Unverified Commit 3d403398 authored by Mikhail Ivanov's avatar Mikhail Ivanov Committed by Mickaël Salaün
Browse files

selftests/landlock: Test that MPTCP actions are not restricted 



Extend protocol fixture with test suits for MPTCP protocol.
Add CONFIG_MPTCP and CONFIG_MPTCP_IPV6 options in config.

Signed-off-by: default avatarMikhail Ivanov <ivanov.mikhail1@huawei-partners.com>
Link: https://lore.kernel.org/r/20250205093651.1424339-4-ivanov.mikhail1@huawei-partners.com


Cc: <stable@vger.kernel.org> # 6.7.x
Signed-off-by: default avatarMickaël Salaün <mic@digikod.net>
parent f5534d51

tools/testing/selftests/landlock/config

+2 −0
Original line number Diff line number Diff line
@@ -4,6 +4,8 @@ CONFIG_CGROUP_SCHED=y 
CONFIG_INET=y

CONFIG_IPV6=y

CONFIG_KEYS=y

CONFIG_MPTCP=y

CONFIG_MPTCP_IPV6=y

CONFIG_NET=y

CONFIG_NET_NS=y

CONFIG_OVERLAY_FS=y

tools/testing/selftests/landlock/net_test.c

+44 −0
Original line number Diff line number Diff line
@@ -312,6 +312,17 @@ FIXTURE_VARIANT_ADD(protocol, no_sandbox_with_ipv4_tcp2) { 
	},

};



/* clang-format off */

FIXTURE_VARIANT_ADD(protocol, no_sandbox_with_ipv4_mptcp) {

	/* clang-format on */

	.sandbox = NO_SANDBOX,

	.prot = {

		.domain = AF_INET,

		.type = SOCK_STREAM,

		.protocol = IPPROTO_MPTCP,

	},

};



/* clang-format off */

FIXTURE_VARIANT_ADD(protocol, no_sandbox_with_ipv6_tcp1) {

	/* clang-format on */
@@ -335,6 +346,17 @@ FIXTURE_VARIANT_ADD(protocol, no_sandbox_with_ipv6_tcp2) { 
	},

};



/* clang-format off */

FIXTURE_VARIANT_ADD(protocol, no_sandbox_with_ipv6_mptcp) {

	/* clang-format on */

	.sandbox = NO_SANDBOX,

	.prot = {

		.domain = AF_INET6,

		.type = SOCK_STREAM,

		.protocol = IPPROTO_MPTCP,

	},

};



/* clang-format off */

FIXTURE_VARIANT_ADD(protocol, no_sandbox_with_ipv4_udp) {

	/* clang-format on */
@@ -398,6 +420,17 @@ FIXTURE_VARIANT_ADD(protocol, tcp_sandbox_with_ipv4_tcp2) { 
	},

};



/* clang-format off */

FIXTURE_VARIANT_ADD(protocol, tcp_sandbox_with_ipv4_mptcp) {

	/* clang-format on */

	.sandbox = TCP_SANDBOX,

	.prot = {

		.domain = AF_INET,

		.type = SOCK_STREAM,

		.protocol = IPPROTO_MPTCP,

	},

};



/* clang-format off */

FIXTURE_VARIANT_ADD(protocol, tcp_sandbox_with_ipv6_tcp1) {

	/* clang-format on */
@@ -421,6 +454,17 @@ FIXTURE_VARIANT_ADD(protocol, tcp_sandbox_with_ipv6_tcp2) { 
	},

};



/* clang-format off */

FIXTURE_VARIANT_ADD(protocol, tcp_sandbox_with_ipv6_mptcp) {

	/* clang-format on */

	.sandbox = TCP_SANDBOX,

	.prot = {

		.domain = AF_INET6,

		.type = SOCK_STREAM,

		.protocol = IPPROTO_MPTCP,

	},

};



/* clang-format off */

FIXTURE_VARIANT_ADD(protocol, tcp_sandbox_with_ipv4_udp) {

	/* clang-format on */