en Copyright 2015 Java http://172.16.0.5:8080/history/freebsd-14.2/contrib/capsicum-test/makefile#955a3f9a Update capsicum-test to git commit f4d97414d48b8f8356b971ab9f45dc5c70d53c40This includes various fixes that I submitted recently such as updating thepdkill() tests for the actual implemented behaviour(https://github.com/google/capsicum-test/pull/53) and lots of changes toavoid calling sleep() and replacing it with reliable synchronization(pull requests 49,51,52,53,54). This should make the testsuite more reliablewhen running on Jenkins. Additionally, process status is now retrieved usinglibprocstat instead of running `ps` and parsing the output(https://github.com/google/capsicum-test/pull/50). This fixes one previouslyfailing test and speeds up execution.Overall, this update reduces the total runtime from ~60s to about 4-5 seconds. List of files: /freebsd-14.2/contrib/capsicum-test/makefile Tue, 02 Mar 2021 16:28:26 +0000 Alex Richardson <arichardson@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/contrib/capsicum-test/makefile#2d936e6c Update capsicum-test to git commit 7707222b46abe52d18fd4fbb76115ffdb3e6f74bThis includes changes to use GTEST_SKIP() instead of the local hand-rolledmechanism as well as a few minor cleanups. List of files: /freebsd-14.2/contrib/capsicum-test/makefile Tue, 16 Feb 2021 14:35:12 +0000 Alex Richardson <arichardson@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/contrib/capsicum-test/makefile#8ac5aef8 Integrate capsicum-test into the FreeBSD test suiteThis change takes capsicum-test from upstream and applies some local changes to make thetests work on FreeBSD when executed via Kyua.The local modifications are as follows:1. Make `OpenatTest.WithFlag` pass with the new dot-dot lookup behavior in FreeBSD 12.x+.2. capsicum-test references a set of helper binaries: `mini-me`, `mini-me.noexec`, and `mini-me.setuid`, as part of the execve/fexecve tests, via execve, fexecve, and open. It achieves this upstream by assuming `mini-me*` is in the current directory, however, in order for Kyua to execute `capsicum-test`, it needs to provide a full path to `mini-me*`. In order to achieve this, I made `capsicum-test` cache the executable's path from argv[0] in main(..) and use the cached value to compute the path to `mini-me*` as part of the execve/fexecve testcases.3. The capsicum-test test suite assumes that it's always being run on CAPABILITIES enabled kernels. However, there's a chance that the test will be run on a host without a CAPABILITIES enabled kernel, so we must check for the support before running the tests. The way to achieve this is to add the relevant `feature_present("security_capabilities")` check to SetupEnvironment::SetUp() and skip the tests when the support is not available. While here, add a check for `kern.trap_enotcap` being enabled. As noted by markj@ in https://github.com/google/capsicum-test/issues/23, this sysctl being enabled can trigger non-deterministic failures. Therefore, the tests should be skipped if this sysctl is enabled.All local changes have been submitted to the capsicum-test project(https://github.com/google/capsicum-test) and are in various stages of review.Please see the following pull requests for more details:1. https://github.com/google/capsicum-test/pull/352. https://github.com/google/capsicum-test/pull/413. https://github.com/google/capsicum-test/pull/42Reviewed by: asomersDiscussed with: emaste, markjApproved by: emaste (mentor)MFC after: 2 monthsDifferential Revision: https://reviews.freebsd.org/D19758 List of files: /freebsd-14.2/contrib/capsicum-test/makefile Mon, 01 Apr 2019 21:24:50 +0000 Enji Cooper <ngie@FreeBSD.org>