On Fri, Aug 9, 2019 at 12:51 PM Richard Haines <richard_c_haines@xxxxxxxxxxxxxx> wrote: > On Fri, 2019-08-09 at 11:27 -0400, Paul Moore wrote: > > On Thu, Aug 1, 2019 at 7:22 AM Richard Haines > > <richard_c_haines@xxxxxxxxxxxxxx> wrote: > > > Patch 1 Runs basic checks for BPF with map_create, map_read, > > > map_write, > > > prog_load and prog_run permissions. > > > > > > Patch 2 Updates fdreceive to test BPF security_file_receive() path > > > using > > > the common BPF code in tests/bpf. > > > > > > If these are okay, I'll do the binder BPF tests for the > > > security_binder_transfer_file() path. > > I've done the binder tests but will not send until you are full of > happiness and light with these. Several people have suggested I am full of various things, but oddly enough no one has ever mentioned happiness and light ;) > > Patch 1/2 seems to run fine on my test system, but I'm hitting some > > errors with patch 2/2 ... although they appear to be gone now that I > > run the test again to paste the error into my email :/ > > Remember if running 2/2 locally after reboot, then need to set: > setsebool allow_domain_fd_use=0 Playing with this some more I believe the problem I had last week was due to not installing the necessary dependencies before building the tests; let's attribute that to user error for the moment and move on. We can revisit it if it keeps happening, but it looks to be okay now. -- paul moore www.paul-moore.com
