From 4925c2aef187b7e292537afaecbbbc8b15ad5d97 Mon Sep 17 00:00:00 2001 From: Alexander Popov Date: Mon, 6 Mar 2023 18:49:42 +0300 Subject: [PATCH] Add more automatic tests (and increase the coverage) --- .github/workflows/main.yml | 25 +++++++++++++------------ 1 file changed, 13 insertions(+), 12 deletions(-) diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml index 00640df..d6b8cfd 100644 --- a/.github/workflows/main.yml +++ b/.github/workflows/main.yml @@ -37,13 +37,13 @@ jobs: run: | echo ">>>>> check all configs <<<<<" CONFIG_DIR=`find /opt/hostedtoolcache/Python/ -name config_files` - CONFIGS=`find $CONFIG_DIR -type f | grep "\.config"` + KCONFIGS=`find $CONFIG_DIR -type f | grep "\.config"` COUNT=0 - for C in $CONFIGS + for C in $KCONFIGS do COUNT=$(expr $COUNT + 1) echo -e "\n>>>>> checking config number $COUNT <<<<<" - kconfig-hardened-check -c $C + kconfig-hardened-check -c $C -l /proc/cmdline done echo -e "\n>>>>> checking $COUNT configs is done <<<<<" @@ -76,24 +76,25 @@ jobs: coverage run -a --branch bin/kconfig-hardened-check -p ARM -m verbose coverage run -a --branch bin/kconfig-hardened-check -p ARM -m json - echo ">>>>> use local cmdline as an example <<<<<" - cat /proc/cmdline - echo ">>>>> check the example kconfig files and cmdline <<<<<" + cat /proc/cmdline + echo "l1tf=off mds=full randomize_kstack_offset=on iommu.passthrough=0" > ./cmdline_example + cat ./cmdline_example CONFIG_DIR=`find . -name config_files` - CONFIGS=`find $CONFIG_DIR -type f | grep "\.config"` + KCONFIGS=`find $CONFIG_DIR -type f | grep "\.config"` COUNT=0 - for C in $CONFIGS + for C in $KCONFIGS do COUNT=$(expr $COUNT + 1) echo -e "\n>>>>> checking config number $COUNT <<<<<" coverage run -a --branch bin/kconfig-hardened-check -c $C coverage run -a --branch bin/kconfig-hardened-check -c $C -m verbose > /dev/null coverage run -a --branch bin/kconfig-hardened-check -c $C -l /proc/cmdline - coverage run -a --branch bin/kconfig-hardened-check -c $C -l /proc/cmdline -m verbose > /dev/null - coverage run -a --branch bin/kconfig-hardened-check -c $C -l /proc/cmdline -m json - coverage run -a --branch bin/kconfig-hardened-check -c $C -l /proc/cmdline -m show_ok - coverage run -a --branch bin/kconfig-hardened-check -c $C -l /proc/cmdline -m show_fail + coverage run -a --branch bin/kconfig-hardened-check -c $C -l ./cmdline_example + coverage run -a --branch bin/kconfig-hardened-check -c $C -l ./cmdline_example -m verbose > /dev/null + coverage run -a --branch bin/kconfig-hardened-check -c $C -l ./cmdline_example -m json + coverage run -a --branch bin/kconfig-hardened-check -c $C -l ./cmdline_example -m show_ok + coverage run -a --branch bin/kconfig-hardened-check -c $C -l ./cmdline_example -m show_fail done echo -e "\n>>>>> checking $COUNT configs is done <<<<<" -- 2.31.1