Date: Sun, 9 Sep 2007 23:08:40 +0000 (UTC) From: Robert Watson <rwatson@FreeBSD.org> To: src-committers@FreeBSD.org, cvs-src@FreeBSD.org, cvs-all@FreeBSD.org Subject: cvs commit: src/tools/regression/priv Makefile main.c main.h priv_acct.c priv_adjtime.c priv_audit_control.c priv_audit_getaudit.c priv_audit_setaudit.c priv_audit_submit.c priv_clock_settime.c priv_cred.c priv_io.c priv_kenv_set.c ... Message-ID: <200709092308.l89N8eCq095856@repoman.freebsd.org>
next in thread | raw e-mail | index | archive | help
rwatson 2007-09-09 23:08:40 UTC
FreeBSD src repository
Modified files:
tools/regression/priv Makefile main.c main.h priv_acct.c
priv_adjtime.c priv_clock_settime.c
priv_io.c priv_kenv_set.c
priv_kenv_unset.c priv_proc_setlogin.c
priv_proc_setrlimit.c
priv_sched_rtprio.c
priv_sched_setpriority.c
priv_settimeofday.c priv_sysctl_write.c
priv_vfs_chown.c priv_vfs_chroot.c
priv_vfs_clearsugid.c
priv_vfs_extattr_system.c
priv_vfs_fhopen.c priv_vfs_fhstat.c
priv_vfs_fhstatfs.c
priv_vfs_generation.c priv_vfs_getfh.c
priv_vfs_read_write.c priv_vfs_setgid.c
priv_vfs_stickyfile.c
priv_vm_madv_protect.c priv_vm_mlock.c
priv_vm_munlock.c
Added files:
tools/regression/priv priv_audit_control.c
priv_audit_getaudit.c
priv_audit_setaudit.c
priv_audit_submit.c priv_cred.c
priv_msgbuf.c priv_netinet_raw.c
priv_vfs_chflags.c priv_vfs_chmod.c
priv_vfs_utimes.c
Removed files:
tools/regression/priv priv_vfs_admin.c test_utimes.c
Log:
Enhance and expand kernel privilege regression tests in support of
work present in FreeBSD 7.0 to refine the kernel privilege model:
- Introduce support for jail as a testing variable, in order to
confirm that privileges are properly restricted in the jail
environment.
- Restructure overall testing approach so that privilege and jail
conditions are set in the testing infrastructure before tests
are invoked, and done so in a custom-created process to isolate
the impact of tests from each other in a more consistent way.
- Tests now provide setup and cleanup hooks that occur before and
after the test runs.
- New privilege tests are now present for several audit
privileges, several credential management privileges, dmesg
buffer reading privilege, and netinet raw socket creation.
- Other existing tests are restructured and generally improved as
a result of better framework structure and jail as a variable.
For exampe, we now test that certain sysctls are writable only
outside jail, while others are writable within jail. On a
similar note, privileges relating to setting UFS file flags are
now better exercised, as with the right to chmod and utimes
files.
Approved by: re (bmah)
Obtained from: TrustedBSD Project
Revision Changes Path
1.2 +14 -6 src/tools/regression/priv/Makefile
1.2 +385 -72 src/tools/regression/priv/main.c
1.2 +261 -38 src/tools/regression/priv/main.h
1.2 +110 -110 src/tools/regression/priv/priv_acct.c
1.2 +35 -26 src/tools/regression/priv/priv_adjtime.c
1.1 +85 -0 src/tools/regression/priv/priv_audit_control.c (new)
1.1 +102 -0 src/tools/regression/priv/priv_audit_getaudit.c (new)
1.1 +109 -0 src/tools/regression/priv/priv_audit_setaudit.c (new)
1.1 +88 -0 src/tools/regression/priv/priv_audit_submit.c (new)
1.2 +33 -25 src/tools/regression/priv/priv_clock_settime.c
1.1 +208 -0 src/tools/regression/priv/priv_cred.c (new)
1.2 +46 -69 src/tools/regression/priv/priv_io.c
1.2 +26 -18 src/tools/regression/priv/priv_kenv_set.c
1.2 +27 -25 src/tools/regression/priv/priv_kenv_unset.c
1.1 +152 -0 src/tools/regression/priv/priv_msgbuf.c (new)
1.1 +82 -0 src/tools/regression/priv/priv_netinet_raw.c (new)
1.2 +40 -25 src/tools/regression/priv/priv_proc_setlogin.c
1.2 +114 -81 src/tools/regression/priv/priv_proc_setrlimit.c
1.2 +224 -129 src/tools/regression/priv/priv_sched_rtprio.c
1.2 +97 -87 src/tools/regression/priv/priv_sched_setpriority.c
1.2 +32 -25 src/tools/regression/priv/priv_settimeofday.c
1.2 +75 -36 src/tools/regression/priv/priv_sysctl_write.c
1.2 +0 -328 src/tools/regression/priv/priv_vfs_admin.c (dead)
1.1 +254 -0 src/tools/regression/priv/priv_vfs_chflags.c (new)
1.1 +146 -0 src/tools/regression/priv/priv_vfs_chmod.c (new)
1.2 +94 -100 src/tools/regression/priv/priv_vfs_chown.c
1.2 +23 -13 src/tools/regression/priv/priv_vfs_chroot.c
1.2 +73 -136 src/tools/regression/priv/priv_vfs_clearsugid.c
1.2 +44 -34 src/tools/regression/priv/priv_vfs_extattr_system.c
1.2 +42 -37 src/tools/regression/priv/priv_vfs_fhopen.c
1.2 +38 -36 src/tools/regression/priv/priv_vfs_fhstat.c
1.2 +41 -37 src/tools/regression/priv/priv_vfs_fhstatfs.c
1.2 +62 -55 src/tools/regression/priv/priv_vfs_generation.c
1.2 +27 -26 src/tools/regression/priv/priv_vfs_getfh.c
1.2 +182 -293 src/tools/regression/priv/priv_vfs_read_write.c
1.2 +61 -83 src/tools/regression/priv/priv_vfs_setgid.c
1.2 +135 -81 src/tools/regression/priv/priv_vfs_stickyfile.c
1.1 +224 -0 src/tools/regression/priv/priv_vfs_utimes.c (new)
1.2 +25 -13 src/tools/regression/priv/priv_vm_madv_protect.c
1.2 +22 -13 src/tools/regression/priv/priv_vm_mlock.c
1.2 +23 -13 src/tools/regression/priv/priv_vm_munlock.c
1.2 +0 -153 src/tools/regression/priv/test_utimes.c (dead)
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200709092308.l89N8eCq095856>