RFE: inet_socket: test individual failure of netif ingress/egress and node recvfrom/sendto

SELinuxProject / selinux-testsuite

This is the upstream SELinux testsuite which is designed as a basic set of regression tests for the SELinux kernel functionality.

GNU General Public License v2.0

54 stars 43 forks source link

RFE: inet_socket: test individual failure of netif ingress/egress and node recvfrom/sendto #13

Open stephensmalley opened 7 years ago

stephensmalley commented 7 years ago

Presently allowed to the test_inet_client/server_t domains via corenet_inout_generic_if() and corenet_inout_generic_node(). Need new test domains that selectively omit each of these permissions to test individual denial/failure, and appropriate test cases.