[RFC PATCH 0/1] selinux-testsuite: Add binder tests

[Richard Haines via Selinux]

Not sure how useful this is but saw [1] and thought I'll have a go out
of idle curiosity.

I've only tested on Fedora 27 with kernel-4.16.3-200.fc27.x86_64

Use ./test -v to see the flow of binder info

I just added the following to the standard kernel-x86_64.config:
CONFIG_ANDROID_BINDER_DEVICES="binder"
CONFIG_ANDROID_BINDER_IPC=y
# CONFIG_ANDROID_BINDER_IPC_SELFTEST is not set

[1] https://github.com/SELinuxProject/selinux-testsuite/issues/27

Richard Haines (1):
selinux-testsuite: Add binder tests

README.md | 8 +
defconfig | 8 +
policy/Makefile | 2 +-
policy/test_binder.te | 83 +++++++
tests/Makefile | 2 +-
tests/binder/Makefile | 7 +
tests/binder/check_binder.c | 80 +++++++
tests/binder/test | 131 +++++++++++
tests/binder/test_binder.c | 543 ++++++++++++++++++++++++++++++++++++++++++++
9 files changed, 862 insertions(+), 2 deletions(-)
create mode 100644 policy/test_binder.te
create mode 100644 tests/binder/Makefile
create mode 100644 tests/binder/check_binder.c
create mode 100644 tests/binder/test
create mode 100644 tests/binder/test_binder.c

[Stephen Smalley]

Post by Richard Haines via Selinux
Not sure how useful this is but saw [1] and thought I'll have a go out
of idle curiosity.

I haven't looked at the code yet but I'm in favor of adding it - this should
help prevent regressions in the binder SELinux checks in upstream kernels.

Post by Richard Haines via Selinux
I've only tested on Fedora 27 with kernel-4.16.3-200.fc27.x86_64
Use ./test -v to see the flow of binder info
CONFIG_ANDROID_BINDER_DEVICES="binder"
CONFIG_ANDROID_BINDER_IPC=y
# CONFIG_ANDROID_BINDER_IPC_SELFTEST is not set
[1] https://github.com/SELinuxProject/selinux-testsuite/issues/27
selinux-testsuite: Add binder tests
README.md | 8 +
defconfig | 8 +
policy/Makefile | 2 +-
policy/test_binder.te | 83 +++++++
tests/Makefile | 2 +-
tests/binder/Makefile | 7 +
tests/binder/check_binder.c | 80 +++++++
tests/binder/test | 131 +++++++++++
tests/binder/test_binder.c | 543 ++++++++++++++++++++++++++++++++++++++++++++
9 files changed, 862 insertions(+), 2 deletions(-)
create mode 100644 policy/test_binder.te
create mode 100644 tests/binder/Makefile
create mode 100644 tests/binder/check_binder.c
create mode 100644 tests/binder/test
create mode 100644 tests/binder/test_binder.c