summaryrefslogtreecommitdiffstats
path: root/tools/regression/priv
Commit message (Collapse)AuthorAgeFilesLines
* Fix LDADD/DPADD that should be LIBADD.bdrewery2015-12-041-2/+1
| | | | Sponsored by: EMC / Isilon Storage Division
* Use src.opts.mk in preference to bsd.own.mk except where we need stuffimp2014-05-061-1/+1
| | | | from the latter.
* errx prepends the program name to the message; don't do it by hand.jmmv2014-03-191-1/+1
|
* Make the priv test program exit with non-zero if any failures are detected.jmmv2014-03-191-8/+33
| | | | And, mind you, this already returns a failure :-/
* Use MAN= instead of NO_MAN=kevlo2013-07-161-1/+1
| | | | | For some reason it still tries to install a priv.1 when using NO_MAN, even though there isn't one yet.
* Spelling fixes for tools/uqs2011-12-301-1/+1
| | | | Add some $FreeBSD$ tags so svn will allow the commit.
* Always assign WARNS using ?=uqs2010-03-021-1/+1
| | | | | | | - fix some nearby style bugs - include Makefile.inc where it makes sense and reduces duplication Approved by: ed (co-mentor)
* Start respecting WITHOUT_INET6.bz2009-08-134-7/+40
| | | | | | | | | | | | | | Make regression/priv compile again after the multi-IP jail changes. Note that we are still using the legacy jail(2) rather than the jail_set(2)/jail(3) syscall. Add an IPv4, and an IPv6 loopback address in case we compile with INET6 enabled. Make the priv_vfs_extattr_system compile on amd64 as well using the proper length modifier to printf(3) for ssize_t. Reviewed by: rwatson Approved by: re (kib)
* Remove empty setup and cleanup functions for the pfkey test.bz2007-11-164-6/+268
| | | | | | | | | | | Add regression tests for privileged and supposedly unprivileged IP_IPSEC_POLICY,IPV6_IPSEC_POLICY setsockopt cases. We may need to review the current 'good' results to make sure they reflect what we really want. Discussed with: rwatson Reviewed by: rwatson
* In sys/netipsec/keysock.c rev. 1.19 a missing priv check was added.bz2007-11-134-0/+93
| | | | | | | Before that non-su users were able to open pfkey sockets as well. Add a regression test so we can detect such problems in an automated way in the future.
* Enhance and expand kernel privilege regression tests in support ofrwatson2007-09-0942-2212/+3850
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | work present in FreeBSD 7.0 to refine the kernel privilege model: - Introduce support for jail as a testing variable, in order to confirm that privileges are properly restricted in the jail environment. - Restructure overall testing approach so that privilege and jail conditions are set in the testing infrastructure before tests are invoked, and done so in a custom-created process to isolate the impact of tests from each other in a more consistent way. - Tests now provide setup and cleanup hooks that occur before and after the test runs. - New privilege tests are now present for several audit privileges, several credential management privileges, dmesg buffer reading privilege, and netinet raw socket creation. - Other existing tests are restructured and generally improved as a result of better framework structure and jail as a variable. For exampe, we now test that certain sysctls are writable only outside jail, while others are writable within jail. On a similar note, privileges relating to setting UFS file flags are now better exercised, as with the right to chmod and utimes files. Approved by: re (bmah) Obtained from: TrustedBSD Project
* dd a series of regression tests to validate that privilege requirements arerwatson2006-09-1332-0/+4026
implemented properly for a number of kernel subsystems. In general, they try to exercise the privilege first as the root user, then as a test user, in order to determine when privilege is being checked. Currently, these tests do not compare inside/outside jail, and probably should be enhanced to do that. Sponsored by: nCircle Network Security, Inc. Obtained from: TrustedBSD Project
OpenPOWER on IntegriCloud