[PATCH 0/2] Add io_uring test with Landlock access control rules

Dorine Tipo <[email protected]>
Newsgroups dev.linux.lists.outreachy
Message-ID <[email protected]>
This patch series introduces a new test for verifying Landlock access
control rules with io_uring operation, IORING_OP_OPENAT.

The first patch (Add test for io_uring openat access control with Landlock
rules) implements the actual test.

- The test defines allowed and disallowed paths for access attempts.
- It creates Landlock rulesets for both allowed and disallowed access.
- It uses io_uring_prep_openat with the rulesets to attempt opening files.
- The test verifies successful preparation for allowed access and expects
submission failures for disallowed access.

The second patch  (Add liburing dependency for io_uring test) updates the
Makefile to include the necessary liburing library.

This patch series improves Landlock's test coverage by incorporating
io_uring operations and helps ensure Landlock effectively controls access
through io_uring.
It enhances the overall security posture of the system.

The test has been successfully compiled using make run_tests -C landlock
and successfully verifies Landlock access control with io_uring.

Dorine Tipo (2):
  Add test for io_uring openat access control with Landlock rules
  Add liburing dependency for io_uring test

 tools/testing/selftests/landlock/Makefile  |   4 +-
 tools/testing/selftests/landlock/fs_test.c | 132 +++++++++++++++++++++
 2 files changed, 134 insertions(+), 2 deletions(-)

--
2.25.1
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.