]> www.infradead.org Git - users/jedix/linux-maple.git/commit
projects / users / jedix / linux-maple.git / commit
summary | shortlog | log | commit | commitdiff | tree
(parent: 6a500b2) | patch
selftests/landlock: Test audit with restrict flags
authorMickaël Salaün <mic@digikod.net>
Thu, 20 Mar 2025 19:07:12 +0000 (20:07 +0100)
committerMickaël Salaün <mic@digikod.net>
Wed, 26 Mar 2025 12:59:46 +0000 (13:59 +0100)
commit960ed6ca4c46c1e7a44f3f7b8be2c147757459e4
treea2fe9284306001f2d4147f227f1d0a225bde9951tree
parent6a500b22971c42da4037ff95481dd6c5535b01bdcommit | diff
selftests/landlock: Test audit with restrict flags

Add audit_exec tests to filter Landlock denials according to
cross-execution or muted subdomains.

Add a wait-pipe-sandbox.c test program to sandbox itself and send a
(denied) signals to its parent.

Cc: Günther Noack <gnoack@google.com>
Cc: Paul Moore <paul@paul-moore.com>
Link: https://lore.kernel.org/r/20250320190717.2287696-24-mic@digikod.net
Signed-off-by: Mickaël Salaün <mic@digikod.net>
tools/testing/selftests/landlock/.gitignore diff | blob | history
tools/testing/selftests/landlock/Makefile diff | blob | history
tools/testing/selftests/landlock/audit_test.c diff | blob | history
tools/testing/selftests/landlock/common.h diff | blob | history
tools/testing/selftests/landlock/wait-pipe-sandbox.c [new file with mode: 0644] blob
Unnamed repository; edit this file 'description' to name the repository.