mirror of
https://gitlab.com/apparmor/apparmor
synced 2025-08-28 21:07:56 +00:00
Add a test for cap net_bind_service w/tcp. Alas, this test is still
disabled.
This commit is contained in:
parent
beac286a5c
commit
ad542aba23
@ -68,7 +68,13 @@ runchecktest "TCP (accept, connect)" pass $port
|
|||||||
# will always fail unless process has net_bind_service capability.
|
# will always fail unless process has net_bind_service capability.
|
||||||
# you damn well better not be running telnetd.
|
# you damn well better not be running telnetd.
|
||||||
genprofile tcp_accept: tcp_connect:
|
genprofile tcp_accept: tcp_connect:
|
||||||
runchecktest "TCP (accept, connect)" fail 23
|
runchecktest "TCP (accept, connect, port 23)" fail 23
|
||||||
|
|
||||||
|
# PASS TEST - simple / low-numbered port
|
||||||
|
# will always fail unless process has net_bind_service capability.
|
||||||
|
# you damn well better not be running telnetd.
|
||||||
|
genprofile tcp_accept: tcp_connect: cap:net_bind_service
|
||||||
|
runchecktest "TCP (accept, connect, port 23)" pass 23
|
||||||
|
|
||||||
# The following tests will FAIL only if netdomain is enabled. If
|
# The following tests will FAIL only if netdomain is enabled. If
|
||||||
# netdomain is disabled, they are expected to pass. netdomain is
|
# netdomain is disabled, they are expected to pass. netdomain is
|
||||||
|
Loading…
x
Reference in New Issue
Block a user