[LTP] [003][RFC] [TESTING linux-2.6.30] TOMOYO Linux and pathname-based security

Subrata Modak

author

2009-06-12 02:53 UTC #0 lore raw

Hello Kentaro-san,

With TOMOYO Linux emerging as alternative Mandatory Access Control alongside SELinux & SMACK in linux-2.6.30, would you like to share the testing infrastructure of TOMYO with The Linux Test Project
(http://ltp.sf.net).

We would like to inform you that we have some robust sets of testcases for both SELinux, SMACK, IMA, etc at
http://ltp.cvs.sourceforge.net/viewvc/ltp/ltp/testcases/kernel/security/.
And i would express to have TOMYO being tested through LTP. If you agree to contribute some test cases in this regard to LTP under GPLv2, we can make a modest but great beginning. What do you say ?

Regards--
Subrata

------------------------------------------------------------------------------
Crystal Reports - New Free Runtime and 30 Day Trial
Check out the new simplified licensing option that enables unlimited royalty-free distribution of the report engine for externally facing server and web deployment.
http://p.sf.net/sfu/businessobjects
_______________________________________________
Ltp-list mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/ltp-list

Tetsuo Handa

2009-06-14 13:14 UTC #1 lore raw

Re: [LTP] [003][RFC] [TESTING linux-2.6.30] TOMOYO Linux and pathname-basedsecurity

Hello.

Sorry for late response. I had no internet access for three days.

Quoted 6 lines · Subrata Modak

We would like to inform you that we have some robust sets of testcases for both SELinux, SMACK, IMA, etc at
http://ltp.cvs.sourceforge.net/viewvc/ltp/ltp/testcases/kernel/security/.
And i would express to have TOMYO being tested through LTP. If you agree to contribute some test cases in this regard to LTP under GPLv2, we can make a modest but great beginning. What do you say ?

Yes, we are willing to contribute TOMOYO's test cases to LTP. Currently, we are using testing programs available at
http://sourceforge.jp/projects/tomoyo/svn/view/trunk/1.6.x/ccs-tools/ccstools/kernel_test/?root=tomoyo
But they are not some shell scripting programs.
Thus, I need to remake these programs to follow LTP conventions. Can I have some documentation regarding how to write LTP testing programs?

Regards.

------------------------------------------------------------------------------
Crystal Reports - New Free Runtime and 30 Day Trial
Check out the new simplified licensing option that enables unlimited royalty-free distribution of the report engine for externally facing server and web deployment.
http://p.sf.net/sfu/businessobjects
_______________________________________________
Ltp-list mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/ltp-list

Subrata Modak

author

2009-06-15 19:18 UTC #2 lore raw

Re: [LTP] [003][RFC] [TESTING linux-2.6.30] TOMOYO Linux and pathname-basedsecurity

Quoted 5 lines · Tetsuo Handa

Hello.
Sorry for late response. I had no internet access for three days.
Subrata Modak wrote:

Quoted 8 lines

Quoted 6 lines
We would like to inform you that we have some robust sets of testcases for both SELinux, SMACK, IMA, etc at
http://ltp.cvs.sourceforge.net/viewvc/ltp/ltp/testcases/kernel/security/.
And i would express to have TOMYO being tested through LTP. If you agree to contribute some test cases in this regard to LTP under GPLv2, we can make a modest but great beginning. What do you say ?
Yes, we are willing to contribute TOMOYO's test cases to LTP.

Great to hear that.

Quoted 5 lines

Currently, we are using testing programs available at
http://sourceforge.jp/projects/tomoyo/svn/view/trunk/1.6.x/ccs-tools/ccstools/kernel_test/?root=tomoyo
But they are not some shell scripting programs.
Thus, I need to remake these programs to follow LTP conventions. Can I have some documentation regarding how to write LTP testing programs?

Sure. Why not. Please see:

http://ltp.sourceforge.net/
http://ltp.sourceforge.net/documentation/how-to/ltp.php
http://ltp.sourceforge.net/documentation/technical_papers/

Regards--
Subrata

Quoted 2 lines

Regards.

------------------------------------------------------------------------------
Crystal Reports - New Free Runtime and 30 Day Trial
Check out the new simplified licensing option that enables unlimited royalty-free distribution of the report engine for externally facing server and web deployment.
http://p.sf.net/sfu/businessobjects
_______________________________________________
Ltp-list mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/ltp-list

Subrata Modak

author

2009-06-18 17:32 UTC #3 lore raw

Re: [LTP] [003][RFC] [TESTING linux-2.6.30] TOMOYO Linux and pathname-basedsecurity

Quoted 23 lines · Subrata Modak

Quoted 5 lines · Tetsuo Handa
Hello.
Sorry for late response. I had no internet access for three days.
Subrata Modak wrote:
Quoted 8 lines
Quoted 6 lines
We would like to inform you that we have some robust sets of testcases for both SELinux, SMACK, IMA, etc at
http://ltp.cvs.sourceforge.net/viewvc/ltp/ltp/testcases/kernel/security/.
And i would express to have TOMYO being tested through LTP. If you agree to contribute some test cases in this regard to LTP under GPLv2, we can make a modest but great beginning. What do you say ?
Yes, we are willing to contribute TOMOYO's test cases to LTP.
Great to hear that.
Quoted 5 lines
Currently, we are using testing programs available at
http://sourceforge.jp/projects/tomoyo/svn/view/trunk/1.6.x/ccs-tools/ccstools/kernel_test/?root=tomoyo
But they are not some shell scripting programs.
Thus, I need to remake these programs to follow LTP conventions. Can I have some documentation regarding how to write LTP testing programs?

Quoted 5 lines

Sure. Why not. Please see:
http://ltp.sourceforge.net/
http://ltp.sourceforge.net/documentation/how-to/ltp.php
http://ltp.sourceforge.net/documentation/technical_papers/

Hi,

Do you feel the above information is sufficient for your to write tests for LTP ? Please feel free to ask us questions regarding anything to LTP tests.

Regards--
Subrata

Quoted 8 lines

Regards--
Subrata
Quoted 2 lines
Regards.

Quoted 10 lines

------------------------------------------------------------------------------
Crystal Reports - New Free Runtime and 30 Day Trial
Check out the new simplified licensing option that enables unlimited royalty-free distribution of the report engine for externally facing server and web deployment.
http://p.sf.net/sfu/businessobjects
_______________________________________________
Ltp-list mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/ltp-list

------------------------------------------------------------------------------
Crystal Reports - New Free Runtime and 30 Day Trial
Check out the new simplified licensing option that enables unlimited royalty-free distribution of the report engine for externally facing server and web deployment.
http://p.sf.net/sfu/businessobjects
_______________________________________________
Ltp-list mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/ltp-list

Tetsuo Handa

2009-06-19 07:14 UTC #4 lore raw

Re: [LTP] [003][RFC] [TESTING linux-2.6.30] TOMOYO Linux and pathname-basedsecurity

Hello.

Quoted 3 lines · Subrata Modak

Do you feel the above information is sufficient for your to write tests for LTP ? Please feel free to ask us questions regarding anything to LTP tests.

Yes. I'm reading it now. Some random topics I noticed...

In http://ltp.sourceforge.net/ltpman.php ...
The "LTP test driver PAN" points to
http://ltp.sourceforge.net/ltpmantemp.php?file=man1/pan.html
but the content seems empty.
Same result for other topics.
Is ltpmantemp.php working?

In "Developing tests in ANSI-C using LTP test harness API's" at
http://ltp.sourceforge.net/documentation/how-to/ltp.php ...

Quoted 5 lines

TFAIL
Print the test case result. The tst_resm/tst_res function prints related messages to the screen indicating a test failure. The test will exit with a non-zero exit value when tst_exit function is called.
test01 0 PASS : uname command exited with error code = 255

I think this is "FAIL : uname command exited with error code = 255".

Quoted 4 lines

TWARN
Print warning messages. For example, when system resources are low.
test01 0 PASS : System low on memory, test case might fail.

I think this is "WARN : System low on memory, test case might fail."

There are several "amp;" which I think it meant '&'.

In "Recommendation on coding style"...

Quoted 2 lines

Check for return values from system calls. Report reason appropriately using the tst_brkm() API. The recommended style is as follows:
Use spaces instead of tab characters. Typically four spaces may be used instead of a tab character.

Ouch! I'm writing testcases in accordance with script/checkpatch.pl in Linux kernel source tree. I expect that those who update/maintain testcases for kernel source code likely have some experience in writing kernel patches. Is it preferable to change codyng style in accordance with LTP?

http://ltp.cvs.sourceforge.net/viewvc/ltp/ltp/testcases/kernel/selinux-testsuite/
seems to be moved to
http://ltp.cvs.sourceforge.net/viewvc/ltp/ltp/testcases/kernel/security/selinux-testsuite/

Many programs under
http://ltp.cvs.sourceforge.net/viewvc/ltp/ltp/testcases/kernel/security/ seems not using harness APIs...
Are these programs intended for executed by general LTP users?

------------------------------------------------------------------------------
Crystal Reports - New Free Runtime and 30 Day Trial
Check out the new simplified licensing option that enables unlimited royalty-free distribution of the report engine for externally facing server and web deployment.
http://p.sf.net/sfu/businessobjects
_______________________________________________
Ltp-list mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/ltp-list

Subrata Modak

author

2009-06-23 15:09 UTC #5 lore raw

Re: [LTP] [003][RFC] [TESTING linux-2.6.30] TOMOYO Linux and pathname-basedsecurity

Quoted 10 lines · Tetsuo Handa

Hello.
Quoted 3 lines · Subrata Modak
Do you feel the above information is sufficient for your to write tests for LTP ? Please feel free to ask us questions regarding anything to LTP tests.
Yes. I'm reading it now. Some random topics I noticed...

Quoted 6 lines

In http://ltp.sourceforge.net/ltpman.php ...
The "LTP test driver PAN" points to
http://ltp.sourceforge.net/ltpmantemp.php?file=man1/pan.html
but the content seems empty.
Same result for other topics.
Is ltpmantemp.php working?

I need to check out, as, i rarely give a look to the documentation stuff on the website due to lack of time ;-)

Quoted 25 lines

In "Developing tests in ANSI-C using LTP test harness API's" at
http://ltp.sourceforge.net/documentation/how-to/ltp.php ...
Quoted 5 lines
TFAIL
Print the test case result. The tst_resm/tst_res function prints related messages to the screen indicating a test failure. The test will exit with a non-zero exit value when tst_exit function is called.
test01 0 PASS : uname command exited with error code = 255
I think this is "FAIL : uname command exited with error code = 255".
Quoted 4 lines
TWARN
Print warning messages. For example, when system resources are low.
test01 0 PASS : System low on memory, test case might fail.
I think this is "WARN : System low on memory, test case might fail."
There are several "amp;" which I think it meant '&'.

Quoted 6 lines

In "Recommendation on coding style"...
Quoted 2 lines
Check for return values from system calls. Report reason appropriately using the tst_brkm() API. The recommended style is as follows:
Use spaces instead of tab characters. Typically four spaces may be used instead of a tab character.
Ouch! I'm writing testcases in accordance with script/checkpatch.pl in Linux

Actually, you should do according to script/checkpatch.pl. Recently we agreed to that. Alas, we have too many code to fix for this :-(

Quoted 12 lines

kernel source tree. I expect that those who update/maintain testcases for kernel source code likely have some experience in writing kernel patches. Is it preferable to change codyng style in accordance with LTP?
http://ltp.cvs.sourceforge.net/viewvc/ltp/ltp/testcases/kernel/selinux-testsuite/
seems to be moved to
http://ltp.cvs.sourceforge.net/viewvc/ltp/ltp/testcases/kernel/security/selinux-testsuite/

Quoted 4 lines

Many programs under
http://ltp.cvs.sourceforge.net/viewvc/ltp/ltp/testcases/kernel/security/ seems not using harness APIs...
Are these programs intended for executed by general LTP users?

Correct, there are many programs within LTP which do not use the harness. The main reason being:

Porting would have been a huge exercise, involving huge man hours. And simply people did not have time. So, looking into the usefulness of those tests, they were added to LTP. But, we are careful about the incremental addition of tests in LTP, in which case, it is easy to adhere to the harness specific standards. And hence we insist on using those harness when new tests keep coming in.

And hence, any test without harness can be added to LTP if it returns proper exit code, thus enabling the LTP provisioning engine to actually report back PASS/FAIL.

Regards--
Subrata

------------------------------------------------------------------------------
Are you an open source citizen? Join us for the Open Source Bridge conference! Portland, OR, June 17-19. Two days of sessions, one day of unconference: $250. Need another reason to go? 24-hour hacker lounge. Register today!
http://ad.doubleclick.net/clk;215844324;13503038;v?http://opensourcebridge.org
_______________________________________________
Ltp-list mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/ltp-list

Tetsuo Handa

2009-06-23 10:54 UTC #6 lore raw

Re: [LTP] [003][RFC] [TESTING linux-2.6.30] TOMOYO Linux andpathname-basedsecurity

In reply to Subrata Modak

Hello.

I uploaded the programs to http://sourceforge.jp/projects/tomoyo/svn/view/trunk/2.2.x/kernel_test/?root=tomoyo . I'll notify you again when I added more testcases.

Regards.

------------------------------------------------------------------------------
Are you an open source citizen? Join us for the Open Source Bridge conference! Portland, OR, June 17-19. Two days of sessions, one day of unconference: $250. Need another reason to go? 24-hour hacker lounge. Register today!
http://ad.doubleclick.net/clk;215844324;13503038;v?http://opensourcebridge.org
_______________________________________________
Ltp-list mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/ltp-list

Subrata Modak

author

2009-06-23 15:10 UTC #7 lore raw

Re: [LTP] [003][RFC] [TESTING linux-2.6.30] TOMOYO Linux andpathname-basedsecurity

Quoted 4 lines · Tetsuo Handa

Hello.
I uploaded the programs to http://sourceforge.jp/projects/tomoyo/svn/view/trunk/2.2.x/kernel_test/?root=tomoyo . I'll notify you again when I added more testcases.

Great. I will see and investigate soon to find out the ways to integrate them to LTP. Meanwhile, if you can help us with a Sign-off saying that you do not have any issue(s) in integrating the above tests to LTP; would be really necessary/helpful.

Regards--
Subrata

Quoted 2 lines

Regards.

------------------------------------------------------------------------------
Are you an open source citizen? Join us for the Open Source Bridge conference! Portland, OR, June 17-19. Two days of sessions, one day of unconference: $250. Need another reason to go? 24-hour hacker lounge. Register today!
http://ad.doubleclick.net/clk;215844324;13503038;v?http://opensourcebridge.org
_______________________________________________
Ltp-list mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/ltp-list

Tetsuo Handa

2009-06-24 10:45 UTC #8 lore raw

Re: [LTP] [003][RFC] [TESTING linux-2.6.30] TOMOYO Linuxandpathname-basedsecurity

Quoted 10 lines · Subrata Modak

Quoted 4 lines · Tetsuo Handa
Hello.
I uploaded the programs to http://sourceforge.jp/projects/tomoyo/svn/view/trunk/2.2.x/kernel_test/?root=tomoyo . I'll notify you again when I added more testcases.
Great. I will see and investigate soon to find out the ways to integrate them to LTP. Meanwhile, if you can help us with a Sign-off saying that you do not have any issue(s) in integrating the above tests to LTP; would be really necessary/helpful.

ccs-patch package (kernel patch for TOMOYO) and ccs-tools package (TOMOYO's userland programs) are released under the GPL. I have no license issues.

Signed-off-by Tetsuo Handa <[email protected]>

Regards.

------------------------------------------------------------------------------
_______________________________________________
Ltp-list mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/ltp-list

Subrata Modak

author

2009-06-25 09:57 UTC #9 lore raw

Re: [LTP] [003][RFC] [TESTING linux-2.6.30] TOMOYO Linuxandpathname-basedsecurity

Quoted 12 lines · Tetsuo Handa

Quoted 10 lines · Subrata Modak
Quoted 4 lines · Tetsuo Handa
Hello.
I uploaded the programs to http://sourceforge.jp/projects/tomoyo/svn/view/trunk/2.2.x/kernel_test/?root=tomoyo . I'll notify you again when I added more testcases.
Great. I will see and investigate soon to find out the ways to integrate them to LTP. Meanwhile, if you can help us with a Sign-off saying that you do not have any issue(s) in integrating the above tests to LTP; would be really necessary/helpful.

Quoted 4 lines

ccs-patch package (kernel patch for TOMOYO) and ccs-tools package (TOMOYO's userland programs) are released under the GPL. I have no license issues.
Signed-off-by Tetsuo Handa <[email protected]>

Thanks again.

Regards--
Subrata

Quoted 2 lines

Regards.

------------------------------------------------------------------------------
_______________________________________________
Ltp-list mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/ltp-list