
+        return event
+      end
+
+      def exec_delete_on_exit(event)
+        NewRelic::Security::Agent.logger.debug "OnExit :  #{self.class}.#{__method__}"
+        NewRelic::Security::Agent::Utils.create_exit_event(event)
+      rescue => exception
+        NewRelic::Security::Agent.logger.error "Exception in hook in #{self.class}.#{__method__}, #{exception.inspect}, #{exception.backtrace}"
+      ensure
+        yield
+      end
+
+    end
+  end
+end
+
+NewRelic::Security::Instrumentation::InstrumentationLoader.install_instrumentation(:mysql2_adapter, ::ActiveRecord::ConnectionAdapters::Mysql2Adapter, ::NewRelic::Security::Instrumentation::ActiveRecord::ConnectionAdapters::Mysql2Adapter)

data/lib/newrelic_security/instrumentation-security/active_record/mysql2_adapter/prepend.rb

@@ -0,0 +1,54 @@
+module NewRelic::Security
+  module Instrumentation
+    module ActiveRecord
+      module ConnectionAdapters
+        module Mysql2Adapter
+          module Prepend
+            include NewRelic::Security::Instrumentation::ActiveRecord::ConnectionAdapters::Mysql2Adapter
+
+            if RUBY_ENGINE == 'jruby'
+              def execute(sql, name = nil)
+                retval = nil
+                event = execute_on_enter(sql, name) { retval = super }
+                execute_on_exit(event) { return retval }
+              end
+
+              def exec_insert(*var)
+                retval = nil
+                event = exec_insert_on_enter(*var) { retval = super }
+                exec_insert_on_exit(event) { return retval }
+              end
+
+              def exec_update(*var)
+                retval = nil
+                event = exec_update_on_enter(*var) { retval = super }
+                exec_update_on_exit(event) { return retval }
+              end
+            
+              if ::Rails.version < '5'
+                def exec_query(*var)
+                  retval = nil
+                  event = exec_query_on_enter(*var) { retval = super }
+                  exec_query_on_exit(event) { return retval }
+                end
+              else
+                def exec_query(*var, **key_vars)
+                  retval = nil
+                  event = exec_query_on_enter(*var, **key_vars) { retval = super }
+                  exec_query_on_exit(event) { return retval }
+                end
+              end
+
+              def exec_delete(*var)
+                retval = nil
+                event = exec_delete_on_enter(*var) { retval = super }
+                exec_delete_on_exit(event) { return retval }
+              end
+            end
+    
+          end
+        end
+      end
+    end
+  end
+end

data/lib/newrelic_security/instrumentation-security/active_record/postgresql_adapter/chain.rb

@@ -0,0 +1,60 @@
+module NewRelic::Security
+  module Instrumentation
+    module ActiveRecord
+      module ConnectionAdapters
+        module PostgreSQLAdapter
+          module Chain
+
+            def self.instrument!
+              ::ActiveRecord::ConnectionAdapters::PostgreSQLAdapter.class_eval do
+                include NewRelic::Security::Instrumentation::ActiveRecord::ConnectionAdapters::PostgreSQLAdapter
+
+                if RUBY_ENGINE == 'jruby'
+                  alias_method :execute_without_security, :execute
+                  
+                  def execute(sql, name = nil)
+                    retval = nil
+                    event = execute_on_enter(sql, name) { retval = execute_without_security(sql, name) }
+                    execute_on_exit(event) { return retval }
+                  end
+                end
+
+                alias_method :exec_query_without_security, :exec_query
+
+                if ::Rails.version < '5'
+                  def exec_query(*var)
+                    retval = nil
+                    event = exec_query_on_enter(*var) { retval = exec_query_without_security(*var) }
+                    exec_query_on_exit(event) { return retval }
+                  end
+                else
+                  def exec_query(*var, **key_vars)
+                    retval = nil
+                    event = exec_query_on_enter(*var, **key_vars) { retval = exec_query_without_security(*var, **key_vars) }
+                    exec_query_on_exit(event) { return retval }
+                  end
+                end
+
+                alias_method :exec_update_without_security, :exec_update
+    
+                def exec_update(*var) # Also known as exec_update
+                  retval = nil
+                  event = exec_update_on_enter(*var) { retval = exec_update_without_security(*var) }
+                  exec_update_on_exit(event) { return retval }
+                end
+
+                alias_method :exec_delete_without_security, :exec_delete
+    
+                def exec_delete(*var) # Also known as exec_update
+                  retval = nil
+                  event = exec_delete_on_enter(*var) { retval = exec_delete_without_security(*var) }
+                  exec_delete_on_exit(event) { return retval }
+                end
+              end
+            end
+          end
+        end
+      end
+    end
+  end
+end

data/lib/newrelic_security/instrumentation-security/active_record/postgresql_adapter/instrumentation.rb

@@ -0,0 +1,143 @@
+require_relative 'prepend'
+require_relative 'chain'
+
+module NewRelic::Security
+  module Instrumentation
+    module ActiveRecord::ConnectionAdapters::PostgreSQLAdapter
+
+      def execute_on_enter(sql, name)
+        event = nil
+        NewRelic::Security::Agent.logger.debug "OnEnter : #{self.class}.#{__method__}"
+        hash = {}
+        hash[:sql] = sql  #sql query
+        hash[:parameters] = []
+        event = NewRelic::Security::Agent::Control::Collector.collect(SQL_DB_COMMAND, [hash], POSTGRES) unless NewRelic::Security::Instrumentation::InstrumentationUtils.sql_filter_events?(hash[:sql])
+      rescue => exception
+        NewRelic::Security::Agent.logger.error "Exception in hook in #{self.class}.#{__method__}, #{exception.inspect}, #{exception.backtrace}"
+      ensure
+        yield
+        return event
+      end
+
+      def execute_on_exit(event)
+        NewRelic::Security::Agent.logger.debug "OnExit :  #{self.class}.#{__method__}"
+        NewRelic::Security::Agent::Utils.create_exit_event(event)
+      rescue => exception
+        NewRelic::Security::Agent.logger.error "Exception in hook in #{self.class}.#{__method__}, #{exception.inspect}, #{exception.backtrace}"
+      ensure
+        yield
+      end
+
+      def exec_query_on_enter(*var, **key_vars)
+        event = nil
+        NewRelic::Security::Agent.logger.debug "OnEnter : #{self.class}.#{__method__}"
+        type_casted_binds = []
+        binds = var[2] #third arg
+        if !binds.nil? && !binds.empty? #if bind params present
+          binds.each { |x|
+            if x.is_a? Integer or x.is_a? String
+              type_casted_binds << x
+            elsif x.is_a? Array and x[0].is_a? ::ActiveRecord::ConnectionAdapters::Column
+              type_casted_binds << x[1].to_s
+            else
+              type_casted_binds << x.value_before_type_cast.to_s
+            end
+          }
+        end
+        hash = {}
+        hash[:sql] = var[0]  #sql query
+        hash[:parameters] = type_casted_binds #bind params
+        event = NewRelic::Security::Agent::Control::Collector.collect(SQL_DB_COMMAND, [hash], POSTGRES) unless NewRelic::Security::Instrumentation::InstrumentationUtils.sql_filter_events?(hash[:sql])
+      rescue => exception
+        NewRelic::Security::Agent.logger.error "Exception in hook in #{self.class}.#{__method__}, #{exception.inspect}, #{exception.backtrace}"
+      ensure
+        yield
+        return event
+      end
+
+      def exec_query_on_exit(event)
+        NewRelic::Security::Agent.logger.debug "OnExit :  #{self.class}.#{__method__}"
+        NewRelic::Security::Agent::Utils.create_exit_event(event)
+      rescue => exception
+        NewRelic::Security::Agent.logger.error "Exception in hook in #{self.class}.#{__method__}, #{exception.inspect}, #{exception.backtrace}"
+      ensure
+        yield
+      end
+
+      def exec_update_on_enter(*var)
+        event = nil
+        NewRelic::Security::Agent.logger.debug "OnEnter : #{self.class}.#{__method__}"
+        type_casted_binds = []
+        binds = var[2] #third arg
+        if !binds.nil? && !binds.empty? #if bind params present
+          binds.each { |x|
+            if x.is_a? Integer or x.is_a? String
+              type_casted_binds << x
+            elsif x.is_a? Array and x[0].is_a? ::ActiveRecord::ConnectionAdapters::Column
+              type_casted_binds << x[1].to_s
+            else
+              type_casted_binds << x.value_before_type_cast.to_s
+            end
+          }
+        end
+        hash = {}
+        hash[:sql] = var[0]  #sql query
+        hash[:parameters] = type_casted_binds #bind params
+        event = NewRelic::Security::Agent::Control::Collector.collect(SQL_DB_COMMAND, [hash], POSTGRES) unless NewRelic::Security::Instrumentation::InstrumentationUtils.sql_filter_events?(hash[:sql])
+      rescue => exception
+        NewRelic::Security::Agent.logger.error "Exception in hook in #{self.class}.#{__method__}, #{exception.inspect}, #{exception.backtrace}"
+      ensure
+        yield
+        return event
+      end
+
+      def exec_update_on_exit(event)
+        NewRelic::Security::Agent.logger.debug "OnExit :  #{self.class}.#{__method__}"
+        NewRelic::Security::Agent::Utils.create_exit_event(event)
+      rescue => exception
+        NewRelic::Security::Agent.logger.error "Exception in hook in #{self.class}.#{__method__}, #{exception.inspect}, #{exception.backtrace}"
+      ensure
+        yield
+      end
+
+      def exec_delete_on_enter(*var)
+        event = nil
+        NewRelic::Security::Agent.logger.debug "OnEnter : #{self.class}.#{__method__}"
+        type_casted_binds = []
+        binds = var[2] #third arg
+        if !binds.nil? && !binds.empty? #if bind params present
+          binds.each { |x|
+            if x.is_a? Integer or x.is_a? String
+              type_casted_binds << x
+            elsif x.is_a? Array and x[0].is_a? ::ActiveRecord::ConnectionAdapters::Column
+              type_casted_binds << x[1].to_s
+            else
+              type_casted_binds << x.value_before_type_cast.to_s
+            end
+          }
+        end
+        hash = {}
+        hash[:sql] = var[0]  #sql query
+        hash[:parameters] = type_casted_binds #bind params
+        event = NewRelic::Security::Agent::Control::Collector.collect(SQL_DB_COMMAND, [hash], POSTGRES) unless NewRelic::Security::Instrumentation::InstrumentationUtils.sql_filter_events?(hash[:sql])
+      rescue => exception
+        NewRelic::Security::Agent.logger.error "Exception in hook in #{self.class}.#{__method__}, #{exception.inspect}, #{exception.backtrace}"
+      ensure
+        yield
+        return event
+      end
+
+      def exec_delete_on_exit(event)
+        NewRelic::Security::Agent.logger.debug "OnExit :  #{self.class}.#{__method__}"
+        NewRelic::Security::Agent::Utils.create_exit_event(event)
+      rescue => exception
+        NewRelic::Security::Agent.logger.error "Exception in hook in #{self.class}.#{__method__}, #{exception.inspect}, #{exception.backtrace}"
+      ensure
+        yield
+      end
+
+    end
+  end
+end
+
+NewRelic::Security::Instrumentation::InstrumentationLoader.install_instrumentation(:postgresql_adapter, ::ActiveRecord::ConnectionAdapters::PostgreSQLAdapter, ::NewRelic::Security::Instrumentation::ActiveRecord::ConnectionAdapters::PostgreSQLAdapter)

data/lib/newrelic_security/instrumentation-security/active_record/postgresql_adapter/prepend.rb

@@ -0,0 +1,48 @@
+module NewRelic::Security
+  module Instrumentation
+    module ActiveRecord
+      module ConnectionAdapters
+        module PostgreSQLAdapter
+          module Prepend
+            include NewRelic::Security::Instrumentation::ActiveRecord::ConnectionAdapters::PostgreSQLAdapter
+    
+            if RUBY_ENGINE == 'jruby'
+              def execute(sql, name = nil)
+                retval = nil
+                event = execute_on_enter(sql, name) { retval = super }
+                execute_on_exit(event) { return retval }
+              end
+            end
+
+            if ::Rails.version < '5'
+              def exec_query(*var)
+                retval = nil
+                event = exec_query_on_enter(*var) { retval = super }
+                exec_query_on_exit(event) { return retval }
+              end
+            else
+              def exec_query(*var, **key_vars)
+                retval = nil
+                event = exec_query_on_enter(*var, **key_vars) { retval = super }
+                exec_query_on_exit(event) { return retval }
+              end
+            end
+            
+            def exec_update(*var) # Also known as exec_update
+              retval = nil
+              event = exec_update_on_enter(*var) { retval = super }
+              exec_update_on_exit(event) { return retval }
+            end
+
+            def exec_delete(*var) # Also known as exec_update
+              retval = nil
+              event = exec_delete_on_enter(*var) { retval = super }
+              exec_delete_on_exit(event) { return retval }
+            end
+    
+          end
+        end
+      end
+    end
+  end
+end

data/lib/newrelic_security/instrumentation-security/active_record/sqlite3_adapter/chain.rb

@@ -0,0 +1,72 @@
+module NewRelic::Security
+  module Instrumentation
+    module ActiveRecord
+      module ConnectionAdapters
+        module SQLite3Adapter
+          module Chain
+
+            def self.instrument!
+              ::ActiveRecord::ConnectionAdapters::SQLite3Adapter.class_eval do
+                include NewRelic::Security::Instrumentation::ActiveRecord::ConnectionAdapters::SQLite3Adapter
+
+                if RUBY_ENGINE == 'jruby'
+                  alias_method :execute_without_security, :execute
+
+                  def execute(sql, name = nil)
+                    retval = nil
+                    event = execute_on_enter(sql, name) { retval = execute_without_security(sql, name) }
+                    execute_on_exit(event) { return retval }
+                  end
+
+                  alias_method :exec_update_without_security, :exec_update
+                
+                  def exec_update(*var)
+                    retval = nil
+                    event = exec_update_on_enter(*var) { retval = exec_update_without_security(*var) }
+                    exec_update_on_exit(event) { return retval }
+                  end
+                  
+                  alias_method :exec_delete_without_security, :exec_delete
+                  
+                  def exec_delete(*var)
+                    retval = nil
+                    event = exec_delete_on_enter(*var) { retval = exec_delete_without_security(*var) }
+                    exec_delete_on_exit(event) { return retval }
+                  end
+                end
+
+                alias_method :exec_query_without_security, :exec_query
+                
+                if ::Rails.version < '5'
+                  def exec_query(*var)
+                    retval = nil
+                    event = exec_query_on_enter(*var) { retval = exec_query_without_security(*var) }
+                    exec_query_on_exit(event) { return retval }
+                  end
+                else
+                  def exec_query(*var, **key_vars)
+                    retval = nil
+                    event = exec_query_on_enter(*var, **key_vars) { retval = exec_query_without_security(*var, **key_vars) }
+                    exec_query_on_exit(event) { return retval }
+                  end
+                  
+                  if self.instance_methods.include?(:internal_exec_query)
+                    alias_method :internal_exec_query_without_security, :internal_exec_query
+
+                    def internal_exec_query(*var, **key_vars)
+                      retval = nil
+                      event = internal_exec_query_on_enter(*var, **key_vars) { retval = internal_exec_query_without_security(*var, **key_vars) }
+                      internal_exec_query_on_exit(event) { return retval }
+                    end
+                  end
+                end
+                
+              end
+            end
+            
+          end
+        end
+      end
+    end
+  end
+end