summaryrefslogtreecommitdiffstats
path: root/regress/sys/kern/pledge (follow)
Commit message (Collapse)AuthorAgeFilesLines
* Pledge violation for SO_RTABLE prints "wroute" now. Adapt test.bluhm2021-01-211-5/+4
|
* Make test actually fail if something is broken.bluhm2020-12-161-33/+26
| | | | Remove echo headlines. Use consistent target names.
* Add ulimit -c unlimited to the commands that plan to produce a coredump.claudio2020-04-013-6/+7
| | | | | This way the regress tests work also in the case where the invoking shell has ulimit -c 0.
* bye bye pledgepathbeck2018-04-282-630/+0
|
* Add test for stat behavior to make sure we can stat executable onlybeck2018-04-271-2/+4
|
* Fix regress that was depengin on pledgepath() being able tobeck2018-04-271-8/+3
| | | | traverse the filesystem unrestricted
* test with pledgepath(NULL,NULL) instead of pledge activating thingsbeck2018-04-271-4/+4
|
* Change regress to accomodate no flags escalation once activebeck2018-04-271-22/+67
|
* remove references to O flags in test messagesbeck2018-04-271-7/+7
|
* tests for clearing out flagsbeck2018-04-261-2/+18
|
* Adjust regress for new rwxc flags instead of O_FLAGSbeck2018-04-261-14/+12
|
* failure for exiting on signalbeck2018-04-261-2/+10
|
* Add regress for .. being disallowed as it currently isbeck2018-04-261-1/+3
|
* test double slash in pathsbeck2018-04-261-1/+5
|
* Moar regressbeck2018-04-261-3/+32
|
* Regress additions and fixes for latestbeck2018-04-261-15/+67
|
* New regress to handle flagsbeck2018-04-252-27/+69
|
* regress changes for later varietiesbeck2018-04-241-2/+13
|
* Add regression test of unlinking and re-creating a pledgepathed filebeck2018-04-161-1/+7
|
* The pledge flag for file descriptors opened from /dev/fd was alwaysbluhm2018-04-111-2/+6
| | | | | | | set for pledged processes. dup(2) uses the flag from the old file descriptor. Make open /dev/fd consistent to duplicate and inherit the flag. OK deraadt@
* Add subdir filedescriptor.bluhm2018-04-101-1/+2
|
* Check that a file descriptor's plegde flag is correctly propagated.bluhm2018-04-108-0/+426
| | | | | The test covers the system calls dup, dup2, dup3, open /dev/fd, and file descriptor passing. The fstat(1) output is analysed.
* hookup execpromiseflorian2017-12-161-1/+2
|
* execpromise regressflorian2017-12-162-0/+121
|
* The pledge(2) regress tests fail since the second parameter hasbluhm2017-12-153-142/+30
| | | | | | been converted from paths to execpromises. Remove the test fragments for the non-existing paths feature. OK semarie@ florian@
* Add regress to ensure that execve bypasses pledgepath checks (for now)beck2017-11-301-1/+17
|
* copyrightbeck2017-11-281-0/+18
|
* decriptor relative openat() and chmodbeck2017-11-271-2/+26
|
* readlink and friendsbeck2017-11-271-2/+31
|
* symlink and a couple more...beck2017-11-271-0/+48
|
* access and chflagsbeck2017-11-271-1/+36
|
* Add the start of regression tests for upcoming pledgepath stuff.beck2017-11-272-0/+250
| | | | | still some more to add, and we won't link into regress until later ok deraadt@
* Now pledge("inet") allows socket option IPV6_V6ONLY. Adapt test.bluhm2017-11-201-2/+3
|
* Use a regex(3) to find the new pledge violation string in the dmesg.bluhm2017-10-122-33/+52
|
* The pledge sigkill test is an outdated copy of sigabrt. Remove thebluhm2017-04-124-65/+2
| | | | | former and activate the latter. OK semarie@
* Add comment how the test works.bluhm2017-04-121-1/+7
|
* Make the test also work with obj directory.bluhm2017-03-281-2/+3
| | | | from semarie@
* Link pledge sockopt regression tests to build.bluhm2017-03-281-1/+2
|
* Call get/setsockopt(2) with various sockets and check which optionsbluhm2017-03-282-0/+134
| | | | cause aborts due to pledge(2) restrictions.
* correct my email address. thanks fcambus@benno2017-03-242-4/+4
|
* Enable semarie's sendrecvfd teststb2017-02-221-1/+2
|
* Add regress tests for fd passing and pledge. Check sending and receivingtb2017-02-222-0/+349
| | | | | | | | | | | | | all 7 types of vnodes as follows: - nopledge: no pledge - verify that send/recv work as expected - sendfd: pledge the sender with "stdio sendfd" - recvfd: pledge the receiver with "stdio recvfd" - nosendfd: pledge the sender with "stdio" (it is expected to fail) - norecvfd: pledge the receiver with "stdio" (it is expected to fail) This results in 35 possible combinations with different semantics depending on the vnode type. From semarie, many thanks!
* Remove SUDO=doas in regress Makefile. The test developer must notbluhm2017-02-211-2/+1
| | | | | | set the SUDO variable. The tester may decide wether he runs doas, sudo or the whole test as root. discussed with tb@ semarie@ benno@
* Make test_request_tty() also pass in environments without tty by opening atb2017-02-212-4/+9
| | | | | | | | | pseudo-tty and testing on the slave instead of stderr. nicm confirms that this approach is fine bluhm tested in his environment and the tests now pass from semarie
* re-enable generic pledge teststb2017-02-191-2/+2
|
* Clean up regress/sys/kern/pledge/generic tests: many tests failed becausetb2017-02-193-108/+15
| | | | | | | | wlpaths is disabled in GENERIC kernels: remove or disable failing test cases. Also remove the test_mmap() function testing the prot_exec promise since it would need to be run on a wxallowed partition. from semarie
* deactivate the existing pledge regress tests, they needbenno2017-01-261-3/+4
| | | | | some changes to work again. activate new ioctl subdirectory.
* add check for pledge(pf), and pledge(pf) + fd passingbenno2017-01-265-0/+412
|
* unbreak pledge/generic test (breaked since ?)semarie2016-04-271-3/+3
| | | | it still requires a pledge(2) with wlpath enable.
* remove systracetedu2016-04-252-93/+2
|
Copyright © 1996 – 2023 Jason A. Donenfeld. All Rights Reverse Engineered.