Searched hist:172106 (Results 1 - 25 of 39) sorted by relevance

12

/freebsd-10-stable/tools/regression/priv/
H A Dpriv_acct.cdiff 172106 Sun Sep 09 21:08:39 MDT 2007 rwatson Enhance and expand kernel privilege regression tests in support of
work present in FreeBSD 7.0 to refine the kernel privilege model:

- Introduce support for jail as a testing variable, in order to
confirm that privileges are properly restricted in the jail
environment.

- Restructure overall testing approach so that privilege and jail
conditions are set in the testing infrastructure before tests
are invoked, and done so in a custom-created process to isolate
the impact of tests from each other in a more consistent way.

- Tests now provide setup and cleanup hooks that occur before and
after the test runs.

- New privilege tests are now present for several audit
privileges, several credential management privileges, dmesg
buffer reading privilege, and netinet raw socket creation.

- Other existing tests are restructured and generally improved as
a result of better framework structure and jail as a variable.
For exampe, we now test that certain sysctls are writable only
outside jail, while others are writable within jail. On a
similar note, privileges relating to setting UFS file flags are
now better exercised, as with the right to chmod and utimes
files.

Approved by: re (bmah)
Obtained from: TrustedBSD Project
H A Dpriv_adjtime.cdiff 172106 Sun Sep 09 21:08:39 MDT 2007 rwatson Enhance and expand kernel privilege regression tests in support of
work present in FreeBSD 7.0 to refine the kernel privilege model:

- Introduce support for jail as a testing variable, in order to
confirm that privileges are properly restricted in the jail
environment.

- Restructure overall testing approach so that privilege and jail
conditions are set in the testing infrastructure before tests
are invoked, and done so in a custom-created process to isolate
the impact of tests from each other in a more consistent way.

- Tests now provide setup and cleanup hooks that occur before and
after the test runs.

- New privilege tests are now present for several audit
privileges, several credential management privileges, dmesg
buffer reading privilege, and netinet raw socket creation.

- Other existing tests are restructured and generally improved as
a result of better framework structure and jail as a variable.
For exampe, we now test that certain sysctls are writable only
outside jail, while others are writable within jail. On a
similar note, privileges relating to setting UFS file flags are
now better exercised, as with the right to chmod and utimes
files.

Approved by: re (bmah)
Obtained from: TrustedBSD Project
H A Dpriv_audit_control.c172106 Sun Sep 09 21:08:39 MDT 2007 rwatson Enhance and expand kernel privilege regression tests in support of
work present in FreeBSD 7.0 to refine the kernel privilege model:

- Introduce support for jail as a testing variable, in order to
confirm that privileges are properly restricted in the jail
environment.

- Restructure overall testing approach so that privilege and jail
conditions are set in the testing infrastructure before tests
are invoked, and done so in a custom-created process to isolate
the impact of tests from each other in a more consistent way.

- Tests now provide setup and cleanup hooks that occur before and
after the test runs.

- New privilege tests are now present for several audit
privileges, several credential management privileges, dmesg
buffer reading privilege, and netinet raw socket creation.

- Other existing tests are restructured and generally improved as
a result of better framework structure and jail as a variable.
For exampe, we now test that certain sysctls are writable only
outside jail, while others are writable within jail. On a
similar note, privileges relating to setting UFS file flags are
now better exercised, as with the right to chmod and utimes
files.

Approved by: re (bmah)
Obtained from: TrustedBSD Project
H A Dpriv_audit_getaudit.c172106 Sun Sep 09 21:08:39 MDT 2007 rwatson Enhance and expand kernel privilege regression tests in support of
work present in FreeBSD 7.0 to refine the kernel privilege model:

- Introduce support for jail as a testing variable, in order to
confirm that privileges are properly restricted in the jail
environment.

- Restructure overall testing approach so that privilege and jail
conditions are set in the testing infrastructure before tests
are invoked, and done so in a custom-created process to isolate
the impact of tests from each other in a more consistent way.

- Tests now provide setup and cleanup hooks that occur before and
after the test runs.

- New privilege tests are now present for several audit
privileges, several credential management privileges, dmesg
buffer reading privilege, and netinet raw socket creation.

- Other existing tests are restructured and generally improved as
a result of better framework structure and jail as a variable.
For exampe, we now test that certain sysctls are writable only
outside jail, while others are writable within jail. On a
similar note, privileges relating to setting UFS file flags are
now better exercised, as with the right to chmod and utimes
files.

Approved by: re (bmah)
Obtained from: TrustedBSD Project
H A Dpriv_audit_setaudit.c172106 Sun Sep 09 21:08:39 MDT 2007 rwatson Enhance and expand kernel privilege regression tests in support of
work present in FreeBSD 7.0 to refine the kernel privilege model:

- Introduce support for jail as a testing variable, in order to
confirm that privileges are properly restricted in the jail
environment.

- Restructure overall testing approach so that privilege and jail
conditions are set in the testing infrastructure before tests
are invoked, and done so in a custom-created process to isolate
the impact of tests from each other in a more consistent way.

- Tests now provide setup and cleanup hooks that occur before and
after the test runs.

- New privilege tests are now present for several audit
privileges, several credential management privileges, dmesg
buffer reading privilege, and netinet raw socket creation.

- Other existing tests are restructured and generally improved as
a result of better framework structure and jail as a variable.
For exampe, we now test that certain sysctls are writable only
outside jail, while others are writable within jail. On a
similar note, privileges relating to setting UFS file flags are
now better exercised, as with the right to chmod and utimes
files.

Approved by: re (bmah)
Obtained from: TrustedBSD Project
H A Dpriv_audit_submit.c172106 Sun Sep 09 21:08:39 MDT 2007 rwatson Enhance and expand kernel privilege regression tests in support of
work present in FreeBSD 7.0 to refine the kernel privilege model:

- Introduce support for jail as a testing variable, in order to
confirm that privileges are properly restricted in the jail
environment.

- Restructure overall testing approach so that privilege and jail
conditions are set in the testing infrastructure before tests
are invoked, and done so in a custom-created process to isolate
the impact of tests from each other in a more consistent way.

- Tests now provide setup and cleanup hooks that occur before and
after the test runs.

- New privilege tests are now present for several audit
privileges, several credential management privileges, dmesg
buffer reading privilege, and netinet raw socket creation.

- Other existing tests are restructured and generally improved as
a result of better framework structure and jail as a variable.
For exampe, we now test that certain sysctls are writable only
outside jail, while others are writable within jail. On a
similar note, privileges relating to setting UFS file flags are
now better exercised, as with the right to chmod and utimes
files.

Approved by: re (bmah)
Obtained from: TrustedBSD Project
H A Dpriv_clock_settime.cdiff 172106 Sun Sep 09 21:08:39 MDT 2007 rwatson Enhance and expand kernel privilege regression tests in support of
work present in FreeBSD 7.0 to refine the kernel privilege model:

- Introduce support for jail as a testing variable, in order to
confirm that privileges are properly restricted in the jail
environment.

- Restructure overall testing approach so that privilege and jail
conditions are set in the testing infrastructure before tests
are invoked, and done so in a custom-created process to isolate
the impact of tests from each other in a more consistent way.

- Tests now provide setup and cleanup hooks that occur before and
after the test runs.

- New privilege tests are now present for several audit
privileges, several credential management privileges, dmesg
buffer reading privilege, and netinet raw socket creation.

- Other existing tests are restructured and generally improved as
a result of better framework structure and jail as a variable.
For exampe, we now test that certain sysctls are writable only
outside jail, while others are writable within jail. On a
similar note, privileges relating to setting UFS file flags are
now better exercised, as with the right to chmod and utimes
files.

Approved by: re (bmah)
Obtained from: TrustedBSD Project
H A Dpriv_cred.c172106 Sun Sep 09 21:08:39 MDT 2007 rwatson Enhance and expand kernel privilege regression tests in support of
work present in FreeBSD 7.0 to refine the kernel privilege model:

- Introduce support for jail as a testing variable, in order to
confirm that privileges are properly restricted in the jail
environment.

- Restructure overall testing approach so that privilege and jail
conditions are set in the testing infrastructure before tests
are invoked, and done so in a custom-created process to isolate
the impact of tests from each other in a more consistent way.

- Tests now provide setup and cleanup hooks that occur before and
after the test runs.

- New privilege tests are now present for several audit
privileges, several credential management privileges, dmesg
buffer reading privilege, and netinet raw socket creation.

- Other existing tests are restructured and generally improved as
a result of better framework structure and jail as a variable.
For exampe, we now test that certain sysctls are writable only
outside jail, while others are writable within jail. On a
similar note, privileges relating to setting UFS file flags are
now better exercised, as with the right to chmod and utimes
files.

Approved by: re (bmah)
Obtained from: TrustedBSD Project
H A Dpriv_io.cdiff 172106 Sun Sep 09 21:08:39 MDT 2007 rwatson Enhance and expand kernel privilege regression tests in support of
work present in FreeBSD 7.0 to refine the kernel privilege model:

- Introduce support for jail as a testing variable, in order to
confirm that privileges are properly restricted in the jail
environment.

- Restructure overall testing approach so that privilege and jail
conditions are set in the testing infrastructure before tests
are invoked, and done so in a custom-created process to isolate
the impact of tests from each other in a more consistent way.

- Tests now provide setup and cleanup hooks that occur before and
after the test runs.

- New privilege tests are now present for several audit
privileges, several credential management privileges, dmesg
buffer reading privilege, and netinet raw socket creation.

- Other existing tests are restructured and generally improved as
a result of better framework structure and jail as a variable.
For exampe, we now test that certain sysctls are writable only
outside jail, while others are writable within jail. On a
similar note, privileges relating to setting UFS file flags are
now better exercised, as with the right to chmod and utimes
files.

Approved by: re (bmah)
Obtained from: TrustedBSD Project
H A Dpriv_kenv_set.cdiff 172106 Sun Sep 09 21:08:39 MDT 2007 rwatson Enhance and expand kernel privilege regression tests in support of
work present in FreeBSD 7.0 to refine the kernel privilege model:

- Introduce support for jail as a testing variable, in order to
confirm that privileges are properly restricted in the jail
environment.

- Restructure overall testing approach so that privilege and jail
conditions are set in the testing infrastructure before tests
are invoked, and done so in a custom-created process to isolate
the impact of tests from each other in a more consistent way.

- Tests now provide setup and cleanup hooks that occur before and
after the test runs.

- New privilege tests are now present for several audit
privileges, several credential management privileges, dmesg
buffer reading privilege, and netinet raw socket creation.

- Other existing tests are restructured and generally improved as
a result of better framework structure and jail as a variable.
For exampe, we now test that certain sysctls are writable only
outside jail, while others are writable within jail. On a
similar note, privileges relating to setting UFS file flags are
now better exercised, as with the right to chmod and utimes
files.

Approved by: re (bmah)
Obtained from: TrustedBSD Project
H A Dpriv_kenv_unset.cdiff 172106 Sun Sep 09 21:08:39 MDT 2007 rwatson Enhance and expand kernel privilege regression tests in support of
work present in FreeBSD 7.0 to refine the kernel privilege model:

- Introduce support for jail as a testing variable, in order to
confirm that privileges are properly restricted in the jail
environment.

- Restructure overall testing approach so that privilege and jail
conditions are set in the testing infrastructure before tests
are invoked, and done so in a custom-created process to isolate
the impact of tests from each other in a more consistent way.

- Tests now provide setup and cleanup hooks that occur before and
after the test runs.

- New privilege tests are now present for several audit
privileges, several credential management privileges, dmesg
buffer reading privilege, and netinet raw socket creation.

- Other existing tests are restructured and generally improved as
a result of better framework structure and jail as a variable.
For exampe, we now test that certain sysctls are writable only
outside jail, while others are writable within jail. On a
similar note, privileges relating to setting UFS file flags are
now better exercised, as with the right to chmod and utimes
files.

Approved by: re (bmah)
Obtained from: TrustedBSD Project
H A Dpriv_msgbuf.c172106 Sun Sep 09 21:08:39 MDT 2007 rwatson Enhance and expand kernel privilege regression tests in support of
work present in FreeBSD 7.0 to refine the kernel privilege model:

- Introduce support for jail as a testing variable, in order to
confirm that privileges are properly restricted in the jail
environment.

- Restructure overall testing approach so that privilege and jail
conditions are set in the testing infrastructure before tests
are invoked, and done so in a custom-created process to isolate
the impact of tests from each other in a more consistent way.

- Tests now provide setup and cleanup hooks that occur before and
after the test runs.

- New privilege tests are now present for several audit
privileges, several credential management privileges, dmesg
buffer reading privilege, and netinet raw socket creation.

- Other existing tests are restructured and generally improved as
a result of better framework structure and jail as a variable.
For exampe, we now test that certain sysctls are writable only
outside jail, while others are writable within jail. On a
similar note, privileges relating to setting UFS file flags are
now better exercised, as with the right to chmod and utimes
files.

Approved by: re (bmah)
Obtained from: TrustedBSD Project
H A Dpriv_netinet_raw.c172106 Sun Sep 09 21:08:39 MDT 2007 rwatson Enhance and expand kernel privilege regression tests in support of
work present in FreeBSD 7.0 to refine the kernel privilege model:

- Introduce support for jail as a testing variable, in order to
confirm that privileges are properly restricted in the jail
environment.

- Restructure overall testing approach so that privilege and jail
conditions are set in the testing infrastructure before tests
are invoked, and done so in a custom-created process to isolate
the impact of tests from each other in a more consistent way.

- Tests now provide setup and cleanup hooks that occur before and
after the test runs.

- New privilege tests are now present for several audit
privileges, several credential management privileges, dmesg
buffer reading privilege, and netinet raw socket creation.

- Other existing tests are restructured and generally improved as
a result of better framework structure and jail as a variable.
For exampe, we now test that certain sysctls are writable only
outside jail, while others are writable within jail. On a
similar note, privileges relating to setting UFS file flags are
now better exercised, as with the right to chmod and utimes
files.

Approved by: re (bmah)
Obtained from: TrustedBSD Project
H A Dpriv_proc_setlogin.cdiff 172106 Sun Sep 09 21:08:39 MDT 2007 rwatson Enhance and expand kernel privilege regression tests in support of
work present in FreeBSD 7.0 to refine the kernel privilege model:

- Introduce support for jail as a testing variable, in order to
confirm that privileges are properly restricted in the jail
environment.

- Restructure overall testing approach so that privilege and jail
conditions are set in the testing infrastructure before tests
are invoked, and done so in a custom-created process to isolate
the impact of tests from each other in a more consistent way.

- Tests now provide setup and cleanup hooks that occur before and
after the test runs.

- New privilege tests are now present for several audit
privileges, several credential management privileges, dmesg
buffer reading privilege, and netinet raw socket creation.

- Other existing tests are restructured and generally improved as
a result of better framework structure and jail as a variable.
For exampe, we now test that certain sysctls are writable only
outside jail, while others are writable within jail. On a
similar note, privileges relating to setting UFS file flags are
now better exercised, as with the right to chmod and utimes
files.

Approved by: re (bmah)
Obtained from: TrustedBSD Project
H A Dpriv_proc_setrlimit.cdiff 172106 Sun Sep 09 21:08:39 MDT 2007 rwatson Enhance and expand kernel privilege regression tests in support of
work present in FreeBSD 7.0 to refine the kernel privilege model:

- Introduce support for jail as a testing variable, in order to
confirm that privileges are properly restricted in the jail
environment.

- Restructure overall testing approach so that privilege and jail
conditions are set in the testing infrastructure before tests
are invoked, and done so in a custom-created process to isolate
the impact of tests from each other in a more consistent way.

- Tests now provide setup and cleanup hooks that occur before and
after the test runs.

- New privilege tests are now present for several audit
privileges, several credential management privileges, dmesg
buffer reading privilege, and netinet raw socket creation.

- Other existing tests are restructured and generally improved as
a result of better framework structure and jail as a variable.
For exampe, we now test that certain sysctls are writable only
outside jail, while others are writable within jail. On a
similar note, privileges relating to setting UFS file flags are
now better exercised, as with the right to chmod and utimes
files.

Approved by: re (bmah)
Obtained from: TrustedBSD Project
H A Dpriv_sched_rtprio.cdiff 172106 Sun Sep 09 21:08:39 MDT 2007 rwatson Enhance and expand kernel privilege regression tests in support of
work present in FreeBSD 7.0 to refine the kernel privilege model:

- Introduce support for jail as a testing variable, in order to
confirm that privileges are properly restricted in the jail
environment.

- Restructure overall testing approach so that privilege and jail
conditions are set in the testing infrastructure before tests
are invoked, and done so in a custom-created process to isolate
the impact of tests from each other in a more consistent way.

- Tests now provide setup and cleanup hooks that occur before and
after the test runs.

- New privilege tests are now present for several audit
privileges, several credential management privileges, dmesg
buffer reading privilege, and netinet raw socket creation.

- Other existing tests are restructured and generally improved as
a result of better framework structure and jail as a variable.
For exampe, we now test that certain sysctls are writable only
outside jail, while others are writable within jail. On a
similar note, privileges relating to setting UFS file flags are
now better exercised, as with the right to chmod and utimes
files.

Approved by: re (bmah)
Obtained from: TrustedBSD Project
H A Dpriv_sched_setpriority.cdiff 172106 Sun Sep 09 21:08:39 MDT 2007 rwatson Enhance and expand kernel privilege regression tests in support of
work present in FreeBSD 7.0 to refine the kernel privilege model:

- Introduce support for jail as a testing variable, in order to
confirm that privileges are properly restricted in the jail
environment.

- Restructure overall testing approach so that privilege and jail
conditions are set in the testing infrastructure before tests
are invoked, and done so in a custom-created process to isolate
the impact of tests from each other in a more consistent way.

- Tests now provide setup and cleanup hooks that occur before and
after the test runs.

- New privilege tests are now present for several audit
privileges, several credential management privileges, dmesg
buffer reading privilege, and netinet raw socket creation.

- Other existing tests are restructured and generally improved as
a result of better framework structure and jail as a variable.
For exampe, we now test that certain sysctls are writable only
outside jail, while others are writable within jail. On a
similar note, privileges relating to setting UFS file flags are
now better exercised, as with the right to chmod and utimes
files.

Approved by: re (bmah)
Obtained from: TrustedBSD Project
H A Dpriv_settimeofday.cdiff 172106 Sun Sep 09 21:08:39 MDT 2007 rwatson Enhance and expand kernel privilege regression tests in support of
work present in FreeBSD 7.0 to refine the kernel privilege model:

- Introduce support for jail as a testing variable, in order to
confirm that privileges are properly restricted in the jail
environment.

- Restructure overall testing approach so that privilege and jail
conditions are set in the testing infrastructure before tests
are invoked, and done so in a custom-created process to isolate
the impact of tests from each other in a more consistent way.

- Tests now provide setup and cleanup hooks that occur before and
after the test runs.

- New privilege tests are now present for several audit
privileges, several credential management privileges, dmesg
buffer reading privilege, and netinet raw socket creation.

- Other existing tests are restructured and generally improved as
a result of better framework structure and jail as a variable.
For exampe, we now test that certain sysctls are writable only
outside jail, while others are writable within jail. On a
similar note, privileges relating to setting UFS file flags are
now better exercised, as with the right to chmod and utimes
files.

Approved by: re (bmah)
Obtained from: TrustedBSD Project
H A Dpriv_sysctl_write.cdiff 172106 Sun Sep 09 21:08:39 MDT 2007 rwatson Enhance and expand kernel privilege regression tests in support of
work present in FreeBSD 7.0 to refine the kernel privilege model:

- Introduce support for jail as a testing variable, in order to
confirm that privileges are properly restricted in the jail
environment.

- Restructure overall testing approach so that privilege and jail
conditions are set in the testing infrastructure before tests
are invoked, and done so in a custom-created process to isolate
the impact of tests from each other in a more consistent way.

- Tests now provide setup and cleanup hooks that occur before and
after the test runs.

- New privilege tests are now present for several audit
privileges, several credential management privileges, dmesg
buffer reading privilege, and netinet raw socket creation.

- Other existing tests are restructured and generally improved as
a result of better framework structure and jail as a variable.
For exampe, we now test that certain sysctls are writable only
outside jail, while others are writable within jail. On a
similar note, privileges relating to setting UFS file flags are
now better exercised, as with the right to chmod and utimes
files.

Approved by: re (bmah)
Obtained from: TrustedBSD Project
H A Dpriv_vfs_chflags.c172106 Sun Sep 09 21:08:39 MDT 2007 rwatson Enhance and expand kernel privilege regression tests in support of
work present in FreeBSD 7.0 to refine the kernel privilege model:

- Introduce support for jail as a testing variable, in order to
confirm that privileges are properly restricted in the jail
environment.

- Restructure overall testing approach so that privilege and jail
conditions are set in the testing infrastructure before tests
are invoked, and done so in a custom-created process to isolate
the impact of tests from each other in a more consistent way.

- Tests now provide setup and cleanup hooks that occur before and
after the test runs.

- New privilege tests are now present for several audit
privileges, several credential management privileges, dmesg
buffer reading privilege, and netinet raw socket creation.

- Other existing tests are restructured and generally improved as
a result of better framework structure and jail as a variable.
For exampe, we now test that certain sysctls are writable only
outside jail, while others are writable within jail. On a
similar note, privileges relating to setting UFS file flags are
now better exercised, as with the right to chmod and utimes
files.

Approved by: re (bmah)
Obtained from: TrustedBSD Project
H A Dpriv_vfs_chmod.c172106 Sun Sep 09 21:08:39 MDT 2007 rwatson Enhance and expand kernel privilege regression tests in support of
work present in FreeBSD 7.0 to refine the kernel privilege model:

- Introduce support for jail as a testing variable, in order to
confirm that privileges are properly restricted in the jail
environment.

- Restructure overall testing approach so that privilege and jail
conditions are set in the testing infrastructure before tests
are invoked, and done so in a custom-created process to isolate
the impact of tests from each other in a more consistent way.

- Tests now provide setup and cleanup hooks that occur before and
after the test runs.

- New privilege tests are now present for several audit
privileges, several credential management privileges, dmesg
buffer reading privilege, and netinet raw socket creation.

- Other existing tests are restructured and generally improved as
a result of better framework structure and jail as a variable.
For exampe, we now test that certain sysctls are writable only
outside jail, while others are writable within jail. On a
similar note, privileges relating to setting UFS file flags are
now better exercised, as with the right to chmod and utimes
files.

Approved by: re (bmah)
Obtained from: TrustedBSD Project
H A Dpriv_vfs_chown.cdiff 172106 Sun Sep 09 21:08:39 MDT 2007 rwatson Enhance and expand kernel privilege regression tests in support of
work present in FreeBSD 7.0 to refine the kernel privilege model:

- Introduce support for jail as a testing variable, in order to
confirm that privileges are properly restricted in the jail
environment.

- Restructure overall testing approach so that privilege and jail
conditions are set in the testing infrastructure before tests
are invoked, and done so in a custom-created process to isolate
the impact of tests from each other in a more consistent way.

- Tests now provide setup and cleanup hooks that occur before and
after the test runs.

- New privilege tests are now present for several audit
privileges, several credential management privileges, dmesg
buffer reading privilege, and netinet raw socket creation.

- Other existing tests are restructured and generally improved as
a result of better framework structure and jail as a variable.
For exampe, we now test that certain sysctls are writable only
outside jail, while others are writable within jail. On a
similar note, privileges relating to setting UFS file flags are
now better exercised, as with the right to chmod and utimes
files.

Approved by: re (bmah)
Obtained from: TrustedBSD Project
H A Dpriv_vfs_chroot.cdiff 172106 Sun Sep 09 21:08:39 MDT 2007 rwatson Enhance and expand kernel privilege regression tests in support of
work present in FreeBSD 7.0 to refine the kernel privilege model:

- Introduce support for jail as a testing variable, in order to
confirm that privileges are properly restricted in the jail
environment.

- Restructure overall testing approach so that privilege and jail
conditions are set in the testing infrastructure before tests
are invoked, and done so in a custom-created process to isolate
the impact of tests from each other in a more consistent way.

- Tests now provide setup and cleanup hooks that occur before and
after the test runs.

- New privilege tests are now present for several audit
privileges, several credential management privileges, dmesg
buffer reading privilege, and netinet raw socket creation.

- Other existing tests are restructured and generally improved as
a result of better framework structure and jail as a variable.
For exampe, we now test that certain sysctls are writable only
outside jail, while others are writable within jail. On a
similar note, privileges relating to setting UFS file flags are
now better exercised, as with the right to chmod and utimes
files.

Approved by: re (bmah)
Obtained from: TrustedBSD Project
H A Dpriv_vfs_clearsugid.cdiff 172106 Sun Sep 09 21:08:39 MDT 2007 rwatson Enhance and expand kernel privilege regression tests in support of
work present in FreeBSD 7.0 to refine the kernel privilege model:

- Introduce support for jail as a testing variable, in order to
confirm that privileges are properly restricted in the jail
environment.

- Restructure overall testing approach so that privilege and jail
conditions are set in the testing infrastructure before tests
are invoked, and done so in a custom-created process to isolate
the impact of tests from each other in a more consistent way.

- Tests now provide setup and cleanup hooks that occur before and
after the test runs.

- New privilege tests are now present for several audit
privileges, several credential management privileges, dmesg
buffer reading privilege, and netinet raw socket creation.

- Other existing tests are restructured and generally improved as
a result of better framework structure and jail as a variable.
For exampe, we now test that certain sysctls are writable only
outside jail, while others are writable within jail. On a
similar note, privileges relating to setting UFS file flags are
now better exercised, as with the right to chmod and utimes
files.

Approved by: re (bmah)
Obtained from: TrustedBSD Project
H A Dpriv_vfs_fhopen.cdiff 172106 Sun Sep 09 21:08:39 MDT 2007 rwatson Enhance and expand kernel privilege regression tests in support of
work present in FreeBSD 7.0 to refine the kernel privilege model:

- Introduce support for jail as a testing variable, in order to
confirm that privileges are properly restricted in the jail
environment.

- Restructure overall testing approach so that privilege and jail
conditions are set in the testing infrastructure before tests
are invoked, and done so in a custom-created process to isolate
the impact of tests from each other in a more consistent way.

- Tests now provide setup and cleanup hooks that occur before and
after the test runs.

- New privilege tests are now present for several audit
privileges, several credential management privileges, dmesg
buffer reading privilege, and netinet raw socket creation.

- Other existing tests are restructured and generally improved as
a result of better framework structure and jail as a variable.
For exampe, we now test that certain sysctls are writable only
outside jail, while others are writable within jail. On a
similar note, privileges relating to setting UFS file flags are
now better exercised, as with the right to chmod and utimes
files.

Approved by: re (bmah)
Obtained from: TrustedBSD Project

Completed in 87 milliseconds

12