landlock-lsm / linux

Linux kernel - See Landlock issues
https://git.kernel.org/pub/scm/linux/kernel/git/mic/linux.git/
Other
35 stars 10 forks source link

Add io_uring tests #23

Open l0kod opened 9 months ago

l0kod commented 9 months ago

io_uring is a complex interface growing quickly that can lead to critical security issues and bypass of security checks. Current Landlock's tests don't check with io_uring operations.

It would be good to extend Landlock's tests using relevant io_uring's operations (e.g. IORING_OP_OPENAT, IORING_OP_CONNECT).

maha-sachin commented 8 months ago

hi I am Maha from outreachy, can you guide me about this issue

l0kod commented 8 months ago

Hi! The goal is to add new tests to these test files.

maha-sachin commented 8 months ago

@l0kod, Thank you for your assistance! can you help me to assign this issue? , I will start working on it and make the necessary changes.

l0kod commented 8 months ago

I'm assigning this issue to you. Please regularly update it with your progress. This doesn't need to be long but just enough to make sure you are not blocked.

You can add the io_uring command on which you are working on. Other people interested to add new tests could complete this list and work together.

maha-sachin commented 8 months ago

I'm assigning this issue to you. Please regularly update it with your progress. This doesn't need to be long but just enough to make sure you are not blocked.

You can add the io_uring command on which you are working on. Other people interested to add new tests could complete this list and work together.

@l0kod, I appreciate the opportunity to contribute. I'll start working on it right away and will provide regular updates on my progress.

l0kod commented 8 months ago

@Madhupatel08 please read the Outreachy's kernel development documentation first. Your PR doesn't help with this issue, there is nothing specific to Landlock.

AlisonSchofield commented 8 months ago

hi I am Maha from outreachy, can you guide me about this issue

Hi Maha - Are you intending to be an applicant with Linux Kernel Outreachy this round? Please drop me a note if so. Thanks! (I'm the kernel coordinator for Outreachy)

maha-sachin commented 8 months ago

Hi @AlisonSchofield, Glad to hear from you. I am interested in becoming an applicant. What might be the best way to reach out to you?

maha-sachin commented 8 months ago

@l0kod, @AlisonSchofield , I'm excited about the opportunity to contribute to the Linux Kernel project. However, I am using a macOS Apple Silicon device, and I understand that the project setup requires Linux, which is typically more conducive to working with the kernel. To address this, I'm in the process of arranging to obtain Ubuntu OS through my city employment service. Once I have it set up, I'll be fully equipped to dive into the project requirements.

Thank you for your understanding and support.

MissTipo commented 8 months ago

Hi, I would like to work on this issue. I have already made contributions to drivers/staging and have one patch accepted and a couple patches with the acked-by tags. Can I please get this issue assigned to me so I can start working on It? Thank you.

l0kod commented 8 months ago

Hi @MissTipo! Yes, you can start working on this. We like tests and everyone can add new ones. Moreover, you are indeed following the Outreachy rules and already sent a lot of patches.

For now, we can have several assignees. We'll see how it goes with the first patches for this task.

l0kod commented 8 months ago

For reference: the related patch.

l0kod commented 4 months ago

I guess nobody is working on this task anymore.

sm1ling-knight commented 2 months ago

It would be great to also have a test for the IORING_OP_SOCKET operation when Socket access-control is applied.