From: Dorine Tipo <dorine.a.tipo@gmail.com>
To: mic@digikod.net, skhan@linuxfoundation.org, outreachy@lists.linux.dev
Cc: Dorine Tipo <dorine.a.tipo@gmail.com>
Subject: [PATCH 0/2] Add io_uring test with Landlock access control rules
Date: Mon, 25 Mar 2024 02:32:33 +0000 [thread overview]
Message-ID: <cover.1711331521.git.dorine.a.tipo@gmail.com> (raw)
This patch series introduces a new test for verifying Landlock access
control rules with io_uring operation, IORING_OP_OPENAT.
The first patch (Add test for io_uring openat access control with Landlock
rules) implements the actual test.
- The test defines allowed and disallowed paths for access attempts.
- It creates Landlock rulesets for both allowed and disallowed access.
- It uses io_uring_prep_openat with the rulesets to attempt opening files.
- The test verifies successful preparation for allowed access and expects
submission failures for disallowed access.
The second patch (Add liburing dependency for io_uring test) updates the
Makefile to include the necessary liburing library.
This patch series improves Landlock's test coverage by incorporating
io_uring operations and helps ensure Landlock effectively controls access
through io_uring.
It enhances the overall security posture of the system.
The test has been successfully compiled using make run_tests -C landlock
and successfully verifies Landlock access control with io_uring.
Dorine Tipo (2):
Add test for io_uring openat access control with Landlock rules
Add liburing dependency for io_uring test
tools/testing/selftests/landlock/Makefile | 4 +-
tools/testing/selftests/landlock/fs_test.c | 132 +++++++++++++++++++++
2 files changed, 134 insertions(+), 2 deletions(-)
--
2.25.1
next reply other threads:[~2024-03-25 16:47 UTC|newest]
Thread overview: 4+ messages / expand[flat|nested] mbox.gz Atom feed top
2024-03-25 2:32 Dorine Tipo [this message]
2024-03-25 2:32 ` [PATCH 1/2] Add test for io_uring openat access control with Landlock rules Dorine Tipo
2024-03-25 2:32 ` [PATCH 2/2] Add liburing dependency for io_uring test Dorine Tipo
2024-03-26 10:21 ` [PATCH 0/2] Add io_uring test with Landlock access control rules Fabio M. De Francesco
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=cover.1711331521.git.dorine.a.tipo@gmail.com \
--to=dorine.a.tipo@gmail.com \
--cc=mic@digikod.net \
--cc=outreachy@lists.linux.dev \
--cc=skhan@linuxfoundation.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.