X-Git-Url: https://jxself.org/git/?a=blobdiff_plain;f=.github%2Fworkflows%2Ffunctional_test.sh;h=c17e67dd2be9fffeed180fa89acadaeba6d72ac7;hb=9cda7bc4571fe9a7ef8278b46cc10babe51ce483;hp=f7a384dfd99d36b04c30e8a770bc99481f356890;hpb=f44300ea59e8b87417f085c408b8666814c9268e;p=kconfig-hardened-check.git diff --git a/.github/workflows/functional_test.sh b/.github/workflows/functional_test.sh index f7a384d..c17e67d 100644 --- a/.github/workflows/functional_test.sh +++ b/.github/workflows/functional_test.sh @@ -51,24 +51,24 @@ for C in $KCONFIGS do COUNT=$(expr $COUNT + 1) echo "\n>>>>> checking kconfig number $COUNT <<<<<" - coverage run -a --branch bin/kconfig-hardened-check -c $C > /dev/null + coverage run -a --branch bin/kconfig-hardened-check -c $C coverage run -a --branch bin/kconfig-hardened-check -c $C -m verbose > /dev/null - coverage run -a --branch bin/kconfig-hardened-check -c $C -l /proc/cmdline > /dev/null - coverage run -a --branch bin/kconfig-hardened-check -c $C -s /tmp/sysctls > /dev/null - coverage run -a --branch bin/kconfig-hardened-check -c $C -l ./cmdline_example -s $SYSCTL_EXAMPLE > /dev/null + coverage run -a --branch bin/kconfig-hardened-check -c $C -l /proc/cmdline + coverage run -a --branch bin/kconfig-hardened-check -c $C -s /tmp/sysctls + coverage run -a --branch bin/kconfig-hardened-check -c $C -l ./cmdline_example -s $SYSCTL_EXAMPLE coverage run -a --branch bin/kconfig-hardened-check -c $C -l ./cmdline_example -s $SYSCTL_EXAMPLE -m verbose > /dev/null - coverage run -a --branch bin/kconfig-hardened-check -c $C -l ./cmdline_example -s $SYSCTL_EXAMPLE -m json > /dev/null - coverage run -a --branch bin/kconfig-hardened-check -c $C -l ./cmdline_example -s $SYSCTL_EXAMPLE -m show_ok > /dev/null - coverage run -a --branch bin/kconfig-hardened-check -c $C -l ./cmdline_example -s $SYSCTL_EXAMPLE -m show_fail > /dev/null + coverage run -a --branch bin/kconfig-hardened-check -c $C -l ./cmdline_example -s $SYSCTL_EXAMPLE -m json + coverage run -a --branch bin/kconfig-hardened-check -c $C -l ./cmdline_example -s $SYSCTL_EXAMPLE -m show_ok + coverage run -a --branch bin/kconfig-hardened-check -c $C -l ./cmdline_example -s $SYSCTL_EXAMPLE -m show_fail done echo "\n>>>>> have checked $COUNT kconfigs <<<<<" echo ">>>>> check sysctl separately <<<<<" -coverage run -a --branch bin/kconfig-hardened-check -s $SYSCTL_EXAMPLE > /dev/null +coverage run -a --branch bin/kconfig-hardened-check -s $SYSCTL_EXAMPLE coverage run -a --branch bin/kconfig-hardened-check -s $SYSCTL_EXAMPLE -m verbose > /dev/null -coverage run -a --branch bin/kconfig-hardened-check -s $SYSCTL_EXAMPLE -m json > /dev/null -coverage run -a --branch bin/kconfig-hardened-check -s $SYSCTL_EXAMPLE -m show_ok > /dev/null -coverage run -a --branch bin/kconfig-hardened-check -s $SYSCTL_EXAMPLE -m show_fail > /dev/null +coverage run -a --branch bin/kconfig-hardened-check -s $SYSCTL_EXAMPLE -m json +coverage run -a --branch bin/kconfig-hardened-check -s $SYSCTL_EXAMPLE -m show_ok +coverage run -a --branch bin/kconfig-hardened-check -s $SYSCTL_EXAMPLE -m show_fail echo "Collect coverage for error handling" @@ -78,12 +78,18 @@ coverage run -a --branch bin/kconfig-hardened-check -p X86_64 -c kconfig_hardene echo ">>>>> -c and -g together <<<<<" coverage run -a --branch bin/kconfig-hardened-check -g X86_64 -c kconfig_hardened_check/config_files/distros/fedora_34.config && exit 1 -echo ">>>>> -p and -g together <<<<<" -coverage run -a --branch bin/kconfig-hardened-check -p X86_64 -g X86_64 && exit 1 - echo ">>>>> -l without -c <<<<<" coverage run -a --branch bin/kconfig-hardened-check -l /proc/cmdline && exit 1 +echo ">>>>> -s and -p together <<<<<" +coverage run -a --branch bin/kconfig-hardened-check -p X86_64 -s $SYSCTL_EXAMPLE && exit 1 + +echo ">>>>> -s and -g together <<<<<" +coverage run -a --branch bin/kconfig-hardened-check -g X86_64 -s $SYSCTL_EXAMPLE && exit 1 + +echo ">>>>> -p and -g together <<<<<" +coverage run -a --branch bin/kconfig-hardened-check -p X86_64 -g X86_64 && exit 1 + echo ">>>>> wrong modes for -p <<<<<" coverage run -a --branch bin/kconfig-hardened-check -p X86_64 -m show_ok && exit 1 coverage run -a --branch bin/kconfig-hardened-check -p X86_64 -m show_fail && exit 1