If I understand correctly the security window for 4.4 has been closed
now (as changes went to next).
Anyway, I updated the series to the latest smack-for-4.4 branch.
Including the new relabel-self interface that received namespace
treatment as well. Also the RCU fix reported on the list has been
included.
The latest version is available here:
https://github.com/Havner/smack-namespace/tree/smack-namespace-current
Also I've uploaded our Linux Test Project branch I use for Smack and
Smack namespace testing (including regressions):
https://github.com/Havner/ltp
It has the basic smack tests rewritten to C. The ones that were scripts
before. They are integrated with LTP framework.
Inside testcases/kernel/security/smack/ns is a separate set of tests
that share some common functions with the former, but are not otherwise
integrated with LTP (yet). In this regard this is very much WIP.
Those tests have an advantage though that they run a common set of
tests in 6 Smack environments: no namespace, user namespace, user
namespace + smack map. Each in a privileged and non-privileged
scenario.
To run them do the following:
cd testcases/kernel/security/smack/ns
make
./smack_ns_run.sh
smackfs has to be mounted in /smack (following the regular tests).
mount -o bind /sys/fs/smackfs /smack
is enough.
--
Lukasz Pawelczyk
Samsung R&D Institute Poland
Samsung Electronics