Re: [PATCH testsuite v2] tests/overlay: verify that execmem is not checked for the mounter

Ondrej Mosnacek <[email protected]> Wed, 29 Jul 2026 15:11:51 +0200

Newsgroups	org.kernel.vger.selinux
Message-ID	<CAFqZXNspzXtCaE_oYcTaug18FM+XW_Vh_=R-XAS98dYxYvqfow@mail.gmail.com>

On Thu, Jul 9, 2026 at 3:00 PM Ondrej Mosnacek <[email protected]> wrote:
>
> Add a test that verifies that the execmem permission is checked only on
> the process mapping/updating the memory region and not against the
> mounter credentials.
>
> Signed-off-by: Ondrej Mosnacek <[email protected]>
> Acked-by: Stephen Smalley <[email protected]>
> ---
>
> v2: apply tools/check-syntax formatting
>
>  policy/test_overlayfs.te   |  4 ++++
>  tests/overlay/map_access.c | 20 ++++++++++++--------
>  tests/overlay/test         | 11 ++++++++++-
>  3 files changed, 26 insertions(+), 9 deletions(-)

This is now applied:
https://github.com/SELinuxProject/selinux-testsuite/commit/76f9960cee3f890458c876d5980648ee8dac9761

-- 
Ondrej Mosnacek
Senior Software Engineer, Linux Security - SELinux kernel
Red Hat, Inc.