On Mon, Jun 19, 2023 at 10:48 AM Ondrej Mosnacek <omosnace@xxxxxxxxxx> wrote: > > As of kernel 6.5 MPTCP should work as a drop-in replacement for TCP > w.r.t. SELinux, so test it in addition to TCP using the same tests. > > This requires modifying the inet_socket test to test each protocol > separately, using the same subdirectory symlink trick as in the > [fs_]filesystem tests. After that, an mptcp subtest can be added easily > by extending the programs to support it and adding a new subdirectory > symlink for it. > > Signed-off-by: Ondrej Mosnacek <omosnace@xxxxxxxxxx> > --- > tests/Makefile | 10 +- > tests/inet_socket/bind.c | 22 +- > tests/inet_socket/client.c | 33 ++- > tests/inet_socket/connect.c | 27 ++- > tests/inet_socket/mptcp | 1 + > tests/inet_socket/server.c | 33 ++- > tests/inet_socket/tcp | 1 + > tests/inet_socket/test | 430 +++++++++++++++++------------------- > tests/inet_socket/udp | 1 + > 9 files changed, 292 insertions(+), 266 deletions(-) > create mode 120000 tests/inet_socket/mptcp > create mode 120000 tests/inet_socket/tcp > create mode 120000 tests/inet_socket/udp The new test now runs and passes on the latest secnext kernel, so I've applied the patch: https://github.com/SELinuxProject/selinux-testsuite/commit/4dcea27ada77f51c2868095e951aab790374fba9 -- Ondrej Mosnacek Senior Software Engineer, Linux Security - SELinux kernel Red Hat, Inc.
