diff options
| author | Dan Peebles <pumpkin@me.com> | 2016-01-24 04:06:19 +0000 |
|---|---|---|
| committer | Dan Peebles <pumpkin@me.com> | 2016-01-24 04:06:19 +0000 |
| commit | dd184470550d02ca8f89a0c11b9b20de3ecfa3d1 (patch) | |
| tree | a4817c09cda6bfa8576a2676ee95e9748bf813cf | |
| parent | linux: 4.3.3 -> 4.34 (and update grsecurity patches, too) (diff) | |
| download | nixpkgs-dd184470550d02ca8f89a0c11b9b20de3ecfa3d1.tar.gz | |
grsecurity: add NixOS VM test
| -rw-r--r-- | nixos/release.nix | 1 | ||||
| -rw-r--r-- | nixos/tests/grsecurity.nix | 19 |
2 files changed, 20 insertions, 0 deletions
diff --git a/nixos/release.nix b/nixos/release.nix index 3c7cf84c6729..9c15b1ea0746 100644 --- a/nixos/release.nix +++ b/nixos/release.nix @@ -230,6 +230,7 @@ in rec { #tests.gitlab = callTest tests/gitlab.nix {}; tests.gnome3 = callTest tests/gnome3.nix {}; tests.gnome3-gdm = callTest tests/gnome3-gdm.nix {}; + tests.grsecurity = callTest tests/grsecurity.nix {}; tests.i3wm = callTest tests/i3wm.nix {}; tests.installer.grub1 = forAllSystems (system: hydraJob (import tests/installer.nix { inherit system; }).grub1.test); tests.installer.lvm = forAllSystems (system: hydraJob (import tests/installer.nix { inherit system; }).lvm.test); diff --git a/nixos/tests/grsecurity.nix b/nixos/tests/grsecurity.nix new file mode 100644 index 000000000000..14f1aa9ff885 --- /dev/null +++ b/nixos/tests/grsecurity.nix @@ -0,0 +1,19 @@ +# Basic test to make sure grsecurity works + +import ./make-test.nix ({ pkgs, ...} : { + name = "grsecurity"; + meta = with pkgs.stdenv.lib.maintainers; { + maintainers = [ copumpkin ]; + }; + + machine = { config, pkgs, ... }: + { boot.kernelPackages = pkgs.linuxPackages_grsec_testing_server; }; + + testScript = + '' + $machine->succeed("uname -a") =~ /grsec/; + # FIXME: this seems to hang the whole test. Unclear why, but let's fix it + # $machine->succeed("${pkgs.paxtest}/bin/paxtest blackhat"); + ''; +}) + |