Patch 1 Runs basic checks for BPF with map_create, map_read, map_write, prog_load and prog_run permissions. Patch 2 Updates fdreceive to test BPF security_file_receive() path using the common BPF code in tests/bpf. If these are okay, I'll do the binder BPF tests for the security_binder_transfer_file() path. Are there any other SELinux BPF areas that need testing ?? Richard Haines (2): selinux-testsuite: Add BPF tests selinux-testsuite: Add BPF support to fdreceive test README.md | 4 +- defconfig | 5 ++ policy/Makefile | 4 ++ policy/test_bpf.te | 77 ++++++++++++++++++++++++++++ policy/test_fdreceive_bpf.te | 60 ++++++++++++++++++++++ tests/Makefile | 4 ++ tests/bpf/.gitignore | 2 + tests/bpf/Makefile | 12 +++++ tests/bpf/bpf_common.c | 99 ++++++++++++++++++++++++++++++++++++ tests/bpf/bpf_test.c | 83 ++++++++++++++++++++++++++++++ tests/bpf/test | 57 +++++++++++++++++++++ tests/fdreceive/Makefile | 18 ++++++- tests/fdreceive/client.c | 72 ++++++++++++++++++++++---- tests/fdreceive/test | 51 +++++++++++++++++-- tools/check-syntax | 2 +- tools/chk_c_exclude | 1 + 16 files changed, 532 insertions(+), 19 deletions(-) create mode 100644 policy/test_bpf.te create mode 100644 policy/test_fdreceive_bpf.te create mode 100644 tests/bpf/.gitignore create mode 100644 tests/bpf/Makefile create mode 100644 tests/bpf/bpf_common.c create mode 100644 tests/bpf/bpf_test.c create mode 100755 tests/bpf/test create mode 100644 tools/chk_c_exclude -- 2.21.0
