[PATCH v5 2/2] LSM: add SafeSetID module that gates setid calls

Kees Cook keescook at chromium.org
Wed Jan 30 07:15:05 UTC 2019


On Wed, Jan 30, 2019 at 10:14 AM Micah Morton <mortonm at chromium.org> wrote:
>
> testsuite meaning Linux Test Project / Autotest? We have a ChromeOS
> Autotest for this already
> (https://chromium.googlesource.com/chromiumos/third_party/autotest/+/master/client/site_tests/security_ProcessManagementPolicy/security_ProcessManagementPolicy.py)
> but it would at least need some adaptation for configuring/flushing
> policies during the test. Not sure how different Linux Autotests are
> from ChromeOS, if they are used at all.
>
> Also, could you point me at the directory that holds such test scripts
> in the kernel tree? Shouldn't be too difficult to port that ChromeOS
> autotest to a script if we want to go that route.

The common place is tools/testing/selftests/name-here (for example,
see the "seccomp/" directory).

-- 
Kees Cook



More information about the Linux-security-module-archive mailing list