]> www.infradead.org Git - users/jedix/linux-maple.git/commit
samples/check-exec: Add set-exec
authorMickaël Salaün <mic@digikod.net>
Thu, 12 Dec 2024 17:42:20 +0000 (18:42 +0100)
committerKees Cook <kees@kernel.org>
Thu, 19 Dec 2024 01:00:29 +0000 (17:00 -0800)
commitfaf2d88e556756f31d9e2e33f37ce89396ba0f7f
treeee2cfdb9e9248c7566017ab5856cbe476ab484b0
parent0e7f90f34cf79bf329d6d08edea3403544498843
samples/check-exec: Add set-exec

Add a simple tool to set SECBIT_EXEC_RESTRICT_FILE or
SECBIT_EXEC_DENY_INTERACTIVE before executing a command.  This is useful
to easily test against enlighten script interpreters.

Cc: Al Viro <viro@zeniv.linux.org.uk>
Cc: Christian Brauner <brauner@kernel.org>
Cc: Kees Cook <keescook@chromium.org>
Cc: Paul Moore <paul@paul-moore.com>
Cc: Serge Hallyn <serge@hallyn.com>
Signed-off-by: Mickaël Salaün <mic@digikod.net>
Link: https://lore.kernel.org/r/20241212174223.389435-6-mic@digikod.net
Signed-off-by: Kees Cook <kees@kernel.org>
samples/Kconfig
samples/Makefile
samples/check-exec/.gitignore [new file with mode: 0644]
samples/check-exec/Makefile [new file with mode: 0644]
samples/check-exec/set-exec.c [new file with mode: 0644]