This is an automated email from the git hooks/post-receive script.
jforbes pushed a commit to branch master
in repository kernel-tests.
commit d632c335751ee265cf83492f240f2413aad1a9cc
Author: Justin M. Forbes <jforbes@xxxxxxxxxx>
Date: Thu Aug 7 16:49:17 2014 +0200
selinux-dac-controls test came from rhbz 1013466
---
default/selinux-dac-controls/mmap_test.c | 26 ++++++++++++++++++++++
default/selinux-dac-controls/runtest.sh | 37 ++++++++++++++++++++++++++++++++
2 files changed, 63 insertions(+)
diff --git a/default/selinux-dac-controls/mmap_test.c b/default/selinux-dac-controls/mmap_test.c
new file mode 100644
index 0000000..a63e8cd
--- /dev/null
+++ b/default/selinux-dac-controls/mmap_test.c
@@ -0,0 +1,26 @@
+#include <stdlib.h>
+#include <stdio.h>
+#include <errno.h>
+#include <sys/mman.h>
+#include <sys/types.h>
+#include <unistd.h>
+
+
+int main(int argc, char *argv[])
+{
+ int rc;
+ void *mem;
+ /* Run as nobody, we don't want CAP_SYS_RAWIO */
+ setuid(99);
+ setgid(99);
+
+ mem = mmap(0x0, 4096,
+ PROT_READ | PROT_WRITE,
+ MAP_PRIVATE | MAP_ANONYMOUS | MAP_FIXED, -1, 0);
+ if (mem == MAP_FAILED)
+ return errno;
+ printf("mem = %p\n", mem);
+ munmap(mem, 4096);
+
+ return 0;
+}
diff --git a/default/selinux-dac-controls/runtest.sh b/default/selinux-dac-controls/runtest.sh
new file mode 100755
index 0000000..736ac97
--- /dev/null
+++ b/default/selinux-dac-controls/runtest.sh
@@ -0,0 +1,37 @@
+#!/bin/bash
+#
+# Licensed under the terms of the GNU GPL License version 2
+
+# This test came from rhbz 1013466
+
+# Make sure we can run this test successfully
+source ../../utils/root-check.sh
+check_root
+is_root=$?
+if [ "$is_root" -ne "0" ]; then
+ exit 3
+fi
+
+selinux=`getenforce`
+if [ "$selinux" == "Permissive" ]; then
+ echo "SELinux must be enabled for this test"
+ exit 3
+fi
+
+#Build
+gcc -g -O0 -o mmap_test mmap_test.c
+if [ ! -f ./mmap_test ]; then
+ echo "Something went wrong during mmap_test build."
+ exit -1
+fi
+
+./mmap_test
+
+avcdenial=`ausearch -m AVC -ts recent | grep -c mmap_zero`
+if [ "$avcdenial" -ne "0" ]; then
+ echo "AVC Denail found for mmap_zero"
+ exit -1
+fi
+
+
+exit 0
--
To stop receiving notification emails like this one, please contact
the administrator of this repository.
_______________________________________________
kernel mailing list
kernel@xxxxxxxxxxxxxxxxxxxxxxx
https://lists.fedoraproject.org/admin/lists/kernel@xxxxxxxxxxxxxxxxxxxxxxx
