mirror of
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
synced 2026-02-22 01:50:16 -05:00
2a794ee613
Check that a domain is not tied to the executable file that created it. For instance, that could happen if a Landlock domain took a reference to a struct path. Move global path names to common.h and replace copy_binary() with a more generic copy_file() helper. Test coverage for security/landlock is 92.7% of 1133 lines according to gcc/gcov-14. Cc: Günther Noack <gnoack@google.com> Link: https://lore.kernel.org/r/20250108154338.1129069-23-mic@digikod.net [mic: Update date and add test coverage] Signed-off-by: Mickaël Salaün <mic@digikod.net>
24 lines
535 B
Makefile
24 lines
535 B
Makefile
# SPDX-License-Identifier: GPL-2.0
|
|
#
|
|
# First run: make -C ../../../.. headers_install
|
|
|
|
CFLAGS += -Wall -O2 $(KHDR_INCLUDES)
|
|
|
|
LOCAL_HDRS += common.h
|
|
|
|
src_test := $(wildcard *_test.c)
|
|
|
|
TEST_GEN_PROGS := $(src_test:.c=)
|
|
|
|
TEST_GEN_PROGS_EXTENDED := true sandbox-and-launch wait-pipe
|
|
|
|
# Short targets:
|
|
$(TEST_GEN_PROGS): LDLIBS += -lcap -lpthread
|
|
$(TEST_GEN_PROGS_EXTENDED): LDFLAGS += -static
|
|
|
|
include ../lib.mk
|
|
|
|
# Targets with $(OUTPUT)/ prefix:
|
|
$(TEST_GEN_PROGS): LDLIBS += -lcap -lpthread
|
|
$(TEST_GEN_PROGS_EXTENDED): LDFLAGS += -static
|