[PATCH 0/2] Add io_uring test with Landlock access control rules
Dorine Tipo <[email protected]>
| Newsgroups | dev.linux.lists.outreachy |
|---|---|
| Message-ID | <[email protected]> |
This patch series introduces a new test for verifying Landlock access control rules with io_uring operation, IORING_OP_OPENAT. The first patch (Add test for io_uring openat access control with Landlock rules) implements the actual test. - The test defines allowed and disallowed paths for access attempts. - It creates Landlock rulesets for both allowed and disallowed access. - It uses io_uring_prep_openat with the rulesets to attempt opening files. - The test verifies successful preparation for allowed access and expects submission failures for disallowed access. The second patch (Add liburing dependency for io_uring test) updates the Makefile to include the necessary liburing library. This patch series improves Landlock's test coverage by incorporating io_uring operations and helps ensure Landlock effectively controls access through io_uring. It enhances the overall security posture of the system. The test has been successfully compiled using make run_tests -C landlock and successfully verifies Landlock access control with io_uring. Dorine Tipo (2): Add test for io_uring openat access control with Landlock rules Add liburing dependency for io_uring test tools/testing/selftests/landlock/Makefile | 4 +- tools/testing/selftests/landlock/fs_test.c | 132 +++++++++++++++++++++ 2 files changed, 134 insertions(+), 2 deletions(-) -- 2.25.1