~cascardo/qa-regression-testing:bpf

Branch merges

Propose for merging

Ready for review for merging into qa-regression-testing:master

Steve Beattie: Pending requested 2021-10-14

Diff: 407 lines (+385/-0)

3 files modified

scripts/kernel-security/capbpf/Makefile (+5/-0)
scripts/kernel-security/capbpf/capbpf.c (+373/-0)
scripts/test-kernel-security.py (+7/-0)

api

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related charm recipes

c247602... by Thadeu Lima de Souza Cascardo on 2021-10-14

kernel-security/capbpf: test CAP_BPF and unprivileged_bpf_disabled

Test that bpf syscall is not allowed when unprivileged_bpf_disabled !=0
and process does not have either CAP_BPF or CAP_SYS_ADMIN.

Test multiple variations of it, including changing the value of
unprivileged_bpf_disabled when it can be reverted back.

It still works on kernels where CAP_BPF is not supported, though the
test is more limited in this case.

Signed-off-by: Thadeu Lima de Souza Cascardo <email address hidden>

d56f334... by Steve Beattie on 2021-10-06

test-kernel-security: mmap-min-addr cope for arm 64k page kernels

The generic kernels offer a variant for arm64 platforms where
CONFIG_ARM64_64K_PAGES is enabled. In such situations it appears that
mmap_min_addr is effectively no smaller than the page size, so even
though the kernel reports a 32k size on arm, the actual enforced value
is 64k in size.

Signed-off-by: Steve Beattie <email address hidden>
Bug: https://bugs.launchpad.net/ubuntu-kernel-tests/+bug/1931393

d92d8a8... by "Leonidas S. Barbosa" <leo.barbosa@canonical> on 2021-10-01

Adding mysql-server-5.7 to mysql test list

e08bbed... by Steve Beattie on 2021-09-30

openjdk/notes_testing: update for openjdk-16

Signed-off-by: Steve Beattie <email address hidden>

0b76334... by "Leonidas S. Barbosa" <leo.barbosa@canonical> on 2021-09-16

Adding libgcrypt20 notes in testing

966e945... by Marc Deslauriers on 2021-09-10

added some ntfs-3g testing notes and fix test for later releases

5c0320e... by Andrea Righi on 2021-09-09

test-apparmor: do not apply CAP_CHECKPOINT_RESTORE in impish

We don't need to apply the CAP_CHECKPOINT_RESTORE workaround anymore in
impish, because the apparmor package already contains the definition of
this new capability in severity.db.

[fixed up to use == for the version check --sbeattie]

Signed-off-by: Andrea Righi <email address hidden>
Reviewed-by: Steve Beattie <email address hidden>

a4bdc85... by Alex Murray on 2021-08-30

test-squashfs-tools.py: Fix depends for private test

This needs to be named with an underscore so we can import it directly when
it is present.

9cbc30b... by Alex Murray on 2021-08-27

test-squashfs-tools.py: Fix on focal/hirsute/impish etc

08c1b2e... by Alex Murray on 2021-08-27

test-squashfs-tools.py: Fix on xenial and ensure we run with root