From 8c8d6b4053f76e692b8a3c010d0d56f2a6974cd0 Mon Sep 17 00:00:00 2001
From: Joachim Fasting <joachifm@fastmail.fm>
Date: Sun, 17 Jul 2016 21:38:11 +0200
Subject: grsecurity test: verify that the grsec device node is created

---
 nixos/tests/grsecurity.nix | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

(limited to 'nixos/tests/grsecurity.nix')

diff --git a/nixos/tests/grsecurity.nix b/nixos/tests/grsecurity.nix
index aadbfd8371ff..ed0101621520 100644
--- a/nixos/tests/grsecurity.nix
+++ b/nixos/tests/grsecurity.nix
@@ -9,7 +9,6 @@ import ./make-test.nix ({ pkgs, ...} : {
   machine = { config, pkgs, ... }:
     { security.grsecurity.enable = true;
       boot.kernel.sysctl."kernel.grsecurity.deter_bruteforce" = 0;
-      security.apparmor.enable = true;
     };
 
   testScript = ''
@@ -37,5 +36,9 @@ import ./make-test.nix ({ pkgs, ...} : {
       $machine->execute("echo -e '#include <stdio.h>\nint main(void) { puts(\"hello\"); return 0; }' >main.c");
       $machine->succeed("${pkgs.tinycc.bin}/bin/tcc -run main.c");
     };
+
+    subtest "RBAC", sub {
+      $machine->succeed("[ -c /dev/grsec ]");
+    };
   '';
 })
-- 
cgit 1.4.1