[RFC PATCH 0/1] selinux-testsuite: Add GTP tests

Richard Haines richard_c_haines at btinternet.com
Mon Nov 9 02:27:19 UTC 2020


These tests were performed on Fedora 32 Workstation with the 'targeted'
policy using an updated kernel with the GTP RFC kernel patches.

See the tests/gtp/GTP-README for detailed setup/testing.

The libgtpnl patch is at:
  tests/gtp/Update-libgtpnl-for-SELinux-testsuite-GTP-tests.patch

The basic process is:
1) Build kernel with RFC LSM/GTP/SELinux patches (use the
   selinux-testsuite/defconfig file to set correct config if required).
2) Setup the selinux-testsuite and add the GTP test patch.
3) Build/install the libgtpnl library using a patch from the
   selinux-testsuite as this will allow errors to be returned by the
   library functions.
4) Build/run selinux-testsuite for all SELinux tests (sets up the
   environment).
5) Run the GTP tests locally to see more info.
6) Remove the selinux-testsuite policy.

Richard Haines (1):
  selinux-testsuite: Add GTP tests

 defconfig                                     |   4 +
 policy/Makefile                               |   5 +
 policy/test_gtp.cil                           |  18 +
 policy/test_gtp.te                            |  96 +++++
 tests/Makefile                                |   4 +
 tests/gtp/.gitignore                          |   2 +
 tests/gtp/GTP-README                          | 123 ++++++
 tests/gtp/Makefile                            |   8 +
 ...tpnl-for-SELinux-testsuite-GTP-tests.patch | 366 ++++++++++++++++++
 tests/gtp/gtp-link.c                          | 134 +++++++
 tests/gtp/gtp-tunnel.c                        | 263 +++++++++++++
 tests/gtp/test                                | 169 ++++++++
 12 files changed, 1192 insertions(+)
 create mode 100644 policy/test_gtp.cil
 create mode 100644 policy/test_gtp.te
 create mode 100644 tests/gtp/.gitignore
 create mode 100644 tests/gtp/GTP-README
 create mode 100644 tests/gtp/Makefile
 create mode 100644 tests/gtp/Update-libgtpnl-for-SELinux-testsuite-GTP-tests.patch
 create mode 100644 tests/gtp/gtp-link.c
 create mode 100644 tests/gtp/gtp-tunnel.c
 create mode 100755 tests/gtp/test

-- 
2.26.2



More information about the Linux-security-module-archive mailing list