apparmor/tests
Steve Beattie ff644df776
regression tests: add mount test for CVE-2016-1585
Add infrastructure for calling the mount test binary with an fstype
instead of using the default hardcoded ext2 type, and then use that in a
test that exercises CVE-2016-1585, ensuring that mounting a procfs
filesystem isn't permitted when the only mount rule is

  mount options=(rw,make-slave) -> **,

to try to ensure that the generated and enforced policy is restricted to
what is intended.

Signed-off-by: Steve Beattie <steve.beattie@canonical.com>
Bug: https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1597017
MR: https://gitlab.com/apparmor/apparmor/-/merge_requests/1211
2024-04-11 11:52:17 -07:00
..
bin Break lines before binary operators. 2022-08-21 11:15:07 -04:00
regression regression tests: add mount test for CVE-2016-1585 2024-04-11 11:52:17 -07:00
stress tests: fix make clean target 2018-11-16 14:16:07 -08:00
checkstyle2junit.xslt CI: add shellcheck job, with minimum severity set to error 2022-02-13 19:43:48 +00:00
Makefile all: Use the MAKE variable 2017-11-01 23:22:53 +00:00