Gitiles
Code Review Sign In
gerrit-public.fairphone.software / platform / external / ltp / 2a276cf8bb5b94259482ec039edc2ae7fbaf953e / testcases / kernel / security
  1. 008f0d2 These warning will appear when HAVE_LIBCAP is not defined. by Rishikesh K Rajak · 15 years ago
  2. 7ad2418 while running i found some unwanted messages and fixed those. You can Ack if it is correct fix. by Rishikesh K Rajak · 15 years ago
  3. c65b705 Remaining patch for new file addition for commit:6e3dd83d9f575d98d76b8b3f642ad6e8793dbdfc by Rishikesh K Rajak · 15 years ago
  4. 6e3dd83 Here's an attempt at fixing up and simplifying the autoconf for by Rishikesh K Rajak · 15 years ago
  5. 7376949 To run filecap test, checkforlibcap.sh file is required to be there in /opt/ltp/testcases/bin by Rishikesh K Rajak · 15 years ago
  6. 2aa40f7 Avoid sudo blocking for tty input indefinitely; this issue will need to by Garrett Cooper · 15 years ago
  7. 903f68f Fixed typo found by Mitani-san. by yaberauneya · 15 years ago
  8. 7a0b567 An error occured on my i386 box. by yaberauneya · 15 years ago
  9. 5009532 Fix ordering of $(filter-out ) as noted by Stephen. by yaberauneya · 15 years ago
  10. d81e803 Might help if the logic was actually correct... by yaberauneya · 15 years ago
  11. 94ab883 Disable selinux-testsuite for now because the policy file isn't valid on all distros. by yaberauneya · 15 years ago
  12. e55c0b5 Update comment. by yaberauneya · 15 years ago
  13. da03c5d Need to add a check for $(DESTDIR)/usr/share/selinux/devel too so that the refpolicy piece will build properly, and selinux will be omitted in the negative case. by yaberauneya · 15 years ago
  14. b7fe1ae One minor note. policy-devel must be installed in order for the test suite to be compiled by default.. by yaberauneya · 15 years ago
  15. 1068fa8 Better conditionalize setup -> test -> cleanup, and fix issue noted by Stephen... by yaberauneya · 15 years ago
  16. 328370e Fix a SEGV as noted by Stephen because the old code was deref'ing -1 on shmat failure. As per the manpage... by yaberauneya · 15 years ago
  17. 41fe8bd Add selinux-testsuite to the default build if -lselinux is set, as the selinux-tesuite is fixed now. by yaberauneya · 15 years ago
  18. aaef823 Fix another reporting inconsistency. by yaberauneya · 15 years ago
  19. 8f955fc Fix an inconsistency with the reporting in this script. by yaberauneya · 15 years ago
  20. f70f7be Yank runtest.sh because it's out of sync with test_selinux.sh. by yaberauneya · 15 years ago
  21. 597f830 Checkin all items to get selinux to work (minus th chcon / chmod call which gets the files past permission denied..). by yaberauneya · 15 years ago
  22. f7246b8 Convert all of these scripts over to tst_resm(1), and address a few improperly coded paths. by yaberauneya · 15 years ago
  23. ed1fcf3 1. runtest/selinux : Adjust install path for test scripts and binaries. by yaberauneya · 15 years ago
  24. de31b81 Solve several compile issues discovered when trying to compile the selinux test suite on Fedora 12. by yaberauneya · 15 years ago
  25. b84a005 Check in the remaining changes suggested by Stephen... by yaberauneya · 15 years ago
  26. 7703688 Uhhhhhhhh... checked in the wrong file. I don't want this Makefile.selinux dealie and I actually checked in the changes for refpolicy/Makefile as suggested by Steven @ NSA. by yaberauneya · 15 years ago
  27. 817b0c4 Remove these Makefile.selinux. by yaberauneya · 15 years ago
  28. 6cc019f Further diff on top of the prior one to resolve a few remaining issues by yaberauneya · 15 years ago
  29. 36b038c Install Makefile.selinux, not Makefile. by yaberauneya · 15 years ago
  30. a92a506 Keep on working on fixing the selinux-testsuite... by yaberauneya · 15 years ago
  31. 3687aa5 Don't do load as part of a normal make operation. This splits the make into 2 stages: by yaberauneya · 15 years ago
  32. 6707863 Error out when /etc/selinux/.../policy/src isn't found. by yaberauneya · 15 years ago
  33. 8a95385 We need to install the Makefiles into the tree as well so the test scripts can run make load. by yaberauneya · 15 years ago
  34. 6081ae2 Things have worked out ok so far for the Makefiles, so let's keep on going trying to fix the selinux test suite (as requested by Steven)... by yaberauneya · 15 years ago
  35. 1ec675a Fix a lot of compile warnings. by yaberauneya · 15 years ago
  36. 84d5f51 Fix some missing headers and missing #define _GNU_SOURCE defs. by yaberauneya · 15 years ago
  37. 4f930ce Don't nuke some files that are checked in for test_policy... by yaberauneya · 15 years ago
  38. 67a0ec9 Make a step to properly fix up the Makefile and policy file items... next step would be to template the Makefile to get rid of the ad hoc Makefile in policy_files/redhat-5. by yaberauneya · 15 years ago
  39. 4425e03 1. Fix the all target. by yaberauneya · 15 years ago
  40. 2e15c6b Fix missing #include. by yaberauneya · 15 years ago
  41. 8bd024c Fix breakage caused by ltp_clone_quick move. by yaberauneya · 15 years ago
  42. 238c89c Readd the script so that it gets run when the test is executed... by yaberauneya · 15 years ago
  43. 34e3ffa This change was originally designated for changing a fail to a pass, but morphed into more than that. by yaberauneya · 15 years ago
  44. 4dfb280 Don't use linux/* headers. They don't compile out of the box on Ubuntu Dapper Drake. by yaberauneya · 15 years ago
  45. d4e32c4 Refer to checkforlibcap.sh by its real name: checkforlibcap doesn't exist, the script's proper name is checkforlibcap.sh. Signed-off-by: Jiri Palecek <jpalecek@web.de>. by subrata_modak · 15 years ago
  46. f6d7f09 define and use common clone helpers by vapier · 15 years ago
  47. 58f3c4b The attached patch fixes my issues, but I can't easily verify whether or not it fixes the positive behavior of the testcase itself under all conditions: by yaberauneya · 15 years ago
  48. 09576f8 IMA tcb policy: Dependency section update. Signed-off-by: Mimi Zohar <zohar@us.ibm.com>. by subrata_modak · 15 years ago
  49. 0e41a9e Some toolchains require -ldl apparently. Ran into this issue while trying to cross-compile this subcomponent. by yaberauneya · 15 years ago
  50. bf995b2 1. I screwed up and broke install by accident when I was monkeying around with env_post.mk. by yaberauneya · 15 years ago
  51. ef77253 1. Please see README.mk-devel for a full description of the changes by yaberauneya · 15 years ago
  52. 0aeb2c7 Create testcase for p9auth kernel module: The p9auth module is a driver in the staging/ directory, which implements kernel functionality supporting plan 9-style setuid. Programs can be completely unprivileged, authorize themselves to a privileged server, and obtain a token which they can use to authorize a single setuid to a single specified new uid. This testcase runs three tests: by subrata_modak · 15 years ago
  53. 93e8cf0 Filecaps: Return TCONF if file capabilities are not supported: Currently the test just fails if file capabilities are not supported. Signed-off-by: Geert Uytterhoeven <Geert.Uytterhoeven@sonycom.com>. by subrata_modak · 15 years ago
  54. 8fde346 Alternatively, since digsig never went upstream and isn't being maintained, it might be best to drop this from LTP. "Serge E. Hallyn" <serue@us.ibm.com>. by subrata_modak · 15 years ago
  55. 4febd5e - Replace bashisms: source, uid, substr, '&>' - redirection, '=='. by subrata_modak · 15 years ago
  56. 8f99b6e Addition of TOMOYO Security Tests to LTP. Contributed by Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>. by subrata_modak · 15 years ago
  57. 637f09c Fix Security/Filecaps Build failure: inh_capped.c:70: error: too many arguments to function ‘tst_exit’. Signed-off-by : Sachin Sant <sachinp@in.ibm.com>. by subrata_modak · 15 years ago
  58. 4238a1e Updated regarding IMA development Wiki and mailing list. Subrata Modak <subrata@linux.vnet.ibm.com>, by subrata_modak · 15 years ago
  59. 88c166c Test library cleanups: Removing no longer used code from test.h eg. test_error.c is no longer in ltp, and the same for t_res.c so there is no need to include function prototypes for these. Adding void to functions that doesn't take any parameters; tst_exit() -> tst_exit(void); so code that pases parameters to these is not compileable any more. Also fixes all test broken by that change. As parameters passed to tst_exit() are ignored anyway it's quite safe to just remove them; but I'would rather see someone take a closer look. Code cleanups and fixes in tst_res.c: by subrata_modak · 15 years ago
  60. bab401a Fix missing return. Signed-off-by: Cyril Hrubis <chrubis@suse.cz>. by subrata_modak · 15 years ago
  61. b8ebb80 Remove obsolete logic from the Makefile in selinux-testsuite/refpolicy/redhat/5. This Makefile only gets used if we are running the testsuite on RHEL5, so we can drop the conditional TARGET definitions based on the redhat-release value. Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>. by subrata_modak · 15 years ago
  62. 131615c Update the ltp selinux testsuite README to note the requirement for the libselinux headers and static library, and provide URLs from which to obtain the SELinux core userland and reference policy if the base distribution does not already include them. Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>. by subrata_modak · 15 years ago
  63. c722532 Fix selinux_capable_file.sh: Fix selinux_capable_file.sh to call setup before running the second set of tests. This wasn't an issue prior to the $SELINUXTMPDIR patch as cleanup didn't previously remove the temporary directory, just the files. The bug wasn't evident in enforcing mode since the second set of tests still got error exit values as expected just for the wrong reason. Detected by forcing a run of the testsuite under permissive mode and checking that all of the testcases FAIL as expected. Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>. by subrata_modak · 15 years ago
  64. 05bc265 Update ltp selinux testsuite README: Update the ltp selinux testsuite README. Changes include: by subrata_modak · 15 years ago
  65. d1bbf97 Fix ltp selinux testsuite for rhel5: Some changes on top of the prior patches to enable the ltp selinux testsuite to run successfully on rhel5. Changes: by subrata_modak · 15 years ago
  66. 57e5c22 Update the selinux ioctl test in ltp to reflect the revised selinux_file_ioctl() logic in the kernel. Also requires the corresponding ltp selinux test policy update. Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>. by subrata_modak · 15 years ago
  67. 43f1217 Update ltp selinux test script and policy: Note: This does not obsolete or replace the other two patches I have posted (Fix LTPBIN definition in selinux_file.sh, Fix MLS handling in selinux tests), but rather should be applied on top of them. Attached is a patch and a tar file to update the ltp selinux test script and policy so that we no longer conditionally patch the test policy when we run the test script. The patch does the following: by subrata_modak · 15 years ago
  68. 26f3cd5 Fix MLS handling in selinux tests: Some of the selinux tests were using full security contexts but predated MCS/MLS and thus lacked a MLS field. This broke testing if MLS was enabled in the policy but mcstransd was not running. Change some of the tests to avoid the need to use full contexts at all, and others to conditionally append a MLS suffix if MLS is enabled. Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>. by subrata_modak · 15 years ago
  69. d120daa Your patch doesn't apply - looks like it is relative to further local changes you have made in your own git repo (extra args to mktemp). But applying the corresponding change here does fix that problem for me, yes. Diff below is relative to ltp cvs. Fix LTPBIN definition in selinux_file.sh. Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>. by subrata_modak · 15 years ago
  70. 177642a Reverting "Christopher J. PeBenito" <cpebenito@tresys.com> patch: <SUBJECT: LTP SELinux policy error> applied on 02-02-2009, as, Stephen Smalley <sds@tycho.nsa.gov> objected as: Subrata - this patch never should have been applied. Chris said that it was incomplete, and I noted that it conflicted with Serge's conditionally applied patch. Please revert this, as it breaks the selinux ltp testsuite and the resulting policy will not build. by subrata_modak · 15 years ago
  71. f26d69d Reverting Jiri Palecek <jpalecek@web.de> patch: <SUBJECT: Fix running of the selinux tests>, as Stephen Smalley <sds@tycho.nsa.gov> objected as: NAK to this one as well - if you look at the commented-out line immediately following the setcurrent one, you'll see what you need to do to make this work _if_ you aren't following the README instructions in the first place. sysadm_t one might be valid due to tightening of sysadm_t in more modern refpolicy, but just revert the patch for now please and await an ack on future ones. by subrata_modak · 15 years ago
  72. 76adea2 Add capability bounding set testcases, to verify the following: by subrata_modak · 15 years ago
  73. ad4326b Fix running of the selinux tests: while running the ltp selinux tests on Debian, I found some problems: 1) the testdomain attribute cannot have setcurrent permission to itself. This is because in Debian refpolicy, only domains with attribute set_curr_context can have setcurrent permission on own processes (otherwise, it's forbidden by neverallow). And AFAIK, it's impossible to specify that domains having attribute testdomain also have attribute set_curr_context. Moreover, I found only two tests (dyntrans and dyntrace) that actually need it so far, so I'm not convinced it has to be granted globally. 2) the testscripts (eg. selinux_file.sh) have the test_file_t context, but they are to be run as sysadm_t. Sysadm_t therefore needs execute_no_trans permission on the test files. Please correct me if I'm wrong. - allow sysadm_t execute_no_trans on test_file_t to allow him to run the test shell scripts - get rid of setexec permission for testdomain, it conflicts with refpolicy and AFAIK is unneeded. Signed-off-by: Jiri Palecek <jpalecek@web.de>. by subrata_modak · 15 years ago
  74. e40e7d2 I have been trying to run the selinux tests on Debian and discovered a small flaw. The test was using a return value variable which wasn't set by the test. I've coma across another strange (at least to me) fact - when you execute a program without path, it is searched for in $PATH. However, if the program is in one directory if $PATH and selinux rejects to run the file, the following directories in $PATH are search, and the call can succeed. Is this behavior planned? I know it can't tamper the security of selinux, but it can lead to surprising results. Also, I've found some uses of macros not present in Debian's refpolicy. Should I send a patch for them? Signed-off-by: Jiri Palecek <jpalecek@web.de>. by subrata_modak · 16 years ago
  75. ceb0974 Jiri Palecek <jpalecek@web.de> wrote: While running the selinux tests, I was contemplating the way the $SELINUXTMPDIR is created. It seems to me that creating it in each test individually would allow running the tests in parallel, make some hacks needed to prevent interference of the tests unnecessary, allow the tests to be run directly from ltpmenu et al., and wouldn't add much more code. What do you think about this? Signed-off-by: Jiri Palecek <jpalecek@web.de>. by subrata_modak · 16 years ago
  76. 3a8efbc This patch adds Integrity Measurement Architecture(IMA) testing support: by subrata_modak · 16 years ago
  77. 6c7dfab SMACK Security tests contributed to LTP by Casey Schaufler <casey@schaufler-ca.com>. Integrated to LTP by: Subrata Modak <subrata@linux.vnet.ibm.com>. by subrata_modak · 16 years ago
  78. bdbaec5 Clean Trailing Tab: Signed-off-by: Michal Simek <monstr@monstr.eu>. by subrata_modak · 16 years ago
  79. 4bb656a Clear Trailing Whitespace. Signed-off-by: Michal Simek <monstr@monstr.eu>. by subrata_modak · 16 years ago
  80. 3ffe072 I'm a user of LTP. I use LTP for testing SH based Linux kernel for our embedded systems. I'm using a kernel 2.6.23. I've downloaded latest LTP release: ltp-full-20090131.tgz. I've found the following issues: 1) I found some instructions on some LTP Makefiles reporting direct calls to "gcc" or "g++" instead of using the related env. variables $(CC) and/or $(CXX). The usage of gcc/g++ hardcoded, didn't allow to cross-build the related LTP tests. I've done a patch which is attached to this email ( ltp-full-20090131-allow-cross-build-fix.patch). Signed-off-by: Francesco Rundo <francesco.rundo@st.com>. by subrata_modak · 16 years ago
  81. 7f3d32c James Morris <jmorris@namei.org> reported: I'm trying to run the LTP SELinux tests using the latest CVS version of LTP and current Fedora development, and get the following policy compilation error: Is this likely to be fixed soon, and/or any suggestions for a workaround? by subrata_modak · 16 years ago
  82. 661945b This patch adds RHEL4 and RHEL5 detection to refpolicy Makefile and fixes policy compilation errors on RHEL5 introduced by the bounds test policy. Signed-off-by: Ramon de Carvalho Valle <rcvalle@linux.vnet.ibm.com>. by subrata_modak · 16 years ago
  83. 7ce3c15 This patch fixes compilation errors on RHEL5 introduced by addition of the bounds test to default test list. Signed-off-by: Ramon de Carvalho Valle <rcvalle@linux.vnet.ibm.com>. by subrata_modak · 16 years ago
  84. a8b1aee Added Kernel .config options for building LTP SECURITY TESTS. Signed-Off-By: Subrata Modak <subrata@linux.vnet.ibm.com>. Reviewd-By: Stephen Smalley <sds@tycho.nsa.gov>. by subrata_modak · 16 years ago
  85. d1ece56 Enable Kernel with the Option during build to test filecaps support. Subrata. by subrata_modak · 16 years ago
  86. 4c48a2a This patch fixes a bash specific comparison in checkforlibcap.sh script. Signed-Off-By: Elder Costa <elder.costa@terra.com.br>. by subrata_modak · 16 years ago
  87. e3854ed Replacement of deprecated interfaces: The update_refpolicy.sh fixes some of deprecated interfaces and inject an interface to kick test script from unconfined domain. So, I can run the testsuite which includs bounds test without any problems on Rawhide. However, I got some warnings for deprecated interfaces/macros like r_dir_perms, userdom_sysadm_bin_spec_domtrans_to or userdom_use_sysadm_ptys. The attached patch is a new test case of the boundary feature, which contains six tests, as follows: by subrata_modak · 16 years ago
  88. 83eaff8 Fixed some bashisms. Jiri Palecek <jpalecek@web.de>. by subrata_modak · 16 years ago
  89. b15aafd Hi, by subrata_modak · 16 years ago
  90. a6505bf I needed the following patch in order for file capabilities to correctly install. If there is a better way to do this, that's fine with me, but CC was undefined and this was the easiest way to get past this. Signed-off-by: Serge Hallyn <serue@us.ibm.com>. by subrata_modak · 16 years ago
  91. 3477fb3 Trivial patch to remove an unused local var. Signed-off-by: Serge Hallyn <serue@us.ibm.com>. by subrata_modak · 16 years ago
  92. 078497b When the libcap-2.11 or newer didn't been installed on the sysytem, the filecaps testcase would return a message instead of an error. Signed-off-by: Jin Bing Guo <guojb@cn.ibm.com>. by subrata_modak · 16 years ago
  93. c864960 When packaging LTP with rpmlinit, rpmlinit complains about several scripts which don't have Shebang on the head of the file. Some files didn't have a Shebang at all. Signed-off-by: Daniel Gollub <dgollub@suse.de>. by subrata_modak · 16 years ago
  94. 6f7dd76 Was just browsing through and found that this piece of code is not built/installed by default. I did not find any issue to do so. So, just added up to the Makefile(s). I am however investigating the best possible way to run them. Signed-Off-By: Subrata Modak <subrata@linux.vnet.ibm.com>. by subrata_modak · 16 years ago
  95. 004f70f Integrating build/install of ...security/seclvl (BSD Secure Levels LSM) to default LTP build environment. Was just browsing through and found that this piece of code is not by subrata_modak · 16 years ago
  96. 1026f0c The attached patch fixes the following issue: The selinux-testsuite file sigiotask testcase (run as test_fileop_t) needs rw permission to terminals to proceed its execution, which is not allowed by the non refpolicies provided in the testsuite. Ramon de Carvalho Valle <rcvalle@linux.vnet.ibm.com>. by subrata_modak · 16 years ago
  97. 4a4e689 It eliminates the potential for many false negatives. by subrata_modak · 16 years ago
  98. d040d03 Fixes the following issues: by subrata_modak · 16 years ago
  99. 666a2ec Fix a bug in the selinux testsuite makefile, pointed out by David Howells. Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>. by subrata_modak · 16 years ago
  100. abecc21 Fix a bug in the sigiotask test and enable the test_fdreceive policy to build against the latest refpolicy headers. Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>. by subrata_modak · 16 years ago