~alexmurray/qa-regression-testing:fix-lp2031377

Branch merges

Propose for merging

Merged into qa-regression-testing:master at revision 20f7556ec019a4307d815de3d16d279f9bf4854b

Po-Hsu Lin (community): Approve on 2023-11-06

Ubuntu Security Team: Pending requested 2023-11-03

Diff: 31 lines (+7/-0)

1 file modified

scripts/test-kernel-security.py (+7/-0)

api

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related charm recipes

399c61e... by Alex Murray on 2023-11-03

scripts/test-kernel-security: support zstd compressed modules for LP: #2031377

Signed-off-by: Alex Murray <email address hidden>

	imagemagick:0 (build)
	imagemagick:1 (build)
	imagemagick:2 (build)
	gcc-security:0 (build)
	gcc-security:1 (build)
	gcc-security:2 (build)
	glibc:0 (build)
	glibc:1 (build)
	glibc:2 (build)
	glibc-security:0 (build)
	glibc-security:1 (build)
	glibc-security:2 (build)
	gnupg:0 (build)
	gnupg:1 (build)
	gnupg:2 (build)
	sudo:0 (build)
	sudo:1 (build)
	sudo:2 (build)
	git:0 (build)
	git:1 (build)
	git:2 (build)
	ghostscript:0 (build)
	ghostscript:1 (build)
	ghostscript:2 (build)
	busybox:0 (build)
	busybox:1 (build)
	busybox:2 (build)
	coreutils:0 (build)
	coreutils:1 (build)
	coreutils:2 (build)
	util-linux:0 (build)
	util-linux:1 (build)
	util-linux:2 (build)

1 → 33 of 33 results

First • Previous • Next • Last

a46634c... by Steve Beattie on 2023-11-01

test-kernel-security: add simple shared library for LD_* tests

In jammy and other systemd based releases, preloading libmemusage ends
up conflicting (I suspect) with systemd's allocation routines, in such a
way that the pam_systemd either throws an assert in its json handling
code (wtf?!) or segfaults.

This commit creates a simple library for use as a LD_PRELOAD and
LD_AUDIT target, and switched the test to use it. *Ideally* it
should get temporarily installed in one of the system libraries,
as the loader will do some magic around that for setuid binaries,
but the kernel should get there first.

Signed-off-by: Steve Beattie <email address hidden>

c45b3ef... by Steve Beattie on 2023-10-31

test-glibc-security.py: create test user for shadow test

In some CI environments, there may not be a user with a password set, so
we'll create a test user to ensure one exists.

Signed-off-by: Steve Beattie <email address hidden>

3aedbbc... by Steve Beattie on 2023-10-31

test-glibc-security: split out env tests into subtests

Signed-off-by: Steve Beattie <email address hidden>

30003c7... by Steve Beattie on 2023-10-31

test-glibc-security: split password hash alg tests

Split them into independent tests that verify:

- what the hash algorithm in the pam configuration is
- what the hash algorithms in use in /etc/shadow are

Signed-off-by: Steve Beattie <email address hidden>

86ba98c... by Steve Beattie on 2023-10-31

launchpad.yaml: add glibc-security tests

Signed-off-by: Steve Beattie <email address hidden>

dbd3fa1... by Steve Beattie on 2023-10-31

test-glibc-security.abort_msg: avoid truncated output from readelf

Somewhere between focal and jammy, readelf started truncating symbol
names by default. Pass the `--wide` command line argument to get
non-truncated versions of the output; the argument is supported back
to trusty (14.04 LTS).

Signed-off-by: Steve Beattie <email address hidden>

e37d1f7... by Steve Beattie on 2023-10-30

test-glibc-security: yescrypt is default pw hash for 22.04 and newer

Signed-off-by: Steve Beattie <email address hidden>

4ff9439... by Jorge Sancho Larraz on 2023-10-27

deactivate test-iperf3 from lpci as most tests check for cves only fixed in esm

42d9f05... by Jorge Sancho Larraz on 2023-10-26

Create new tests for iperf3 package and add them to .launchpad.yaml