diff options
author | rwatson <rwatson@FreeBSD.org> | 2007-09-09 23:08:39 +0000 |
---|---|---|
committer | rwatson <rwatson@FreeBSD.org> | 2007-09-09 23:08:39 +0000 |
commit | 2f5eb093a49d608441a859f9e1771c6dbbc128e0 (patch) | |
tree | 31905091a75e03080d113f8836c9872dcff17a5f /etc/login.conf | |
parent | 5e60afe4dd87cca48fda764041753bfa24da562b (diff) | |
download | FreeBSD-src-2f5eb093a49d608441a859f9e1771c6dbbc128e0.zip FreeBSD-src-2f5eb093a49d608441a859f9e1771c6dbbc128e0.tar.gz |
Enhance and expand kernel privilege regression tests in support of
work present in FreeBSD 7.0 to refine the kernel privilege model:
- Introduce support for jail as a testing variable, in order to
confirm that privileges are properly restricted in the jail
environment.
- Restructure overall testing approach so that privilege and jail
conditions are set in the testing infrastructure before tests
are invoked, and done so in a custom-created process to isolate
the impact of tests from each other in a more consistent way.
- Tests now provide setup and cleanup hooks that occur before and
after the test runs.
- New privilege tests are now present for several audit
privileges, several credential management privileges, dmesg
buffer reading privilege, and netinet raw socket creation.
- Other existing tests are restructured and generally improved as
a result of better framework structure and jail as a variable.
For exampe, we now test that certain sysctls are writable only
outside jail, while others are writable within jail. On a
similar note, privileges relating to setting UFS file flags are
now better exercised, as with the right to chmod and utimes
files.
Approved by: re (bmah)
Obtained from: TrustedBSD Project
Diffstat (limited to 'etc/login.conf')
0 files changed, 0 insertions, 0 deletions