Patches item #1542263, was opened at 2006-08-17 21:37
Message generated for change (Comment added) made by subrata_modak
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=303382&aid=1542263&group_id=3382

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: None
Group: None
>Status: Closed
>Resolution: Later
Priority: 5
Private: No
Submitted By: Bill O'Donnell (billodo)
Assigned to: Nobody/Anonymous (nobody)
Summary: LTP test patches for  SGI RHEL4 CAPP/EAL3+ Testing

Initial Comment:
This file contains numerous patches to the LTP
for the SGI RHEL4 CAPP/EAL3+ evaluation testing.

=================================
These are the changes for the LTP based test suite 
originally used for the IBM SLES9 CAPP/EAL4+ 
evaluation in order to get them working for the SGI 
RHEL4 CAPP/EAL3+ evaluation testing.

Use the following process to prepare the test cases:

- get the original test cases and unpack them:

  ftp://ftp.suse.com/pub/projects/security/
CommonCriteria/CAPP-EAL4+/testing/eal4-testcases-
sles9.tar.gz

- apply the following patch:

    0001-changes-made-for-SGI-SLES9-CAPP-EAL3-
evaluation.diff

- run the following commands:

    rm -rf laus_test
    ( cd LTP && make extract && rm -rf ltp-full.tar.gz 
patches )

- apply the following patch:

    ltp-cc-test-changes-sgi-rhel4-capp-eal3.diff
    
- unpack the HP "audit-test" suite:

    http://sourceforge.net/projects/audit-test/
    audit-test-1090.tar.gz (or newer)

- Apply audit-test patches (if any)
==============================

DESCRIPTION OF PATCHES IN ltp-cc-test-changes-sgi-
rhel4-capp-eal3:

commit b85aa1c446ce99545e415357c1c7641f50f2be13
Author: Bill O'Donnell <[EMAIL PROTECTED]>
Date:   Thu Aug 10 17:44:11 2006 -0500

    Various fixes to the openssl tests:
    
    - ensure the stunnel3_wrapper file is executable 
(the file was added by the previous patch)
    
    - put files in /etc/stunnel/ which always exists, 
not /etc/ssl/certs/ which is SLES specific
    
    - use sufficiently strong default password, to 
ensure it's accepted by pam_passwdqc. Clear out /etc/
security/opasswd also.
    
    - Wait for password change to finish before 
closing communication, otherwise the change isn't 
committed.
    
    - ensure that "make run" builds the software first
    
    - ensure that the newly added user actually has 
the shell prompt that the script is expecting.


commit 40b8f671539e8d03c3748653fcf3cae9f31ab6b6
Author: Peter Poeml <[EMAIL PROTECTED]>
Date:   Mon Dec 22 09:37:33 2003 -0600

    Import "stunnel3_wrapper" script.
    
    The openssl tests need the public domain 
"stunnel3_wrapper" program which SLES includes but 
RHEL doesn't. Add it to the repository, downloaded 
from:
    
      http://www.stunnel.org/download/stunnel/contrib/
stunnel3_wrapper
    
    License:
    
      # Peter Poeml <[EMAIL PROTECTED]>
      # This is a public domain software.  Use it at 
your oun risk.


commit 66807171b27963926a8fdea6f6d628669b3341b8
Author: Bill O'Donnell <[EMAIL PROTECTED]>
Date:   Thu Aug 10 15:12:02 2006 -0500

    misc_test/proc_sys_perms: various test fixes
    
    - Use standard file name conventions for log file, 
delete the *.FAIL/*.SKIP files which weren't being 
collected in the toplevel run.log file.
    
    - fix summary line so that it gets picked up in 
the toplevel run.log file.
    
    - When referring to the kernel permitting or 
denying actions, use the terms "permit/deny" and not 
"pass/fail" to distinguish the actual/expected result 
from the test passing or failing (which happens when 
the actual and expected permit/deny results don't 
match).
    
    - Actions that fail due to additional restrictions 
in the kernel are a PASS result.


commit 01056e4b9ab9738065457882d39a613bd04bdf29
Author: Bill O'Donnell <[EMAIL PROTECTED]>
Date:   Thu Aug 10 15:12:02 2006 -0500

    misc_test/permission/procperm.sh: fix "su nobody -
c" call
    
    It fails if "nobody" doesn't have a proper shell.  
Add "-s" argument to ensure that it works in that case 
also.


commit f0874eae8e624114e6735362b533ca89f34cc4dc
Author: Bill O'Donnell <[EMAIL PROTECTED]>
Date:   Mon Aug 7 17:03:49 2006 -0500

    misc_test report: properly collect FAIL/ERROR 
results


commit 7fe6b6f032eb9841cfc54ff939ea018f66662300
Author: Bill O'Donnell <[EMAIL PROTECTED]>
Date:   Mon Aug 7 15:49:44 2006 -0500

    misc_test/databases test fixes (RHEL/SLES porting, 
avoid system clock change)
    
    - Don't mess with the system clock when testing 
password expiry. Update the /etc/shadow age data to 
simulate an old password instead.
    
    - work around RHEL/SLES differences in file 
locations such as /etc/ftpusers
    
    - work around RHEL/SLES differences in command 
syntax such as chage
    
    - work around RHEL/SLES differences in command 
output messages
    
    - check success/fail value for commands instead of 
system dependent numeric exit code
    
    - don't delete /etc/security/opasswd file, just 
wipe its content


commit 063077362dc4b1cfc14e0aad76444acbe4e5e1f8
Author: Bill O'Donnell <[EMAIL PROTECTED]>
Date:   Tue May 16 10:06:28 2006 -0500

    misc_test/at_crontab test fixes
    
    - Work around SLES vs RHEL differences in file 
locations.
    
    - Use a simple shell with no fancy PS1 prompt, to 
avoid confusing the regexes used inside the expect 
sections.


commit 9cd44b2748b5986001a56cdaa4b871daed4bf877
Author: Bill O'Donnell <[EMAIL PROTECTED]>
Date:   Wed May 17 20:57:23 2006 -0500

    misc_test/ext3_acls: work around minor differences 
in tool messages.

commit 807175fb3ccb4d76df2375da436bd99c9611460b
Author: Bill O'Donnell <[EMAIL PROTECTED]>
Date:   Tue Aug 8 18:02:20 2006 -0500

    ftpusers test: fail gracefully if vsftpd 
misconfigured.

commit 2eafde4ba17a83478efca86b69659e67a64064be
Author: Bill O'Donnell <[EMAIL PROTECTED]>
Date:   Tue Aug 8 18:02:20 2006 -0500

    rules.mk: Update verifydeps checks:
    
    - disable LAuS specific audit config checks
    
    - fix Expect.pm locator
    
    - fix vsftpd.conf location (Note: this may break 
SLES, sorry...)
    
    - add machine friendly packages list to systeminfo 
log file
    
    - check for missing world execute permissions in 
the path to the test cases. This fixes the "permission 
denied" errors from LTP for "su" and similar tests 
that occur if you run the tests from $HOME with the 
default permissions 700.
    
    - fail if kernel -devel package for current kernel 
not installed.
    
    - add check for misconfigured vsftpd (FIXME: 
broken for SLES?)
    
    - move checks for vsftpd to ensure that people fix 
the config file first and then restart it, not the 
other way around which caused mysterious test failures.


commit bf16032b4bf9bff0988b5df74bcb9f9d5192cb7a
Author: Bill O'Donnell <[EMAIL PROTECTED]>
Date:   Tue May 16 10:06:28 2006 -0500

    ltprules: Warn only if verifydeps doesn't find 
packages, don't fail.

commit 30a6c73c66811ee4af26d937056f143368f6b6b6
Author: Klaus Weidner <[EMAIL PROTECTED]>
Date:   Wed Aug 16 17:48:38 2006 -0500

    Run LAF "audit-test"s, not "laus_test". Make 
dependency check a warning only, don't fail when 
packages are missing.(cherry picked from 
9255f36eab335d0aee45e40c98d0e62798d4a7d1 commit)


commit 11e2881326479f428daef82b23bc0a2985cb3a15
Author: Bill O'Donnell <[EMAIL PROTECTED]>
Date:   Tue May 16 10:06:28 2006 -0500

    LTP su01: Make test case RHEL compatible.
    
    It should work on both SLES and RHEL, but tested 
on RHEL only. Changes:
    
    - password expiry ("passwd -e" vs "chage -M 10 -d 
0")
    
    - handle different feedback strings
    
    - cleanly close the FD, otherwise the command 
discards changes. (cherry picked from 
779e0914e7d0b001300d14870b15f6cba9e45765 commit)


commit a80a11f802e6f70a13953e53ee5b66c2e6858100
Author: Bill O'Donnell <[EMAIL PROTECTED]>
Date:   Tue May 16 10:06:28 2006 -0500

    LTP settimeofday/stime fixes
    
    When comparing time values, permit some minor 
differences in the time value to still count as a 
success.

commit c639cb7f060d91ef4e22066d0e77b6ed31fb6c1f
Author: Bill O'Donnell <[EMAIL PROTECTED]>
Date:   Tue May 16 10:06:28 2006 -0500

    Fix "delete_module" test.

commit f8cda942b0b65738f6e0fd928e23e7f6a34f1808
Author: Bill O'Donnell <[EMAIL PROTECTED]>
Date:   Tue May 16 10:06:28 2006 -0500

    Don't attempt to restart crond on RHEL systems
(it's unnecessary since the new crontab works without 
restart.)


commit 2d61270706cca20b6275f0e0efca7c30234f1267
Author: Bill O'Donnell <[EMAIL PROTECTED]>
Date:   Wed May 17 20:57:23 2006 -0500

    LTP Makefile fixes (make report; run "all")
    
    - Make sure "make report" gets run even if runltp 
fails, so that it doesn't contain obsolete data.
    
    - Add "all" prereq to "run" target to ensure that 
the tests get built before being run. (cherry picked 
from e1dca3a5bfe819c45e2bf88730ce7a264aede7fa commit)


commit 47fbdc68ac4c8bf430a8429f8a092b00dafc757b
Author: Bill O'Donnell <[EMAIL PROTECTED]>
Date:   Tue May 16 10:06:28 2006 -0500

    LTP: Disable tests for stime and semtimedop 
(tested in audit suite)


commit fc41e157d0c0568d925f2611bcae06cf9f3d077a
Author: Bill O'Donnell <[EMAIL PROTECTED]>
Date:   Tue May 16 10:06:28 2006 -0500

    LTP toplevel Makefile fixes
    Change LTP toplevel Makefile to work from already 
extracted LTP suite (don't use the "make extract" 
target, and add sanity check to not remove the ltp-
full dir if the tarball does not exist).
    
    Simplify the logic that generates the list of 
tests to run to make it less fragile.


commit 9c68969f9aaac841956531f81f86468676feb614
Author: Bill O'Donnell <[EMAIL PROTECTED]>
Date:   Tue May 16 10:06:28 2006 -0500

    Delete NFS test cases not relevant for the 
evaluated config which don't compile



----------------------------------------------------------------------

>Comment By: Subrata (subrata_modak)
Date: 2007-05-21 10:03

Message:
Logged In: YES 
user_id=1737361
Originator: NO

I have sent you a mail regarding this.
Regards--
Subrata

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=303382&aid=1542263&group_id=3382

-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
_______________________________________________
Ltp-list mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/ltp-list

Reply via email to