| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
|
|
| |
A very basic syncproxy test: set up a connection via a synproxy rule.
This triggeres the panic fixed in r336273.
Notes:
svn path=/head/; revision=336297
|
|
|
|
|
|
|
|
|
|
| |
Enable ptrace() tests using breakpoint() on these architectures.
Reviewed by: andrew
Differential Revision: https://reviews.freebsd.org/D15191
Notes:
svn path=/head/; revision=336053
|
|
|
|
|
|
|
|
|
|
| |
Submitted by: aniketp
MFC after: 2 weeks
Sponsored by: Google, Inc. (GSoC 2018)
Differential Revision: https://reviews.freebsd.org/D16086
Notes:
svn path=/head/; revision=335842
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Includes ntp_adjtime, auditctl, acct, auditon, and clock_settime. Includes
quotactl, mount, nmount, swapon, and swapoff in failure mode only. Success
tests for those syscalls will follow. Also includes reboot(2) in failure
mode only. That one can't be tested in success mode.
Submitted by: aniketp
MFC after: 2 weeks
Sponsored by: Google, Inc. (GSoC 2018)
Differential Revision: https://reviews.freebsd.org/D15898
Notes:
svn path=/head/; revision=335792
|
|
|
|
|
|
|
|
|
|
| |
Submitted by: aniketp
MFC after: 2 weeks
Sponsored by: Google, Inc. (GSoC 2018)
Differential Revision: https://reviews.freebsd.org/D16035
Notes:
svn path=/head/; revision=335791
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Fix several incorrect buffer size arguments and a file descriptor leak.
Submitted by: aniketp
Reported by: Coverity
CID: 1393489 1393501 1393509 1393510 1393514 1393515 1393516
CID: 1393517 1393518 1393519
MFC after: 2 weeks
X-MFC-With: 335284
X-MFC-With: 335318
X-MFC-With: 335320
Sponsored by: Google, Inc. (GSoC 2018)
Differential Revision: https://reviews.freebsd.org/D16000
Notes:
svn path=/head/; revision=335703
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Tested syscalls include rfork(2), chdir(2), fchdir(2), chroot(2),
getresuid(2), getresgid(2), setpriority(2), setgroups(2), setpgrp(2),
setrlimit(2), setlogin(2), mlock(2), munlock(2), minherit(2), rtprio(2),
profil(2), ktrace(2), ptrace(2), fork(2), umask(2), setuid(2), setgid(2),
seteuid(2), and setegid(2). The last six are only tested in the success
case, either because they're infalliable or a failure is difficult to cause
on-demand.
Submitted by: aniketp
MFC after: 2 weeks
Sponsored by: Google, Inc. (GSoC 2018)
Differential Revision: https://reviews.freebsd.org/D15966
Notes:
svn path=/head/; revision=335679
|
|
|
|
|
|
|
|
|
|
| |
Submitted by: aniketp
MFC after: 2 weeks
Sponsored by: Google, Inc. (GSoC 2018)
Differential Revision: https://reviews.freebsd.org/D15963
Notes:
svn path=/head/; revision=335677
|
|
|
|
|
|
|
|
|
|
| |
Submitted by: aniketp
MFC after: 2 weeks
Sponsored by: Google, Inc. (GSoC 2018)
Differential Revision: https://reviews.freebsd.org/D15897
Notes:
svn path=/head/; revision=335528
|
|
|
|
|
|
|
|
|
|
| |
Submitted by: aniketp
MFC after: 2 weeks
Sponsored by: Google, Inc. (GSoC 2018)
Differential Revision: https://reviews.freebsd.org/D15895
Notes:
svn path=/head/; revision=335378
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Includes utimes(2), futimes(2), lutimes(2), futimesat(2), mprotect(2), and
undelete(2). undelete, for now, is tested only in failure mode.
Submitted by: aniketp
MFC after: 2 weeks
Sponsored by: Google, Inc. (GSoC 2018)
Differential Revision: https://reviews.freebsd.org/D15893
Notes:
svn path=/head/; revision=335374
|
|
|
|
|
|
|
|
|
|
| |
Submitted by: aniketp
MFC after: 2 weeks
Sponsored by: Google, Inc. (GSoC 2018)
Differential Revision: https://reviews.freebsd.org/D15872
Notes:
svn path=/head/; revision=335354
|
|
|
|
|
|
|
|
|
|
| |
Submitted by: aniketp
MFC after: 2 weeks
Sponsored by: Google, Inc. (GSoC 2018)
Differential Revision: https://reviews.freebsd.org/D15871
Notes:
svn path=/head/; revision=335320
|
|
|
|
|
|
|
|
|
|
| |
Submitted by: aniketp
MFC after: 2 weeks
Sponsored by: Google, Inc. (GSoC 2018)
Differential Revision: https://reviews.freebsd.org/D15869
Notes:
svn path=/head/; revision=335319
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Includes extattr_{set_file, _set_fd, _set_link, _delete_file, _delete_fd,
_delete_link}
Submitted by: aniketp
MFC after: 2 weeks
Sponsored by: Google, Inc. (GSoC 2018)
Differential Revision: https://reviews.freebsd.org/D15867
Notes:
svn path=/head/; revision=335318
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
This was correct in the final version on Phabricator, but somehow I screwed
up applying the patch locally.
Reported by: linimon
Pointy-hat-to: asomers
MFC after: 2 weeks
X-MFC-With: 335307
Notes:
svn path=/head/; revision=335311
|
|
|
|
|
|
|
|
|
|
|
|
| |
includes shmget, shmat, shmdt, and shmctl
Submitted by: aniketp
MFC after: 2 weeks
Sponsored by: Google, Inc (GSoC 2018)
Differential Revision: https://reviews.freebsd.org/D15860
Notes:
svn path=/head/; revision=335307
|
|
|
|
|
|
|
|
|
|
| |
Submitted by: aniketp
MFC after: 2 weeks
Sponsored by: Google, Inc. (GSoC 2018)
Differential Revision: https://reviews.freebsd.org/D15853
Notes:
svn path=/head/; revision=335294
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
The ad audit class is for administrative commands. This commit adds test
for settimeofday, adjtime, and getfh.
Submitted by: aniketp
MFC after: 2 weeks
Sponsored by: Google, Inc. (GSoC 2018)
Differential Revision: https://reviews.freebsd.org/D15861
Notes:
svn path=/head/; revision=335285
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
This commit includes extattr_{get_file, get_fd, get_link, list_file,
list_fd, list_link}. It does not include any syscalls that modify, set, or
delete extended attributes, as those are in a different audit class.
Submitted by: aniketpt
MFC after: 2 weeks
Sponsored by: Google, Inc. (GSoC 2018)
Differential Revision: https://reviews.freebsd.org/D15859
Notes:
svn path=/head/; revision=335284
|
|
|
|
|
|
|
|
|
|
|
|
| |
chflags, fchflags, and lchflags (but not chflagsat) are included.
Submitted by: aniketp
MFC after: 2 weeks
Sponsored by: Google, Inc. (GSoC 2018)
Differential Revision: https://reviews.freebsd.org/D15854
Notes:
svn path=/head/; revision=335275
|
|
|
|
|
|
|
|
|
|
|
|
| |
pathconf, lpathconf, and fpathconf are included
Submitted by: aniketp
MFC after: 2 weeks
Sponsored by: Google, Inc. (GSoC 2018)
Differential Revision: https://reviews.freebsd.org/D15842
Notes:
svn path=/head/; revision=335261
|
|
|
|
|
|
|
|
|
|
| |
Submitted by: aniketp
MFC after: 2 weeks
Sponsored by: Google, Inc. (GSoC 2018)
Differential Revision: https://reviews.freebsd.org/D15848
Notes:
svn path=/head/; revision=335260
|
|
|
|
|
|
|
|
|
|
|
|
| |
Includes chown, fchown, lchown, and fchownat
Submitted by: aniketp
MFC after: 2 weeks
Sponsored by: Google, Inc. (GSoC 2018)
Differential Revision: https://reviews.freebsd.org/D15825
Notes:
svn path=/head/; revision=335256
|
|
|
|
|
|
|
|
|
|
| |
Submitted by: aniketp
MFC after: 2 weeks
Sponsored by: Google, Inc. (GSoC 2018)
Differential Revision: https://reviews.freebsd.org/D15843
Notes:
svn path=/head/; revision=335255
|
|
|
|
|
|
|
|
|
|
|
|
| |
Add tests for socket(2), socketpair(2), and setsockopt(2)
Submitted by: aniketp
MFC after: 2 weeks
Sponsored by: Google, Inc. (GSoC 2018)
Differential Revision: https://reviews.freebsd.org/D15803
Notes:
svn path=/head/; revision=335215
|
|
|
|
|
|
|
|
|
|
|
|
| |
[skip ci]
Submitted by: aniketp
MFC after: 2 weeks
Sponsored by: Google, Inc. (GSoC 2018)
Differential Revision: https://reviews.freebsd.org/D15797
Notes:
svn path=/head/; revision=335208
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
access(2), eaccess(2), faccessat(2), chmod(2), fchmod(2), lchmod(2), and
fchmodat(2).
Submitted by: aniketp
MFC after: 2 weeks
Sponsored by: Google, Inc. (GSoC 2018)
Differential Revision: https://reviews.freebsd.org/D15805
Differential Revision: https://reviews.freebsd.org/D15808
Notes:
svn path=/head/; revision=335207
|
|
|
|
|
|
|
|
|
|
| |
Submitted by: aniketp
MFC after: 2 weeks
Sponsored by: Google, Inc. (GSoC 2018)
Differential Revision: https://reviews.freebsd.org/D15798
Notes:
svn path=/head/; revision=335145
|
|
|
|
|
|
|
|
|
|
| |
Typo in Makefile accidentally disabled some older tests
MFC after: 2 weeks
X-MFC-With: 335136
Notes:
svn path=/head/; revision=335140
|
|
|
|
|
|
|
|
|
|
| |
Submitted by: aniketp
MFC after: 2 weeks
Sponsored by: Google, Inc (GSoC 2018)
Differential Revision: https://reviews.freebsd.org/D15795
Notes:
svn path=/head/; revision=335136
|
|
|
|
|
|
|
|
|
|
| |
Submitted by: aniketp
MFC after: 2 weeks
Sponsored by: Google, Inc (GSoC 2018)
Differential Revision: https://reviews.freebsd.org/D15750
Notes:
svn path=/head/; revision=335105
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Submitted by: aniketp
Reported by: Coverity
CID: 1393343 1393346 1392695 1392781 1391709 1392078 1392413
CID: 1392014 1392521 1393344 1393345 1393347 1393348 1393349
CID: 1393354 1393355 1393356 1393357 1393358 1393360 1393362
CID: 1393368 1393369 1393370 1393371 1393372 1393373 1393376
CID: 1393380 1393384 1393387 1393388 1393389
MFC after: 2 weeks
Sponsored by: Google, Inc (GSoC 2018)
Differential Revision: https://reviews.freebsd.org/D15782
Notes:
svn path=/head/; revision=335067
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
This revision adds auditability tests for stat, lstat, fstat, and fstatat,
all from the fa audit class. More tests from that audit class will follow.
Submitted by: aniketp
MFC after: 2 weeks
Sponsored by: Google, Inc. (GSoC 2018)
Differential Revision: https://reviews.freebsd.org/D15709
Notes:
svn path=/head/; revision=334933
|
|
|
|
|
|
|
|
| |
Very basic route-to tests. These tests attempt to provoke PR 228782 for IPv4
and IPv6. A test failure will panic the machine.
Notes:
svn path=/head/; revision=334877
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
These syscalls are atypical, because each one corresponds to several
different audit events, and they each pass several different audit class
filters.
Submitted by: aniketp
MFC after: 2 weeks
Sponsored by: Google, Inc. (GSoC 2018)
Differential Revision: https://reviews.freebsd.org/D15657
Notes:
svn path=/head/; revision=334668
|
|
|
|
|
|
|
|
|
|
|
|
| |
The only syscalls in this class are close, closefrom, munmap, and revoke.
Submitted by: aniketp
MFC after: 2 weeks
Sponsored by: Google, Inc. (GSoC 2018)
Differential Revision: https://reviews.freebsd.org/D15650
Notes:
svn path=/head/; revision=334592
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
The only syscalls in this class are rmdir, unlink, unlinkat, rename, and
renameat. Also, set is_exclusive for all audit(4) tests, because they can
start and stop auditd.
Submitted by: aniketp
MFC after: 2 weeks
Sponsored by: Google, Inc. (GSoC 2018)
Differential Revision: https://reviews.freebsd.org/D15647
Notes:
svn path=/head/; revision=334496
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
truncate and ftruncate are the only syscalls in this class, apart from
certain variations of open and openat, which will be handled in a different
file.
Submitted by: aniketp
MFC after: 2 weeks
Sponsored by: Google, Inc. (GSoC 2018)
Differential Revision: https://reviews.freebsd.org/D15640
Notes:
svn path=/head/; revision=334487
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
readlink and readlinkat are the only syscalls in this class. open and
openat are as well, but they'll be handled in a different file. Also, tidy
up the copyright headers of recently added files in this area.
Submitted by: aniketp
MFC after: 2 weeks
Sponsored by: Google, Inc. (GSoC 2018)
Differential Revision: https://reviews.freebsd.org/D15636
Notes:
svn path=/head/; revision=334471
|
|
|
|
|
|
|
|
|
|
| |
Reconnect tests/sys/audit now that the GCC issue is fixed by 334388
MFC after: 2 weeks
X-MFC-With: 334362, 334360, 334388
Notes:
svn path=/head/; revision=334395
|
|
|
|
|
|
|
|
|
| |
Audit tests added in r334360 broke the build on a number of archs.
Remove the subdir from the top level tests/sys/Makefile until they're
fixed.
Notes:
svn path=/head/; revision=334362
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
This change includes the framework for testing the auditability of various
syscalls, and includes changes for the first 12. The tests will start
auditd(8) if needed, though they'll be much faster if it's already running.
The syscalls tested in this commit include mkdir(2), mkdirat(2), mknod(2),
mknodat(2), mkfifo(2), mkfifoat(2), link(2), linkat(2), symlink(2),
symlinkat(2), rename(2), and renameat(2).
Submitted by: aniketp
MFC after: 2 weeks
Sponsored by: Google, Inc (GSoC 2018)
Differential Revision: https://reviews.freebsd.org/D15286
Notes:
svn path=/head/; revision=334360
|
|
|
|
|
|
|
|
|
|
| |
As a result, enable tests using breakpoint() on riscv.
Reviewed by: br
Differential Revision: https://reviews.freebsd.org/D15191
Notes:
svn path=/head/; revision=333679
|
|
|
|
|
|
|
|
|
|
| |
Otherwise makefs gets upset:
makefs: ./usr/tests/sys/cddl/zfs/tests/exec/: empty leaf element
Sponsored by: The FreeBSD Foundation
Notes:
svn path=/head/; revision=333495
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Previously it was possible to connect a socket (which had the
CAP_CONNECT right) by calling "connectat(AT_FDCWD, ...)" even in
capabilties mode. This combination should be treated the same as a call
to connect (i.e. forbidden in capabilities mode). Similarly for bindat.
Disable connectat/bindat with AT_FDCWD in capabilities mode, fix up the
documentation and add tests.
PR: 222632
Submitted by: Jan Kokemüller <jan.kokemueller@gmail.com>
Reviewed by: Domagoj Stolfa
MFC after: 1 week
Relnotes: Yes
Differential Revision: https://reviews.freebsd.org/D15221
Notes:
svn path=/head/; revision=333120
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
A pipe was was left over from a development version of pdeathsig.c and
is not needed.
Process C waits for a signal that'll be generated when process B
exists. Process B waits for process D to send it a byte via pipe_db
before it exits. Process D sends the byte after it has started
ptrace()ing process C. The point of the test is to show that process C
receives the signal because process B exited, even though C has been
reparented to process D. The pipe pipe_cd isn't doing anything useful
(though in an earlier version of the patch it did). Clean that up by
removing the useless pipe.
Submitted by: Thomas Munro
MFC after: 6 days
Differential revision: https://reviews.freebsd.org/D15214
Notes:
svn path=/head/; revision=333067
|
|
|
|
| |
Notes:
svn path=/head/; revision=332976
|
|
|
|
|
|
|
|
|
|
| |
- ptrace__breakpoint_siginfo tests that a SIGTRAP for a software breakpoint
in userland triggers a SIGTRAP with a signal code of TRAP_BRKPT.
- ptrace__step_siginfo tests that a SIGTRAP reported for a step after
stepping via PT_STEP or PT_SETSTEP has a signal code of TRAP_TRACE.
Notes:
svn path=/head/; revision=332908
|
|
|
|
|
|
|
|
|
|
| |
Enable ptrace() tests using breakpoint on MIPS as well.
Tested on: mips64
MFC after: 1 month
Notes:
svn path=/head/; revision=332907
|