[PATCH 0/1] selinux-testsuite: Add BPF tests

[PATCH 0/1] selinux-testsuite: Add BPF tests

[Richard Haines]

This runs basic checks for BPF with map_create, map_read, map_write,
prog_load and prog_run permissions.

If this is okay, I'll do tests for checking the following:
tests/fdreceive - security_file_receive path
tests/binder - security_binder_transfer_file path

Richard Haines (1):
  selinux-testsuite: Add BPF tests

 README.md            |   4 +-
 defconfig            |   5 ++
 policy/Makefile      |   4 ++
 policy/test_bpf.te   |  77 +++++++++++++++++++++++++++
 tests/Makefile       |   4 ++
 tests/bpf/.gitignore |   1 +
 tests/bpf/Makefile   |   8 +++
 tests/bpf/bpf_insn.h |  20 +++++++
 tests/bpf/bpf_test.c | 124 +++++++++++++++++++++++++++++++++++++++++++
 tests/bpf/test       |  57 ++++++++++++++++++++
 tools/check-syntax   |   2 +-
 tools/chk_c_exclude  |   1 +
 12 files changed, 305 insertions(+), 2 deletions(-)
 create mode 100644 policy/test_bpf.te
 create mode 100644 tests/bpf/.gitignore
 create mode 100644 tests/bpf/Makefile
 create mode 100644 tests/bpf/bpf_insn.h
 create mode 100644 tests/bpf/bpf_test.c
 create mode 100755 tests/bpf/test
 create mode 100644 tools/chk_c_exclude

-- 
2.21.0

Re: [PATCH 0/1] selinux-testsuite: Add BPF tests

[Richard Haines]

On Wed, 2019-07-31 at 17:26 +0100, Richard Haines wrote:
> This runs basic checks for BPF with map_create, map_read, map_write,
> prog_load and prog_run permissions.
> 
> If this is okay, I'll do tests for checking the following:
> tests/fdreceive - security_file_receive path
> tests/binder - security_binder_transfer_file path

This patch should work ok, however as the fdreceive and binder required
the same BPF map/prog calls, I'm planning to split these out of
bpf_test.c and into a common area so they can all use it.

I'll send a v2 of this patch when I've completed the fdreceive so I can
check they both work with same BPF code.
> 
> Richard Haines (1):
>   selinux-testsuite: Add BPF tests
> 
>  README.md            |   4 +-
>  defconfig            |   5 ++
>  policy/Makefile      |   4 ++
>  policy/test_bpf.te   |  77 +++++++++++++++++++++++++++
>  tests/Makefile       |   4 ++
>  tests/bpf/.gitignore |   1 +
>  tests/bpf/Makefile   |   8 +++
>  tests/bpf/bpf_insn.h |  20 +++++++
>  tests/bpf/bpf_test.c | 124
> +++++++++++++++++++++++++++++++++++++++++++
>  tests/bpf/test       |  57 ++++++++++++++++++++
>  tools/check-syntax   |   2 +-
>  tools/chk_c_exclude  |   1 +
>  12 files changed, 305 insertions(+), 2 deletions(-)
>  create mode 100644 policy/test_bpf.te
>  create mode 100644 tests/bpf/.gitignore
>  create mode 100644 tests/bpf/Makefile
>  create mode 100644 tests/bpf/bpf_insn.h
>  create mode 100644 tests/bpf/bpf_test.c
>  create mode 100755 tests/bpf/test
>  create mode 100644 tools/chk_c_exclude
>