From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Ondrej Mosnacek To: git-commits@fedoraproject.org Subject: [tests/selinux] pr775-checkpolicy-revdeps: Add coverage for the hardening of executing binaries by the kernel Date: Fri, 11 Sep 2026 13:20:22 GMT Message-ID: <178913282215.1.3796701742231154458.tests-selinux-e70a8df7c857@fedoraproject.org> List-ID: X-Git-Repo: tests/selinux X-Git-Branch: pr775-checkpolicy-revdeps X-Git-Rev: e70a8df7c857ccc4ca913c932a1e74c5b588f892 ICAgICAgICAgICAgQSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KCiAgICAgICAgICAgIFJl cG8gICA6IHRlc3RzL3NlbGludXgKICAgICAgICAgICAgQnJhbmNoIDogcHI3NzUtY2hlY2twb2xp Y3ktcmV2ZGVwcwogICAgICAgICAgICBDb21taXQgOiBlNzBhOGRmN2M4NTdjY2M0Y2E5MTNjOTMy YTFlNzRjNWI1ODhmODkyCiAgICAgICAgICAgIEF1dGhvciA6IE9uZHJlaiBNb3NuYWNlayA8b21v c25hY2VAcmVkaGF0LmNvbT4KICAgICAgICAgICAgRGF0ZSAgIDogMjAyMi0xMi0wOVQxMDo0MDoz NiswMDowMAogICAgICAgICAgICBTdGF0cyAgOiArMTYwLy0wIGluIDMgZmlsZShzKQogICAgICAg ICAgICBVUkwgICAgOiBodHRwczovL3NyYy5mZWRvcmFwcm9qZWN0Lm9yZy90ZXN0cy9zZWxpbnV4 L2MvZTcwYThkZjdjODU3Y2NjNGNhOTEzYzkzMmExZTc0YzViNTg4Zjg5Mj9icmFuY2g9cHI3NzUt Y2hlY2twb2xpY3ktcmV2ZGVwcwoKICAgICAgICAgICAgTG9nOgogICAgICAgICAgICBBZGQgY292 ZXJhZ2UgZm9yIHRoZSBoYXJkZW5pbmcgb2YgZXhlY3V0aW5nIGJpbmFyaWVzIGJ5IHRoZSBrZXJu ZWwKClNlZSB0aGUgdGVzdCBkZXNjcmlwdGlvbi9CdWd6aWxsYSBmb3IgbW9yZSBkZXRhaWxzLgoK U2lnbmVkLW9mZi1ieTogT25kcmVqIE1vc25hY2VrIDxvbW9zbmFjZUByZWRoYXQuY29tPgoKLS0t CmRpZmYgLS1naXQgYS9zZWxpbnV4LXBvbGljeS9rZXJuZWwtY29uZmluZWQtZXhlYy9tYWluLmZt ZiBiL3NlbGludXgtcG9saWN5L2tlcm5lbC1jb25maW5lZC1leGVjL21haW4uZm1mCm5ldyBmaWxl IG1vZGUgMTAwNjQ0CmluZGV4IDAwMDAwMDAuLjE3NTg0YjIKLS0tIC9kZXYvbnVsbAorKysgYi9z ZWxpbnV4LXBvbGljeS9rZXJuZWwtY29uZmluZWQtZXhlYy9tYWluLmZtZgpAQCAtMCwwICsxLDI1 IEBACitzdW1tYXJ5OiBUZXN0IHRoYXQga2VybmVsIGNhbm5vdCBleGVjdXRlIGFyYml0cmFyeSBo ZWxwZXIgYmluYXJpZXMKK2Rlc2NyaXB0aW9uOiB8CisgIEVuc3VyZXMgdGhhdCB0aGUga2VybmVs IGlzIG5vdCBhbGxvd2VkIHRvIGV4ZWN1dGUgdW5hdXRob3JpemVkIGJpbmFyaWVzCisgIGFuZCB0 aGF0IGEgdHJhbnNpdGlvbiB0byBhIGNvbmZpbmVkIGRvbWFpbiBpcyBlbmZvcmNlZCBvbiB0aG9z ZSB0aGF0IGl0CisgIGNhbiBleGVjdXRlLCBzbyB0aGF0IG92ZXJ3cml0aW5nIHVzZXJtb2RlIGhl bHBlciBwYXRocyBkb2Vzbid0IGxlYWQgdG8KKyAgYW4gZXhwbG9pdGFibGUgcHJpdmlsZWdlIGVz Y2FsYXRpb24uCitjb250YWN0OiBPbmRyZWogTW9zbmFjZWsgPG9tb3NuYWNlQHJlZGhhdC5jb20+ Citjb21wb25lbnQ6CisgIC0gc2VsaW51eC1wb2xpY3kKK2ZyYW1ld29yazogYmVha2VybGliCity ZXF1aXJlOgorICAtIGxpYnJhcnkoc2VsaW51eC1wb2xpY3kvY29tbW9uKQorICAtIHBvbGljeWNv cmV1dGlscworICAtIGdjYworZW52aXJvbm1lbnQ6CisgIEFWQ19FUlJPUjogK25vX2F2Y19jaGVj aworZHVyYXRpb246IDIwbQordGllcjogMgorZW5hYmxlZDogdHJ1ZQorYWRqdXN0OgorICAtIGVu YWJsZWQ6IGZhbHNlCisgICAgd2hlbjogZGlzdHJvIDwgZmVkb3JhLTM4CisgICAgYmVjYXVzZTog VGhpcyBoYXJkZW5pbmcgYXBwbGllcyBvbmx5IHRvIEYzOCsKK2xpbms6CisgIC0gdmVyaWZpZXM6 IGh0dHBzOi8vYnVnemlsbGEucmVkaGF0LmNvbS9zaG93X2J1Zy5jZ2k/aWQ9MjA2ODU3OQoKZGlm ZiAtLWdpdCBhL3NlbGludXgtcG9saWN5L2tlcm5lbC1jb25maW5lZC1leGVjL3J1bnRlc3Quc2gg Yi9zZWxpbnV4LXBvbGljeS9rZXJuZWwtY29uZmluZWQtZXhlYy9ydW50ZXN0LnNoCm5ldyBmaWxl IG1vZGUgMTAwNzU1CmluZGV4IDAwMDAwMDAuLjM1ZjBiNTgKLS0tIC9kZXYvbnVsbAorKysgYi9z ZWxpbnV4LXBvbGljeS9rZXJuZWwtY29uZmluZWQtZXhlYy9ydW50ZXN0LnNoCkBAIC0wLDAgKzEs MTI5IEBACisjIS9iaW4vYmFzaAorIyB2aW06IGRpY3Q9L3Vzci9zaGFyZS9iZWFrZXJsaWIvZGlj dGlvbmFyeS52aW0gY3B0PS4sdyxiLHUsdCxpLGsKKyMgU1BEWC1MaWNlbnNlLUlkZW50aWZpZXI6 IEdQTHYyCisjIENvcHlyaWdodCAoYykgMjAyMiBSZWQgSGF0LCBJbmMuCisjIEF1dGhvcjogT25k cmVqIE1vc25hY2VrIDxvbW9zbmFjZUByZWRoYXQuY29tPgorCisjIEluY2x1ZGUgQmVha2VybGli IGVudmlyb25tZW50CisuIC91c3Ivc2hhcmUvYmVha2VybGliL2JlYWtlcmxpYi5zaCB8fCBleGl0 IDEKKworZnVuY3Rpb24gdHJpZ2dlcl9tb2Rwcm9iZSgpIHsKKyAgICAjIGVuc3VyZSBncmUgbW9k dWxlcyBhcmUgdW5sb2FkZWQKKyAgICBtb2Rwcm9iZSAtciBpcF9ncmUgZ3JlIHx8IHJldHVybiAy CisgICAgaXAgbGluayBhZGQgbXlncmUgdHlwZSBncmV0YXAgbG9jYWwgMTI3LjAuMC4xIHJlbW90 ZSAxMjcuMC4wLjEKKyAgICByZXQ9JD8KKyAgICBpcCBsaW5rIGRlbCBteWdyZSAyPi9kZXYvbnVs bAorICAgIGlmIFsgJHJldCAtZXEgMCBdOyB0aGVuCisgICAgICAgIHJldHVybiAwCisgICAgZWxz ZQorICAgICAgICByZXR1cm4gMQorICAgIGZpCit9CisKK3JsSm91cm5hbFN0YXJ0CisgICAgcmxQ aGFzZVN0YXJ0U2V0dXAKKyAgICAgICAgcmxJbXBvcnQgJ3NlbGludXgtcG9saWN5L2NvbW1vbicK KworICAgICAgICBybEFzc2VydFJwbSBzZWxpbnV4LXBvbGljeQorICAgICAgICBybEFzc2VydFJw bSBzZWxpbnV4LXBvbGljeS10YXJnZXRlZAorCisgICAgICAgIHJsU0VTZXRFbmZvcmNlCisgICAg ICAgIHJsU0VTdGF0dXMKKworICAgICAgICBvcmlnaW5hbF9tb2Rwcm9iZT0iJChzeXNjdGwgLW5i IGtlcm5lbC5tb2Rwcm9iZSkiCisgICAgICAgIG9yaWdpbmFsX2NvcmVfcGF0dGVybj0iJChzeXNj dGwgLW5iIGtlcm5lbC5jb3JlX3BhdHRlcm4pIgorCisgICAgICAgIHJsUnVuICJnY2MgLW8gdHJp Z2dlcl9zZWdmYXVsdCB0cmlnZ2VyX3NlZ2ZhdWx0LmMiCisgICAgcmxQaGFzZUVuZAorCisgICAg cmxQaGFzZVN0YXJ0VGVzdCAiUG9saWN5IHJ1bGVzIgorICAgICAgICBybExvZyAia2VybmVsX3Qg c2hvdWxkbid0IGJlIGFsbG93ZWQgdG8gZXhlY3V0ZSBhbnkgZmlsZSB3aXRob3V0IHRyYW5zaXRp b24iCisKKyAgICAgICAgcmxTRVNlYXJjaFJ1bGUgImFsbG93IGtlcm5lbF90IGZpbGVfdHlwZTpm aWxlIHsgZXhlY3V0ZV9ub190cmFucyB9IFtdIiAxIFwKKyAgICAgICAgICAgICJrZXJuZWxfdCBz aG91bGRuJ3QgYmUgYWxsb3dlZCB0byBleGVjdXRlIGFueSBmaWxlIHdpdGhvdXQgdHJhbnNpdGlv biIKKyAgICAgICAgcmxTRVNlYXJjaFJ1bGUgImFsbG93IGtlcm5lbF90IHVzZXJfaG9tZV90OmZp bGUgeyBleGVjdXRlIGVudHJ5cG9pbnQgfSIgMSBcCisgICAgICAgICAgICAia2VybmVsX3Qgc2hv dWxkbid0IGJlIGFsbG93ZWQgdG8gZXhlY3V0ZSBmaWxlcyBpbiB1c2VyIGhvbWUgZGlyZWN0b3Jp ZXMiCisgICAgICAgIHJsU0VTZWFyY2hSdWxlICJhbGxvdyBrZXJuZWxfdCB1c2VyX3RtcF90OmZp bGUgeyBleGVjdXRlIGVudHJ5cG9pbnQgfSIgMSBcCisgICAgICAgICAgICAia2VybmVsX3Qgc2hv dWxkbid0IGJlIGFsbG93ZWQgdG8gZXhlY3V0ZSB1c2VyIHRlbXBvcmFyeSBmaWxlcyIKKyAgICBy bFBoYXNlRW5kCisKKyAgICBybFBoYXNlU3RhcnRUZXN0ICJMZWdpdCBtb2Rwcm9iZSIKKyAgICAg ICAgcmxMb2cgIlNob3VsZCB3b3JrIHdpdGggbm8gQVZDcyIKKworICAgICAgICBybFNFU2V0VGlt ZXN0YW1wCisgICAgICAgIHNsZWVwIDEKKyAgICAgICAgcmxSdW4gInRyaWdnZXJfbW9kcHJvYmUi CisgICAgICAgIHNsZWVwIDEKKyAgICAgICAgcmxTRUNoZWNrQVZDCisgICAgcmxQaGFzZUVuZAor CisgICAgcmxQaGFzZVN0YXJ0VGVzdCAiTW9kcHJvYmUgc2V0IHRvIC91c3IvYmluL3RydWUiCisg ICAgICAgIHJsTG9nICJTaG91bGQgZmFpbCBidXQgY2F1c2Ugbm8gQVZDcyIKKworICAgICAgICBy bFJ1biAic3lzY3RsIGtlcm5lbC5tb2Rwcm9iZT0vdXNyL2Jpbi90cnVlIiAwIFwKKyAgICAgICAg ICAgICJTZXQga2VybmVsLm1vZHByb2JlIHRvIC91c3IvYmluL3RydWUiCisgICAgICAgIHJsU0VT ZXRUaW1lc3RhbXAKKyAgICAgICAgc2xlZXAgMQorICAgICAgICBybFJ1biAidHJpZ2dlcl9tb2Rw cm9iZSIgMQorICAgICAgICBzbGVlcCAxCisgICAgICAgIHJsU0VDaGVja0FWQworICAgICAgICBy bFJ1biAic3lzY3RsIGtlcm5lbC5tb2Rwcm9iZT1cIlwkb3JpZ2luYWxfbW9kcHJvYmVcIiIgMCBc CisgICAgICAgICAgICAiUmVzZXQga2VybmVsLm1vZHByb2JlIHRvIGRlZmF1bHQiCisgICAgcmxQ aGFzZUVuZAorCisgICAgcmxQaGFzZVN0YXJ0VGVzdCAiTW9kcHJvYmUgc2V0IHRvIC91c3Ivc2Jp bi9sb2FkX3BvbGljeSIKKyAgICAgICAgcmxMb2cgIlNob3VsZCBmYWlsIHdpdGggQVZDcyBkZW55 aW5nIHRoZSBleGVjdXRpb24iCisKKyAgICAgICAgcmxSdW4gInN5c2N0bCBrZXJuZWwubW9kcHJv YmU9L3Vzci9zYmluL2xvYWRfcG9saWN5IiAwIFwKKyAgICAgICAgICAgICJTZXQga2VybmVsLm1v ZHByb2JlIHRvIC91c3Ivc2Jpbi9sb2FkX3BvbGljeSIKKyAgICAgICAgcmxTRVNldFRpbWVzdGFt cAorICAgICAgICBzbGVlcCAxCisgICAgICAgIHJsUnVuICJ0cmlnZ2VyX21vZHByb2JlIiAxCisg ICAgICAgIHNsZWVwIDEKKyAgICAgICAgcmxSdW4gInJsU0VBVkNDaGVjayIgMQorICAgICAgICBy bFJ1biAic3lzY3RsIGtlcm5lbC5tb2Rwcm9iZT1cIlwkb3JpZ2luYWxfbW9kcHJvYmVcIiIgMCBc CisgICAgICAgICAgICAiUmVzZXQga2VybmVsLm1vZHByb2JlIHRvIGRlZmF1bHQiCisgICAgcmxQ aGFzZUVuZAorCisgICAgcmxQaGFzZVN0YXJ0VGVzdCAiTW9kcHJvYmUgcmVsYWJlbGVkIHRvIGJp bl90IgorICAgICAgICBybExvZyAiU2hvdWxkIGZhaWwgd2l0aCBBVkNzIGRlbnlpbmcgb3BlcmF0 aW9uIGFmdGVyIHRyYW5zaXRpb24iCisgICAgICAgIHJsUnVuICJjaGNvbiAtdCBiaW5fdCBcIlwk KHJlYWRsaW5rIC1mIFwiXCRvcmlnaW5hbF9tb2Rwcm9iZVwiKVwiIiAwIFwKKyAgICAgICAgICAg ICJTZXQga2VybmVsLm1vZHByb2JlIHRvIC91c3Ivc2Jpbi9sb2FkX3BvbGljeSIKKyAgICAgICAg cmxTRVNldFRpbWVzdGFtcAorICAgICAgICBzbGVlcCAxCisgICAgICAgIHJsUnVuICJ0cmlnZ2Vy X21vZHByb2JlIiAxCisgICAgICAgIHNsZWVwIDEKKyAgICAgICAgcmxSdW4gInJsU0VBVkNDaGVj ayIgMQorICAgICAgICBybFJ1biAicmVzdG9yZWNvbiBcIlwkKHJlYWRsaW5rIC1mIFwiXCRvcmln aW5hbF9tb2Rwcm9iZVwiKVwiIiAwIFwKKyAgICAgICAgICAgICJSZXNldCBrZXJuZWwubW9kcHJv YmUgdG8gZGVmYXVsdCIKKyAgICBybFBoYXNlRW5kCisKKyAgICBybFBoYXNlU3RhcnRUZXN0ICJM ZWdpdCBjb3JlZHVtcCBoZWxwZXIiCisgICAgICAgIHJsTG9nICJTaG91bGQgd29yayB3aXRoIG5v IEFWQ3MiCisKKyAgICAgICAgcmxTRVNldFRpbWVzdGFtcAorICAgICAgICBzbGVlcCAxCisgICAg ICAgIHJsUnVuICIuL3RyaWdnZXJfc2VnZmF1bHQiIDEzOQorICAgICAgICBzbGVlcCAyCisgICAg ICAgIHJsU0VDaGVja0FWQworICAgIHJsUGhhc2VFbmQKKworICAgIHJsUGhhc2VTdGFydFRlc3Qg IkNvcmUgcGF0dGVybiBzZXQgdG8gfC91c3Ivc2Jpbi9sb2FkX3BvbGljeSIKKyAgICAgICAgcmxM b2cgIlNob3VsZCBmYWlsIHdpdGggQVZDcyBkZW55aW5nIHRoZSBleGVjdXRpb24iCisKKyAgICAg ICAgcmxSdW4gInN5c2N0bCBrZXJuZWwuY29yZV9wYXR0ZXJuPSd8L3Vzci9zYmluL2xvYWRfcG9s aWN5JyIgMCBcCisgICAgICAgICAgICAiU2V0IGtlcm5lbC5jb3JlX3BhdHRlcm4gdG8gfC91c3Iv c2Jpbi9sb2FkX3BvbGljeSIKKyAgICAgICAgcmxTRVNldFRpbWVzdGFtcAorICAgICAgICBzbGVl cCAxCisgICAgICAgIHJsUnVuICIuL3RyaWdnZXJfc2VnZmF1bHQiIDEzOQorICAgICAgICBzbGVl cCAxCisgICAgICAgIHJsUnVuICJybFNFQVZDQ2hlY2siIDEKKyAgICAgICAgcmxSdW4gInN5c2N0 bCBrZXJuZWwuY29yZV9wYXR0ZXJuPVwiXCRvcmlnaW5hbF9jb3JlX3BhdHRlcm5cIiIgMCBcCisg ICAgICAgICAgICAiUmVzZXQga2VybmVsLmNvcmVfcGF0dGVybiB0byBkZWZhdWx0IgorICAgIHJs UGhhc2VFbmQKKworICAgIHJsUGhhc2VTdGFydENsZWFudXAKKyAgICAgICAgcmxSdW4gInJtIC1m IHRyaWdnZXJfc2VnZmF1bHQiCisgICAgcmxQaGFzZUVuZAorcmxKb3VybmFsUHJpbnRUZXh0City bEpvdXJuYWxFbmQKCmRpZmYgLS1naXQgYS9zZWxpbnV4LXBvbGljeS9rZXJuZWwtY29uZmluZWQt ZXhlYy90cmlnZ2VyX3NlZ2ZhdWx0LmMgYi9zZWxpbnV4LXBvbGljeS9rZXJuZWwtY29uZmluZWQt ZXhlYy90cmlnZ2VyX3NlZ2ZhdWx0LmMKbmV3IGZpbGUgbW9kZSAxMDA2NDQKaW5kZXggMDAwMDAw MC4uMGVlMGFiNAotLS0gL2Rldi9udWxsCisrKyBiL3NlbGludXgtcG9saWN5L2tlcm5lbC1jb25m aW5lZC1leGVjL3RyaWdnZXJfc2VnZmF1bHQuYwpAQCAtMCwwICsxLDYgQEAKKyNpbmNsdWRlIDxz dGRsaWIuaD4KKworaW50IG1haW4odm9pZCkKK3sKKwlyZXR1cm4gKihpbnQgKilOVUxMOworfQo=