On Thu, Aug 1, 2019 at 7:22 AM Richard Haines <richard_c_haines@xxxxxxxxxxxxxx> wrote: > Patch 1 Runs basic checks for BPF with map_create, map_read, map_write, > prog_load and prog_run permissions. > > Patch 2 Updates fdreceive to test BPF security_file_receive() path using > the common BPF code in tests/bpf. > > If these are okay, I'll do the binder BPF tests for the > security_binder_transfer_file() path. Patch 1/2 seems to run fine on my test system, but I'm hitting some errors with patch 2/2 ... although they appear to be gone now that I run the test again to paste the error into my email :/ I'm about to leave for the weekend, and while I have access to email, I don't plan to do much debugging while away ;) I'll take a closer look next week. > Are there any other SELinux BPF areas that need testing ?? I would say as long as you exercise the SELinux BPF access controls we should be good. Thanks for helping with the tests! -- paul moore www.paul-moore.com