public/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

grsecurity test: refactoring

Browse Source
This commit is contained in:
Joachim Fasting 2016-12-10 13:38:26 +01:00
parent c1d60d8c1e
commit 64a64c6b14
No known key found for this signature in database
GPG Key ID: 7544761007FE4E08
1 changed files with 10 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
nixos/tests/grsecurity.nix
View File

@ -8,7 +8,9 @@ import ./make-test.nix ({ pkgs, ...} : {
machine = { config, pkgs, ... }: machine = { config, pkgs, ... }:
{ security.grsecurity.enable = true; { security.grsecurity.enable = true;
boot.kernel.sysctl."kernel.grsecurity.audit_mount" = 0;
boot.kernel.sysctl."kernel.grsecurity.deter_bruteforce" = 0; boot.kernel.sysctl."kernel.grsecurity.deter_bruteforce" = 0;
networking.useDHCP = false;
}; };
testScript = '' testScript = ''
@ -20,16 +22,14 @@ import ./make-test.nix ({ pkgs, ...} : {
subtest "paxtest", sub { subtest "paxtest", sub {
# TODO: running paxtest blackhat hangs the vm # TODO: running paxtest blackhat hangs the vm
$machine->succeed("${pkgs.paxtest}/lib/paxtest/anonmap") =~ /Killed/ or die; my @pax_mustkill = (
$machine->succeed("${pkgs.paxtest}/lib/paxtest/execbss") =~ /Killed/ or die; "anonmap", "execbss", "execdata", "execheap", "execstack",
$machine->succeed("${pkgs.paxtest}/lib/paxtest/execdata") =~ /Killed/ or die; "mprotanon", "mprotbss", "mprotdata", "mprotheap", "mprotstack",
$machine->succeed("${pkgs.paxtest}/lib/paxtest/execheap") =~ /Killed/ or die; );
$machine->succeed("${pkgs.paxtest}/lib/paxtest/execstack") =~ /Killed/ or die; foreach my $name (@pax_mustkill) {
$machine->succeed("${pkgs.paxtest}/lib/paxtest/mprotanon") =~ /Killed/ or die; my $paxtest = "${pkgs.paxtest}/lib/paxtest/" . $name;
$machine->succeed("${pkgs.paxtest}/lib/paxtest/mprotbss") =~ /Killed/ or die; $machine->succeed($paxtest) =~ /Killed/ or die
$machine->succeed("${pkgs.paxtest}/lib/paxtest/mprotdata") =~ /Killed/ or die; }
$machine->succeed("${pkgs.paxtest}/lib/paxtest/mprotheap") =~ /Killed/ or die;
$machine->succeed("${pkgs.paxtest}/lib/paxtest/mprotstack") =~ /Killed/ or die;
}; };
# tcc -run executes run-time generated code and so allows us to test whether # tcc -run executes run-time generated code and so allows us to test whether