From mboxrd@z Thu Jan 1 00:00:00 1970 From: Pavel Emelyanov Subject: Re: [TESTING] Device whitelist on cgroups Date: Tue, 26 Aug 2008 18:14:31 +0400 Message-ID: <48B40FC7.2000900@openvz.org> References: <1219699261.5434.22.camel@subratamodak.linux.ibm.com> <20080826133358.GB12266@us.ibm.com> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: <20080826133358.GB12266-r/Jw6+rmf7HQT0dZR+AlfA@public.gmane.org> List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: containers-bounces-cunTk1MwBs9QetFLy7KEm3xJsTq8ys+cHZ5vskTnxNA@public.gmane.org Errors-To: containers-bounces-cunTk1MwBs9QetFLy7KEm3xJsTq8ys+cHZ5vskTnxNA@public.gmane.org To: "Serge E. Hallyn" Cc: ltp-list , Andrew Morton , Veerendra Chandrappa , Linux Containers , Serge Hallyn , Subrata Modak , Paul Menage List-Id: containers.vger.kernel.org Serge E. Hallyn wrote: > Quoting Subrata Modak (subrata-23VcF4HTsmIX0ybBhKVfKdBPR1lH4CV8@public.gmane.org): >> Serge, >> >> I have another doubt. Are we also having the plan(s) to add testcases >> for testing this new feature (Device whitelist on cgroups) added in >> 2.6.26 under the DEVICE NAMESPACE category !! >> >> Regards-- >> Subrata > > That's something I expect Veerendra would do next year. (Veerendra, > if you have time this year, please let me know). > > It also seems likely that the openvz folks, who are using this, > have some testcases they could share. Pavel? We have and we could share them, but unfortunately their *implementation* is completely useless without the whole testing infrastructure we use (which it turn is too heavy and too Virtuozzo-specific to be shared). All I can is provide a single testcase we perform: set some permissions and check that the allowed devices are allowed and not allowed are not allowed ;) > -serge >