aboutgitcodelistschat:MatrixIRC
Commit message (Collapse)AuthorAgeFilesLines
...
* Add license header to the integration testsAlice Frosi2023-03-241-0/+7
|
* cleanup commited filesAlice Frosi2023-03-241-0/+0
|
* tests: Adjust project directory and add license headersAlice Frosi2023-03-244-16/+64
|
* Re-arrange repository structureAlice Frosi2023-03-2437-44/+16
|
* Remove filter dirAlice Frosi2023-03-243-38320/+0
|
* Re-organize project and add license headerAlice Frosi2023-03-2444-208/+38478
|
* filter: add logging modeAlice Frosi2023-03-235-35/+64
| | | | | The logging mode creates a BPF filter where all the syscalls trigger a notification to the seccomp notifier.
* seitan: receiving seccomp notifier with socketAlice Frosi2023-03-231-22/+126
| | | | | | | | OCI spec and container runtimes expect to send the seccomp notifer fd through a unix socket. This mode is complementary of retrieving the file descriptor using the pid of the target process. Add option to log the syscalls.
* cooker: Initial import of new implementationStefano Brivio2023-03-2019-0/+3179
| | | | Signed-off-by: Stefano Brivio <sbrivio@redhat.com>
* tests: add unit tests for op_resolvedfdAlice Frosi2023-03-151-1/+77
|
* seitan: add op_resolvedfdAlice Frosi2023-03-152-0/+36
| | | | | | The op_resolvedfd verifies that the fd points to a path. Signed-off-by: Alice Frosi <afrosi@redhat.com>
* tests: add test for op_cmpAlice Frosi2023-02-271-1/+63
|
* seitan: add op_cmpAlice Frosi2023-02-272-0/+15
| | | | | The operation op_cmp allows to compare 2 areas of memory and if they don't match to jump to an operation.
* seitan: add op_endAlice Frosi2023-02-272-0/+4
| | | | | The op_end signal to terminate reading the operations. This is useful for the introductions of branches for the matches.
* test: fix arguments and offsetsAlice Frosi2023-02-271-6/+7
|
* seitan: copy immediate args with op_copyAlice Frosi2023-02-273-12/+22
|
* tests: add test for op_copyAlice Frosi2023-02-231-0/+64
| | | | | | The target process tries to perform a connect syscall and we need to check that the struct sockaddr_un is correctly copied from the memory of the target process
* operations: add op_copyAlice Frosi2023-02-233-5/+62
|
* tests: generalize the syscall of the targetAlice Frosi2023-02-231-12/+19
| | | | | Refactor the tests to pass the filtered syscall and setting the argument into the shared struct.
* test: fix check of a_blockAlice Frosi2023-02-231-1/+5
|
* tests: adjust do_operations signatureAlice Frosi2023-02-231-7/+7
| | | | Signed-off-by: Alice Frosi <afrosi@redhat.com>
* Rename actions to operationsAlice Frosi2023-02-226-117/+117
| | | | | Replace all the action related names to operations to make them more generic.
* fix formattingAlice Frosi2023-02-228-155/+171
|
* gluten: remove error typeAlice Frosi2023-02-221-1/+0
| | | | The error is always constant and not a reference
* tests: add test for act_inject with the referencesAlice Frosi2023-02-211-8/+35
|
* actions: add reference for the fdsAlice Frosi2023-02-213-15/+40
|
* actions: change pointer to offsetAlice Frosi2023-02-213-25/+11
|
* tests: add act_call and saving return valueAlice Frosi2023-02-211-0/+22
|
* makefile: add variable to set temporary data sizeAlice Frosi2023-02-211-0/+1
|
* actions: cast data for temporary result to uint16_tAlice Frosi2023-02-211-1/+1
|
* tests: add test-action-call when running make test-unitAlice Frosi2023-02-211-2/+2
|
* test: add test for act_callAlice Frosi2023-02-211-1/+23
|
* test: add ignore_ret for checking test resultAlice Frosi2023-02-211-7/+9
|
* action: return error for act_callAlice Frosi2023-02-211-2/+2
|
* actions: set error on act_callAlice Frosi2023-02-211-0/+13
|
* actions: add data sectionAlice Frosi2023-02-213-8/+8
|
* gluten: add reference fieldsAlice Frosi2023-02-211-2/+4
|
* tests: remove unused variablesAlice Frosi2023-02-211-7/+2
|
* tests: test reference for a_returnAlice Frosi2023-02-161-1/+33
| | | | Signed-off-by: Alice Frosi <afrosi@redhat.com>
* actions: add reference to a_returnAlice Frosi2023-02-162-2/+19
| | | | | | | The action return can return either a constant value or a reference to a value. Signed-off-by: Alice Frosi <afrosi@redhat.com>
* tests: fix the suite with the wrong testAlice Frosi2023-02-161-1/+1
|
* tests: separate every action in its own test caseAlice Frosi2023-02-161-18/+33
| | | | | | Separating every action is in a test case enable filtering using check env variable. Like: sudo -E CK_RUN_CASE="a_inject_a" tests/unit/test-actions
* actiosn: fix intialization for a_inject_aAlice Frosi2023-02-161-0/+1
|
* actions: fix initialization for a_actionAlice Frosi2023-02-161-1/+1
|
* moved requirements.txt into tests/integrationAlice Frosi2023-02-161-3/+0
|
* test: add howto setup integration testsAlice Frosi2023-02-162-0/+60
| | | | Signed-off-by: Alice Frosi <afrosi@redhat.com>
* actions: fix flag intializationAlice Frosi2023-02-161-2/+3
| | | | Signed-off-by: Alice Frosi <afrosi@redhat.com>
* tests: add tests for inject actionsAlice Frosi2023-02-161-11/+89
| | | | | | | | The inject actions install a fd into the target. The tests for those actions create a temporary file and install the file descriptor into the target, and check for the existance of the new fd. Signed-off-by: Alice Frosi <afrosi@redhat.com>
* Rename field old to oldfdAlice Frosi2023-02-162-3/+3
| | | | Signed-off-by: Alice Frosi <afrosi@redhat.com>
* test: interrupt test on target process exitAlice Frosi2023-02-161-0/+13
| | | | | | | Catch if the target process has exited due to an error and interrupt the tests. Signed-off-by: Alice Frosi <afrosi@redhat.com>