Compare commits
No commits in common. "main" and "rawhide" have entirely different histories.
7 changed files with 29 additions and 62 deletions
|
|
@ -1,2 +0,0 @@
|
||||||
gef config gef.disable_color True
|
|
||||||
got-audit --all
|
|
||||||
|
|
@ -1,13 +0,0 @@
|
||||||
summary: Audit the GOT for signs of tampering
|
|
||||||
description: |
|
|
||||||
Pointers in the server process GOT will be checked to ensure that
|
|
||||||
each function pointer's value is within a shared object file
|
|
||||||
that exports a symbol of that name, and that no shared object
|
|
||||||
files export conflicting symbols.
|
|
||||||
contact: Gordon Messmer <gordon.messmer@gmail.com>
|
|
||||||
require+:
|
|
||||||
- gdb-gef # needed to test got-audit
|
|
||||||
- nginx
|
|
||||||
test: ./runtest.sh
|
|
||||||
framework: beakerlib
|
|
||||||
|
|
||||||
|
|
@ -1,41 +0,0 @@
|
||||||
#!/bin/bash
|
|
||||||
# vim: dict+=/usr/share/beakerlib/dictionary.vim cpt=.,w,b,u,t,i,k
|
|
||||||
# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
||||||
#
|
|
||||||
# runtest.sh of /CoreOS/nginx/Sanity/got-audit
|
|
||||||
# Description: Check pointers in the server process GOT for signs of tampering
|
|
||||||
# Author: Gordon Messmer <gordon.messmer@gmail.com>
|
|
||||||
#
|
|
||||||
|
|
||||||
# Include Beaker environment
|
|
||||||
. /usr/share/beakerlib/beakerlib.sh || exit 1
|
|
||||||
|
|
||||||
rlJournalStart
|
|
||||||
rlPhaseStartSetup
|
|
||||||
rlServiceStart nginx
|
|
||||||
rlRun "TestDir=\$(pwd)"
|
|
||||||
rlRun "TmpDir=\$(mktemp -d)" 0 "Creating tmp directory"
|
|
||||||
rlRun "pushd $TmpDir"
|
|
||||||
rlRun "auditfile=\$(mktemp --tmpdir=${TmpDir})"
|
|
||||||
rlPhaseEnd
|
|
||||||
|
|
||||||
rlPhaseStartTest "Run GEF got-audit"
|
|
||||||
rlRun "SERVICE_PID=\$( systemctl show --property=MainPID nginx.service | cut -f2 -d= )"
|
|
||||||
rlRun "echo SERVICE_PID is '$SERVICE_PID'"
|
|
||||||
[ -n "$SERVICE_PID" ] || rlFail "No service pid was found"
|
|
||||||
rlRun "gdb-gef --pid '$SERVICE_PID' --command='$TestDir'/got-audit.gdb --batch > '$auditfile'"
|
|
||||||
# Basic test: ensure that at least one symbol is found in libc.so,
|
|
||||||
# to verify that the report looks plausible.
|
|
||||||
rlAssertGrep " : /.*/libc.so" "$auditfile"
|
|
||||||
# Ensure the got-audit did not report any errors
|
|
||||||
rlAssertNotGrep " :: ERROR" "$auditfile"
|
|
||||||
rlRun "cp '$auditfile' '$TMT_TEST_DATA'/got-audit.txt"
|
|
||||||
rlPhaseEnd
|
|
||||||
|
|
||||||
rlPhaseStartCleanup
|
|
||||||
rlServiceRestore nginx
|
|
||||||
rlRun "popd"
|
|
||||||
rlRun "rm -r $TmpDir" 0 "Removing tmp directory"
|
|
||||||
rlPhaseEnd
|
|
||||||
rlJournalPrintText
|
|
||||||
rlJournalEnd
|
|
||||||
11
core/daemon-selinux-context/TC#0334132.fmf
Normal file
11
core/daemon-selinux-context/TC#0334132.fmf
Normal file
|
|
@ -0,0 +1,11 @@
|
||||||
|
component:
|
||||||
|
- nginx
|
||||||
|
tag:
|
||||||
|
- TIPfail_Apps
|
||||||
|
- Tier1
|
||||||
|
- ci-tier-1
|
||||||
|
relevancy: |
|
||||||
|
product = rhel && distro < rhel-8 : False
|
||||||
|
distro = rhel-alt : False
|
||||||
|
extra-nitrate: TC#0334132
|
||||||
|
extra-summary: /CoreOS/nginx/Sanity/daemon-selinux-context
|
||||||
|
|
@ -6,7 +6,7 @@ description: |
|
||||||
(service will be for example: nginx14-nginx or just nginx)
|
(service will be for example: nginx14-nginx or just nginx)
|
||||||
|
|
||||||
Author: Ondrej Ptak <optak@redhat.com>
|
Author: Ondrej Ptak <optak@redhat.com>
|
||||||
contact: Iveta Cesalova <icesalov@redhat.com>
|
contact: None <icesalov@redhat.com>
|
||||||
component:
|
component:
|
||||||
- nginx
|
- nginx
|
||||||
test: ./runtest.sh
|
test: ./runtest.sh
|
||||||
|
|
@ -18,5 +18,5 @@ recommend:
|
||||||
duration: 1m
|
duration: 1m
|
||||||
enabled: true
|
enabled: true
|
||||||
tier: '1'
|
tier: '1'
|
||||||
tag:
|
extra-summary: /CoreOS/nginx/Sanity/daemon-selinux-context
|
||||||
- Tier1
|
extra-task: /CoreOS/nginx/Sanity/daemon-selinux-context
|
||||||
|
|
|
||||||
12
core/nginx-sanity-test/TC#0326941.fmf
Normal file
12
core/nginx-sanity-test/TC#0326941.fmf
Normal file
|
|
@ -0,0 +1,12 @@
|
||||||
|
component:
|
||||||
|
- nginx
|
||||||
|
tag:
|
||||||
|
- TIPpass
|
||||||
|
- TIPpass_Apps
|
||||||
|
- Tier1
|
||||||
|
- ci-tier-1
|
||||||
|
relevancy: |
|
||||||
|
product = rhel && distro < rhel-8 : False
|
||||||
|
distro = rhel-alt : False
|
||||||
|
extra-nitrate: TC#0326941
|
||||||
|
extra-summary: /CoreOS/nginx/Sanity/nginx-sanity-test
|
||||||
|
|
@ -1,6 +1,6 @@
|
||||||
summary: What the test does
|
summary: What the test does
|
||||||
description: ''
|
description: ''
|
||||||
contact: Iveta Cesalova <icesalov@redhat.com>
|
contact: None <icesalov@redhat.com>
|
||||||
component:
|
component:
|
||||||
- nginx
|
- nginx
|
||||||
test: ./runtest.sh
|
test: ./runtest.sh
|
||||||
|
|
@ -16,5 +16,5 @@ recommend:
|
||||||
duration: 5m
|
duration: 5m
|
||||||
enabled: true
|
enabled: true
|
||||||
tier: '1'
|
tier: '1'
|
||||||
tag:
|
extra-summary: /CoreOS/nginx/Sanity/nginx-sanity-test
|
||||||
- Tier1
|
extra-task: /CoreOS/nginx/Sanity/nginx-sanity-test
|
||||||
|
|
|
||||||
Loading…
Add table
Add a link
Reference in a new issue