From d50851ec9964fb6e1135cdbcf2032fa9d5266216 Mon Sep 17 00:00:00 2001 From: Alexander Popov Date: Mon, 12 Jun 2023 17:59:50 +0300 Subject: [PATCH] Add functional tests for --generate Refers to #67. --- .github/workflows/functional_test.sh | 14 +++++++++++++- 1 file changed, 13 insertions(+), 1 deletion(-) diff --git a/.github/workflows/functional_test.sh b/.github/workflows/functional_test.sh index d9b9b37..8d74748 100644 --- a/.github/workflows/functional_test.sh +++ b/.github/workflows/functional_test.sh @@ -12,7 +12,7 @@ coverage run -a --branch bin/kconfig-hardened-check -h echo ">>>>> get version <<<<<" coverage run -a --branch bin/kconfig-hardened-check --version -echo ">>>>> print the security hardening preferences <<<<<" +echo ">>>>> print the security hardening recommendations <<<<<" coverage run -a --branch bin/kconfig-hardened-check -p X86_64 coverage run -a --branch bin/kconfig-hardened-check -p X86_64 -m verbose coverage run -a --branch bin/kconfig-hardened-check -p X86_64 -m json @@ -29,6 +29,12 @@ coverage run -a --branch bin/kconfig-hardened-check -p ARM coverage run -a --branch bin/kconfig-hardened-check -p ARM -m verbose coverage run -a --branch bin/kconfig-hardened-check -p ARM -m json +echo ">>>>> generate the Kconfig fragment <<<<<" +coverage run -a --branch bin/kconfig-hardened-check -g X86_64 +coverage run -a --branch bin/kconfig-hardened-check -g X86_32 +coverage run -a --branch bin/kconfig-hardened-check -g ARM64 +coverage run -a --branch bin/kconfig-hardened-check -g ARM + echo ">>>>> check the example kconfig files and cmdline <<<<<" cat /proc/cmdline echo "l1tf=off mds=full randomize_kstack_offset=on iommu.passthrough=0" > ./cmdline_example @@ -62,6 +68,12 @@ echo ">>>>> wrong modes for -p <<<<<" echo ">>>>> -p and -c together <<<<<" ! coverage run -a --branch bin/kconfig-hardened-check -p X86_64 -c kconfig_hardened_check/config_files/distros/fedora_34.config +echo ">>>>> wrong mode for -g <<<<<" +! coverage run -a --branch bin/kconfig-hardened-check -g X86_64 -m show_ok + +echo ">>>>> -g and -c together <<<<<" +! coverage run -a --branch bin/kconfig-hardened-check -g X86_64 -c kconfig_hardened_check/config_files/distros/fedora_34.config + cp kconfig_hardened_check/config_files/distros/fedora_34.config ./test.config echo ">>>>> no kernel version <<<<<" -- 2.31.1