Gautam Menghani fc1e398004 selftests/seccomp: Check CAP_SYS_ADMIN capability in the test mode_filter_without_nnp ...

In the "mode_filter_without_nnp" test in seccomp_bpf, there is currently
a TODO which asks to check the capability CAP_SYS_ADMIN instead of euid.
This patch adds support to check if the calling process has the flag
CAP_SYS_ADMIN, and also if this flag has CAP_EFFECTIVE set.

Signed-off-by: Gautam Menghani <gautammenghani201@gmail.com>
Signed-off-by: Kees Cook <keescook@chromium.org>
Link: https://lore.kernel.org/r/20220731092529.28760-1-gautammenghani201@gmail.com

2022-12-02 11:32:53 -08:00

..

.gitignore

…

config

selftests/seccomp: Update kernel config

2020-12-02 11:20:54 -08:00

Makefile

selftests/seccomp: Test PTRACE_O_SUSPEND_SECCOMP without CAP_SYS_ADMIN

2022-04-29 11:28:42 -07:00

seccomp_benchmark.c

selftests/seccomp: remove ARRAY_SIZE define from seccomp_benchmark

2021-12-10 17:51:09 -07:00

seccomp_bpf.c

selftests/seccomp: Check CAP_SYS_ADMIN capability in the test mode_filter_without_nnp

2022-12-02 11:32:53 -08:00

settings

selftests/seccomp: Compare bitmap vs filter overhead

2020-11-20 11:16:34 -08:00