From 88138d43fa3a07bc99d29c857b69730165d8f403 Mon Sep 17 00:00:00 2001
From: Joachim Fasting <joachifm@fastmail.fm>
Date: Sat, 23 Jul 2016 02:29:09 +0200
Subject: grsecurity test: add note explaining what the tcc -run test
 accomplishes

---
 nixos/tests/grsecurity.nix | 2 ++
 1 file changed, 2 insertions(+)

(limited to 'nixos/tests/grsecurity.nix')

diff --git a/nixos/tests/grsecurity.nix b/nixos/tests/grsecurity.nix
index ed0101621520..e585a7402d34 100644
--- a/nixos/tests/grsecurity.nix
+++ b/nixos/tests/grsecurity.nix
@@ -32,6 +32,8 @@ import ./make-test.nix ({ pkgs, ...} : {
       $machine->succeed("${pkgs.paxtest}/lib/paxtest/mprotstack") =~ /Killed/ or die;
     };
 
+    # tcc -run executes run-time generated code and so allows us to test whether
+    # paxmark actually works (otherwise, the process should be terminated)
     subtest "tcc", sub {
       $machine->execute("echo -e '#include <stdio.h>\nint main(void) { puts(\"hello\"); return 0; }' >main.c");
       $machine->succeed("${pkgs.tinycc.bin}/bin/tcc -run main.c");
-- 
cgit 1.4.1