On 7/5/2016 5:49 PM, David Ahern wrote: > On 7/5/16 5:38 PM, Casey Schaufler wrote: >> I have encountered a system hang with my Smack >> networking tests that bisects to the change below. >> I can't say that I have any idea why the change >> would impact the Smack processing, but there appears >> to be some serious packet processing going on. The >> Smack code is using CIPSO on the loopback interface. >> The test is supposed to verify that labels can be >> set on the packets using CIPSO. Unlabeled packets >> do not appear to be impacted. I do not know if SELinux >> is affected, and if not, why not. Smack and SELinux >> use CIPSO differently. > > What are the commands to repeat the test? > There is a tar file attached with the tests. Put the etc/smack/user file into /etc/smack/user. In the tools-2012 directory run make to build the tools. The test in question is called testnetworking.sh and needs to be run as root. You will need to configure Smack in the kernel, of course.
smack-tests.tar
Description: Binary data
