selftests/bpf: Check if the digest is refreshed after a file write

Browse source

Verify that bpf_ima_inode_hash() returns a non-fresh digest after a file
write, and that bpf_ima_file_hash() returns a fresh digest. Verification is
done by requesting the digest from the bprm_creds_for_exec hook, called
before ima_bprm_check().

Signed-off-by: Roberto Sassu <roberto.sassu@huawei.com>
Signed-off-by: Alexei Starovoitov <ast@kernel.org>
Link: https://lore.kernel.org/bpf/20220302111404.193900-7-roberto.sassu@huawei.com

...

This commit is contained in:

Roberto Sassu 2022-03-02 12:14:01 +01:00 • committed by Alexei Starovoitov

parent 27a77d0d46

commit 91e8fa254d

3 changed files with 103 additions and 4 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

24

tools/testing/selftests/bpf/ima_setup.sh

View file

72

tools/testing/selftests/bpf/prog_tests/test_ima.c

View file

11

tools/testing/selftests/bpf/progs/ima.c

View file