Commit Graph

1096 Commits

Author SHA1 Message Date
David Malone
89ddbd45e5 Add some new options to mac_bsdestended. We can now match on:
subject: ranges of uid, ranges of gid, jail id
	objects: ranges of uid, ranges of gid, filesystem,
		object is suid, object is sgid, object matches subject uid/gid
		object type

We can also negate individual conditions. The ruleset language is
a superset of the previous language, so old rules should continue
to work.

These changes require a change to the API between libugidfw and the
mac_bsdextended module. Add a version number, so we can tell if
we're running mismatched versions.

Update man pages to reflect changes, add extra test cases to
test_ugidfw.c and add a shell script that checks that the the
module seems to do what we expect.

Suggestions from: rwatson, trhodes
Reviewed by: trhodes
MFC after: 2 months
2006-04-23 17:06:18 +00:00
Ruslan Ermilov
327ecf6872 Fix an obvious bug.
Submitted by:	Alex Lyashkov <umka@sevcity.net>
2006-04-18 12:37:44 +00:00
Ruslan Ermilov
80cd4b9e42 Implications are auto-generated. 2006-04-13 10:37:29 +00:00
Marcel Moolenaar
e717c486b3 MFp4:
o  Add mount and umount actions so that partitions can be in use.
o  Extend the testing of the add verb to include overlapping
   partitions.
o  Add tests for the remove verb. this includes tests to remove
   a partition when in use (i.e. is mounted).
o  Add a MD5 checksum to the output of the conf action so that
   it can be tested. Make sure the MD5 doesn't vary based on
   certain dynamic behaviour that is irrelevant to the output.
o  Add MD5 checksums to the expected result of conf actions.
2006-04-10 04:13:44 +00:00
Marcel Moolenaar
728f00f8c9 MFp4:
Add support for read-write parameters. Allow an optional initializer
for read-write parameters. Print the value of those parameters on
success following the PASS.
2006-04-10 04:07:20 +00:00
Robert Watson
582954da16 Add a simple regression test that creates and tears down route sockets,
and confirms that only SOCK_RAW works with socket(), and nothing works
with socketpair().
2006-04-09 14:48:38 +00:00
Robert Watson
3d11b6c8f0 Add simple regression tests that creates UNIX domain sockets using
socket() and socketpair() of SOCK_STREAM and SOCK_DGRAM types.  It
also confirms that SOCK_RAW fails.
2006-04-09 14:30:11 +00:00
Stefan Farfeleder
8af87209e3 Test that variable assignments preceding special built-ins affect the current
shell environment, eg after "VAR=val eval" VAR remains set.  Currently fails
but will be implemented soon.
2006-04-09 09:38:29 +00:00
Dag-Erling Smørgrav
f39e7cc06d Don't select a default value for $machine until after we've examined $arch.
Noticed by:	mjacob
2006-04-07 15:19:19 +00:00
Alexander Leidinger
95529bcb14 Milosz (sorry for not using the right 'l', it will not display corretly
in the commit log) submitted support for some NO_* knobs for delete-old*
and check-old. I converted it to the new WITHOUT_* knobs (more correctly:
MK_*) and added some dummy ones so that people can see what's missing.

Volunteers can have a look at http://phk.freebsd.dk/misc/build_options/
for a list of files.

The location looks a little bit odd to me, but I don't care about the
color of this bikeshed and follow the suggestion of our build
infrastructure guru to place it "somewhere under src/tools/ please". [1]
The build/mk/ directory looks more sane to me than the other ones there.

Submitted by:	milosz.galazka@gmail.com
Suggested by:	ru [1]
2006-04-03 18:42:44 +00:00
Robert Watson
fc19db6c7b Add a second pass to the close-before-accept test using a call to the
tcp drop sysctl.  This should exercise the ECONNABORTED accept case.
2006-04-03 11:57:41 +00:00
Robert Watson
1b2c980983 Add regression test for tcpdrop sysctl. 2006-04-03 11:34:36 +00:00
Robert Watson
4f29da19bd Add a regression test to exercise the case where accept() is called and
the next waiting socket has had a close on the remote endpoint already.
2006-04-03 10:08:35 +00:00
Stefan Farfeleder
b333fbe98d Add test cases that check utility syntax errors and redirection errors. For
special built-in utilities they must terminate the shell, for other
utilities only a error message shall be written.  We currently fail both
tests.
2006-04-02 19:02:49 +00:00
Robert Watson
876f7f842a When running the second part of the test, kill off the server process from
the first part before starting, or the TCP port we want to bind may be in
use still.  Sleep for a short period between tests.

Use SIGTERM instead of SIGKILL.
2006-04-02 11:09:37 +00:00
Robert Watson
dfe0ec64aa Pass the right pid into the parent and child tasks so that when a test
fails, we kill the right partner process.
2006-04-02 11:03:05 +00:00
Robert Watson
8c4d74c408 Add makefile for tcpsocktimewait missed in previous commit. 2006-04-02 10:50:46 +00:00
Robert Watson
b4c2aeb1c4 Add a short regression test that triggers a TCP socket to enter time wait
while the socket is still open; one variant closes the socket while in
time wait, and a second lets time wait expire while the socket is open.
2006-04-02 00:07:38 +00:00
Poul-Henning Kamp
3586fcede9 Overlooked that src.conf was built from here. 2006-04-01 18:34:30 +00:00
Dag-Erling Smørgrav
1db30bb2dd Reflect progress in process title. 2006-03-27 10:29:12 +00:00
Robert Watson
416c476c47 Add spxabort, a simple netipx/spx regression test that triggers
pru_abort() by closing a listen socket while completed connections are
presenting in its listen queue.  Unfortunately, it's difficult to
trigger the other two pru_abort() cases using user APIs, so they are
not covered by this test.
2006-03-27 00:03:37 +00:00
Robert Watson
d70f997e49 Add simple regression test to ping pong a data packet over SPX in stream
mode.  Support both connection via connect() and sendto(), but don't
compile in sendto() for now, since netipx doesn't appear to actually
implement that (doh).
2006-03-26 19:10:27 +00:00
Robert Watson
c0bb7e6a97 Add a simple IPX datagram regression test, which opens two IPX datagram
sockets, binds a local port, sends a datagram, and confirms that it is
received.
2006-03-26 18:25:53 +00:00
Robert Watson
8403b3d7cc Add a short README with configuration hints to get the netipx regression
tests up and running.  This is likely a message to myself in six months
when I've completely forgotten how.
2006-03-26 17:42:04 +00:00
Simon L. B. Nielsen
f4aac5a410 Use tr(1) to lowercase strings in a way which works with all locales.
Approved by:	cperciva (mentor)
2006-03-26 17:17:10 +00:00
Robert Watson
94fdcc2ee8 Modify ipxsocket regression test to create and close sockets several
times, with variable length sleeps between socket() and close().  This
will help to ensure that IPX/SPX timers fire while the sockets are
open, and hence have PCB's on the IPX pcb list, so that if timers are
going to stumble over PCB types they don't expect, it will happen as
part of this test.
2006-03-26 15:49:35 +00:00
Robert Watson
f4cda13bed Add simple ipxsocket regression test: open, and close, various IPX socket
types supported by the FreeBSD netipx implementation.
2006-03-26 01:58:39 +00:00
Poul-Henning Kamp
29ed18f45e Get the MK_FOO column right 2006-03-25 21:51:46 +00:00
Poul-Henning Kamp
f5ce64b924 Update build survey scripts 2006-03-25 10:50:40 +00:00
Ruslan Ermilov
41c8ddc37f Fix generation of '$FreeBSD$'. 2006-03-21 09:08:45 +00:00
Ruslan Ermilov
8644ea9e0a Slightly better description. 2006-03-21 09:06:24 +00:00
Ruslan Ermilov
c5922fbf80 A tool to generate the src.conf(5) manpage. 2006-03-21 09:05:42 +00:00
Dag-Erling Smørgrav
e2ed8189e9 Open the lock file write-only. 2006-03-21 08:08:58 +00:00
Ruslan Ermilov
5990647d42 Prepare to autogenerate the src.conf(5) manpage. 2006-03-21 07:50:50 +00:00
Ruslan Ermilov
6f1a7c180c Remove an outdated README. 2006-03-21 07:26:51 +00:00
Robert Watson
87569f75a9 Merge Perforce change 93572 from TrustedBSD audit3 branch:
Simple audit pipe ioctl regression test.

Obtained from:	TrustedBSD Project
2006-03-19 15:47:53 +00:00
Robert Watson
f2c40a5119 Change s_net to s_node when printing the destination address. 2006-03-17 20:14:25 +00:00
Ruslan Ermilov
d1e9def254 NO_MAN is not needed here. 2006-03-16 15:18:17 +00:00
Ruslan Ermilov
6aebd02aa8 Style: NO_MAN doesn't need any value. 2006-03-15 10:46:38 +00:00
Poul-Henning Kamp
f6b9c5c2a9 In addition to -b (suppress builds) add -k (suppress kernel build) and
-w (suppress world).
2006-03-09 14:43:07 +00:00
Hajimu UMEMOTO
9bbad495a3 NOMAN --> NO_MAN 2006-03-07 14:26:17 +00:00
Wojciech A. Koszek
283e3098bb Allocate proper amount of memory. Otherwise, we pass the end of a buffer,
thus having unpleasant warning. Was found by jemalloc redzone code.

Reviewed by:	rwatson
Approved by:	cognet (mentor)
2006-03-06 22:31:25 +00:00
Sam Leffler
f4ff12f3be fixups
Submitted by:	ru
MFC after:	3 days
2006-03-06 21:51:27 +00:00
Sam Leffler
c322e13c55 fix for non-i386/amd64 machines
Submitted by:	marcel
MFC after:	3 days
2006-03-06 02:58:25 +00:00
Dag-Erling Smørgrav
c621d49b4d Update copyright years and remove third clause. 2006-03-02 14:00:40 +00:00
Dag-Erling Smørgrav
63eaf3778d Read site.rc after default.rc. 2006-03-02 13:58:04 +00:00
Dag-Erling Smørgrav
cf3d1b4df7 Ignore generated files. 2006-03-02 13:54:01 +00:00
Sam Leffler
6328732d02 when acpi does not explicitly enumerate lapic/cpu's there should
only be 1

Reviewed by:	jhb
2006-02-28 17:48:33 +00:00
Wojciech A. Koszek
d2f4defee2 Fix the way in which median is calculated. If the data source has even
number of data points, value should be calculated by adding two middle
elements and dividing them by 2.

Approved by:	cognet (mentor)
2006-02-23 20:46:10 +00:00
Sam Leffler
ed7b0743d7 test program to check cpu counting
MFC after:	1 week
2006-02-22 21:51:09 +00:00