On Fri, Aug 16, 2024 at 10:46 AM Stephen Smalley <stephen.smalley.work@xxxxxxxxx> wrote: > > Enable SMC sockets and their dependencies in the defconfig and > exercise them as part of the extended socket class tests. > This only verifies that socket create permission is checked > against the correct class. The tests cover both usage of AF_SMC > and AF_INET using the recently introduced IPPROTO_SMC. > > Signed-off-by: Stephen Smalley <stephen.smalley.work@xxxxxxxxx> > --- > defconfig | 5 ++++ > policy/test_extended_socket_class.te | 3 +++ > tests/extended_socket_class/sockcreate.c | 5 ++++ > tests/extended_socket_class/test | 34 ++++++++++++++++++++++++ > 4 files changed, 47 insertions(+) While I think the AF_INET/IPPROTO_SMC case is still an open question and therefore probably best not included in the test suite, I do think it would be great to include a test for the existing AF_SMC case. -- paul-moore.com
