X-Git-Url: https://jxself.org/git/?a=blobdiff_plain;f=.github%2Fworkflows%2Ffunctional_test.sh;h=8d747487fbcaeb7b85c47a64b4c0d0a65c00fa05;hb=be0bde214733f361cecb0c13d313eb019b2d4086;hp=d9b9b37bc04dc3a220eec41b786b870c974eb05a;hpb=2136dcfadd96f386bc8432c963065e274b382853;p=kconfig-hardened-check.git diff --git a/.github/workflows/functional_test.sh b/.github/workflows/functional_test.sh index d9b9b37..8d74748 100644 --- a/.github/workflows/functional_test.sh +++ b/.github/workflows/functional_test.sh @@ -12,7 +12,7 @@ coverage run -a --branch bin/kconfig-hardened-check -h echo ">>>>> get version <<<<<" coverage run -a --branch bin/kconfig-hardened-check --version -echo ">>>>> print the security hardening preferences <<<<<" +echo ">>>>> print the security hardening recommendations <<<<<" coverage run -a --branch bin/kconfig-hardened-check -p X86_64 coverage run -a --branch bin/kconfig-hardened-check -p X86_64 -m verbose coverage run -a --branch bin/kconfig-hardened-check -p X86_64 -m json @@ -29,6 +29,12 @@ coverage run -a --branch bin/kconfig-hardened-check -p ARM coverage run -a --branch bin/kconfig-hardened-check -p ARM -m verbose coverage run -a --branch bin/kconfig-hardened-check -p ARM -m json +echo ">>>>> generate the Kconfig fragment <<<<<" +coverage run -a --branch bin/kconfig-hardened-check -g X86_64 +coverage run -a --branch bin/kconfig-hardened-check -g X86_32 +coverage run -a --branch bin/kconfig-hardened-check -g ARM64 +coverage run -a --branch bin/kconfig-hardened-check -g ARM + echo ">>>>> check the example kconfig files and cmdline <<<<<" cat /proc/cmdline echo "l1tf=off mds=full randomize_kstack_offset=on iommu.passthrough=0" > ./cmdline_example @@ -62,6 +68,12 @@ echo ">>>>> wrong modes for -p <<<<<" echo ">>>>> -p and -c together <<<<<" ! coverage run -a --branch bin/kconfig-hardened-check -p X86_64 -c kconfig_hardened_check/config_files/distros/fedora_34.config +echo ">>>>> wrong mode for -g <<<<<" +! coverage run -a --branch bin/kconfig-hardened-check -g X86_64 -m show_ok + +echo ">>>>> -g and -c together <<<<<" +! coverage run -a --branch bin/kconfig-hardened-check -g X86_64 -c kconfig_hardened_check/config_files/distros/fedora_34.config + cp kconfig_hardened_check/config_files/distros/fedora_34.config ./test.config echo ">>>>> no kernel version <<<<<"