selftests/landlock: Add PID tests for audit records

Browse source

Add audit.thread tests to check that the PID tied to a domain is not a
thread ID but the thread group ID.  These new tests would not pass
without the previous TGID fix.

Extend matches_log_domain_allocated() to check against the PID that
created the domain.

Test coverage for security/landlock is 93.6% of 1524 lines according to
gcc/gcov-14.

Cc: Christian Brauner <brauner@kernel.org>
Cc: Günther Noack <gnoack@google.com>
Cc: Paul Moore <paul@paul-moore.com>
Link: https://lore.kernel.org/r/20250410171725.1265860-3-mic@digikod.net
Signed-off-by: Mickaël Salaün <mic@digikod.net>

...

This commit is contained in:

Mickaël Salaün 2025-04-10 19:17:23 +02:00

parent e4a0f9e0ca

commit 6b4566400a

No known key found for this signature in database

GPG key ID: E5E3D0E88C82F6D2

3 changed files with 141 additions and 10 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

21

tools/testing/selftests/landlock/audit.h

View file

127

tools/testing/selftests/landlock/audit_test.c

View file

3

tools/testing/selftests/landlock/fs_test.c

View file