If I understand correctly the security window for 4.4 has been closed now (as changes went to next). Anyway, I updated the series to the latest smack-for-4.4 branch. Including the new relabel-self interface that received namespace treatment as well. Also the RCU fix reported on the list has been included. The latest version is available here: https://github.com/Havner/smack-namespace/tree/smack-namespace-current Also I've uploaded our Linux Test Project branch I use for Smack and Smack namespace testing (including regressions): https://github.com/Havner/ltp It has the basic smack tests rewritten to C. The ones that were scripts before. They are integrated with LTP framework. Inside testcases/kernel/security/smack/ns is a separate set of tests that share some common functions with the former, but are not otherwise integrated with LTP (yet). In this regard this is very much WIP. Those tests have an advantage though that they run a common set of tests in 6 Smack environments: no namespace, user namespace, user namespace + smack map. Each in a privileged and non-privileged scenario. To run them do the following: cd testcases/kernel/security/smack/ns make ./smack_ns_run.sh smackfs has to be mounted in /smack (following the regular tests). mount -o bind /sys/fs/smackfs /smack is enough. -- Lukasz Pawelczyk Samsung R&D Institute Poland Samsung Electronics _______________________________________________ Selinux mailing list Selinux@xxxxxxxxxxxxx To unsubscribe, send email to Selinux-leave@xxxxxxxxxxxxx. To get help, send an email containing "help" to Selinux-request@xxxxxxxxxxxxx.
