Re: [PATCH v6 6/8] selftests/brute: Add tests for the Brute LSM

On Wed, Mar 17, 2021 at 09:08:17PM -0700, Kees Cook wrote: > On Sun, Mar 07, 2021 at 12:30:29PM +0100, John Wood wrote: > > + > > +count_fork_matches() > > +{ > > + dmesg | grep "brute: Fork brute force attack detected" | wc -l > > This may be unstable if the dmesg scrolls past, etc. See how >

Re: [PATCH v6 6/8] selftests/brute: Add tests for the Brute LSM

On Sun, Mar 07, 2021 at 12:30:29PM +0100, John Wood wrote: > Add tests to check the brute LSM functionality and cover fork/exec brute > force attacks crossing the following privilege boundaries: > > 1.- setuid process > 2.- privilege changes > 3.- network to local > > Also, as a first step check

[PATCH v6 6/8] selftests/brute: Add tests for the Brute LSM

Add tests to check the brute LSM functionality and cover fork/exec brute force attacks crossing the following privilege boundaries: 1.- setuid process 2.- privilege changes 3.- network to local Also, as a first step check that fork/exec brute force attacks without crossing any privilege