d/freebsd-dev
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
FreeBSD src
3 Commits 72 Branches 135 Tags 3.2 GiB
C 59.6%
C++ 25.5%
Roff 5.1%
Shell 2.9%
Assembly 2.7%
Other 3.6%
b6973c8f4a
Go to file
Alex Richardson b6973c8f4a Update capsicum-test to 7707222b46abe52d18fd4fbb76115ffdb3e6f74b 
Using the following steps:
```
git worktree add ../freebsd-vendor-capsicum-test freebsd/vendor/google/capsicum-test
cd ../freebsd-vendor-capsicum-test
git remote add upstream-capsicum-test https://github.com/google/capsicum-test
git fetch upstream-capsicum-test
git checkout -f upstream-capsicum-test/dev --
git rm -rf autoconf/ casper/ gtest-1.10.0/ libcaprights/
git commit
```
2021-02-16 14:04:29 +00:00
.gitignore Import capsicum-test into ^/vendor/google/capsicum-test/dist 2019-03-12 01:43:01 +00:00
capability-fd-pair.cc Import capsicum-test into ^/vendor/google/capsicum-test/dist 2019-03-12 01:43:01 +00:00
capability-fd.cc Update capsicum-test to 7707222b46abe52d18fd4fbb76115ffdb3e6f74b 2021-02-16 14:04:29 +00:00
capmode.cc Merge the following changes from the capsicum-test project [1] 2019-03-29 21:41:14 +00:00
capsicum-freebsd.h Import capsicum-test into ^/vendor/google/capsicum-test/dist 2019-03-12 01:43:01 +00:00
capsicum-linux.h Import capsicum-test into ^/vendor/google/capsicum-test/dist 2019-03-12 01:43:01 +00:00
capsicum-rights.h Import capsicum-test into ^/vendor/google/capsicum-test/dist 2019-03-12 01:43:01 +00:00
capsicum-test-main.cc Update capsicum-test to 7707222b46abe52d18fd4fbb76115ffdb3e6f74b 2021-02-16 14:04:29 +00:00
capsicum-test.cc Update capsicum-test to 7707222b46abe52d18fd4fbb76115ffdb3e6f74b 2021-02-16 14:04:29 +00:00
capsicum-test.h Update capsicum-test to 7707222b46abe52d18fd4fbb76115ffdb3e6f74b 2021-02-16 14:04:29 +00:00
capsicum.h Import capsicum-test into ^/vendor/google/capsicum-test/dist 2019-03-12 01:43:01 +00:00
CONTRIBUTING.md Import capsicum-test into ^/vendor/google/capsicum-test/dist 2019-03-12 01:43:01 +00:00
fcntl.cc Import capsicum-test into ^/vendor/google/capsicum-test/dist 2019-03-12 01:43:01 +00:00
fexecve.cc Update capsicum-test to 7707222b46abe52d18fd4fbb76115ffdb3e6f74b 2021-02-16 14:04:29 +00:00
GNUmakefile Import capsicum-test into ^/vendor/google/capsicum-test/dist 2019-03-12 01:43:01 +00:00
ioctl.cc Import capsicum-test into ^/vendor/google/capsicum-test/dist 2019-03-12 01:43:01 +00:00
LICENSE Import capsicum-test into ^/vendor/google/capsicum-test/dist 2019-03-12 01:43:01 +00:00
linux.cc Update capsicum-test to 7707222b46abe52d18fd4fbb76115ffdb3e6f74b 2021-02-16 14:04:29 +00:00
makefile Update capsicum-test to 7707222b46abe52d18fd4fbb76115ffdb3e6f74b 2021-02-16 14:04:29 +00:00
mini-me.c Import capsicum-test into ^/vendor/google/capsicum-test/dist 2019-03-12 01:43:01 +00:00
mqueue.cc Update capsicum-test to 7707222b46abe52d18fd4fbb76115ffdb3e6f74b 2021-02-16 14:04:29 +00:00
openat.cc Merge the following changes from the capsicum-test project [1] 2019-03-29 21:41:14 +00:00
overhead.cc Import capsicum-test into ^/vendor/google/capsicum-test/dist 2019-03-12 01:43:01 +00:00
procdesc.cc Update capsicum-test to 7707222b46abe52d18fd4fbb76115ffdb3e6f74b 2021-02-16 14:04:29 +00:00
README.md Import capsicum-test into ^/vendor/google/capsicum-test/dist 2019-03-12 01:43:01 +00:00
rename.cc Import capsicum-test into ^/vendor/google/capsicum-test/dist 2019-03-12 01:43:01 +00:00
sctp.cc Import capsicum-test into ^/vendor/google/capsicum-test/dist 2019-03-12 01:43:01 +00:00
select.cc Import capsicum-test into ^/vendor/google/capsicum-test/dist 2019-03-12 01:43:01 +00:00
showrights Import capsicum-test into ^/vendor/google/capsicum-test/dist 2019-03-12 01:43:01 +00:00
smoketest.c Import capsicum-test into ^/vendor/google/capsicum-test/dist 2019-03-12 01:43:01 +00:00
socket.cc Import capsicum-test into ^/vendor/google/capsicum-test/dist 2019-03-12 01:43:01 +00:00
syscalls.h Merge the following changes from the capsicum-test project [1] 2019-03-29 21:41:14 +00:00
sysctl.cc Import capsicum-test into ^/vendor/google/capsicum-test/dist 2019-03-12 01:43:01 +00:00
waittest.c Import capsicum-test into ^/vendor/google/capsicum-test/dist 2019-03-12 01:43:01 +00:00

README.md

Capsicum User Space Tests

This directory holds unit tests for Capsicum object-capabilities. The tests exercise the syscall interface to a Capsicum-enabled operating system, currently either FreeBSD >=10.x or a modified Linux kernel (the capsicum-linux project).

The tests are written in C++98, and use the Google Test framework, with some additions to fork off particular tests (because a process that enters capability mode cannot leave it again).

Provenance

The original basis for these tests was:

  • unit tests written by Robert Watson and Jonathan Anderson for the original FreeBSD 9.x Capsicum implementation
  • unit tests written by Meredydd Luff for the original Capsicum-Linux port.

These tests were coalesced and moved into an independent repository to enable comparative testing across multiple OSes, and then substantially extended.

OS Configuration

Linux

The following kernel configuration options are needed to run the tests:

  • CONFIG_SECURITY_CAPSICUM: enable the Capsicum framework
  • CONFIG_PROCDESC: enable Capsicum process-descriptor functionality
  • CONFIG_DEBUG_FS: enable debug filesystem
  • CONFIG_IP_SCTP: enable SCTP support

FreeBSD (>= 10.x)

The following kernel configuration options are needed so that all tests can run:

  • options P1003_1B_MQUEUE: Enable POSIX message queues (or kldload mqueuefs)

Other Dependencies

Linux

The following additional development packages are needed to build the full test suite on Linux.

  • libcaprights: See below
  • libcap-dev: Provides headers for POSIX.1e capabilities.
  • libsctp1: Provides SCTP library functions.
  • libsctp-dev: Provides headers for SCTP library functions.

Linux libcaprights

The Capsicum userspace library is held in the libcaprights/ subdirectory. Ideally, this library should be built (with ./configure; make or dpkg-buildpackage -uc -us) and installed (with make install or dpkg -i libcaprights*.deb) so that the tests will use behave like a normal Capsicum-aware application.

However, if no installed copy of the library is found, the GNUmakefile will attempt to use the local libcaprights/*.c source; this requires ./configure to have been performed in the libcaprights subdirectory. The local code is also used for cross-compiled builds of the test suite (e.g. make ARCH=32 or make ARCH=x32).