Commit d63c2bbf authored by Dmitry Safonov's avatar Dmitry Safonov Committed by Pavel Emelyanov

cr-check: add logiuid feature

Loginuid tests should run only when kdat.has_loginuid set.
This is for > 3.13 kernels with CONFIG_AUDITSYSCALL enabled.
Signed-off-by: 's avatarDmitry Safonov <dsafonov@odin.com>
Signed-off-by: 's avatarPavel Emelyanov <xemul@parallels.com>
parent d151997b
...@@ -926,6 +926,19 @@ static int check_userns(void) ...@@ -926,6 +926,19 @@ static int check_userns(void)
return 0; return 0;
} }
static int check_loginuid(void)
{
if (kerndat_loginuid(false) < 0)
return -1;
if (!kdat.has_loginuid) {
pr_warn("Loginuid restore is OFF.\n");
return -1;
}
return 0;
}
int check_add_feature(char *feat) int check_add_feature(char *feat)
{ {
if (!strcmp(feat, "mnt_id")) if (!strcmp(feat, "mnt_id"))
...@@ -944,6 +957,8 @@ int check_add_feature(char *feat) ...@@ -944,6 +957,8 @@ int check_add_feature(char *feat)
chk_feature = check_ptrace_suspend_seccomp; chk_feature = check_ptrace_suspend_seccomp;
else if (!strcmp(feat, "seccomp_filters")) else if (!strcmp(feat, "seccomp_filters"))
chk_feature = check_ptrace_dump_seccomp_filters; chk_feature = check_ptrace_dump_seccomp_filters;
else if (!strcmp(feat, "loginuid"))
chk_feature = check_loginuid;
else { else {
pr_err("Unknown feature %s\n", feat); pr_err("Unknown feature %s\n", feat);
return -1; return -1;
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment