nixos/tests/grsecurity.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19

# Basic test to make sure grsecurity works

import ./make-test.nix ({ pkgs, ...} : {
  name = "grsecurity";
  meta = with pkgs.stdenv.lib.maintainers; {
    maintainers = [ copumpkin ];
  };

  machine = { config, pkgs, ... }:
    { boot.kernelPackages = pkgs.linuxPackages_grsec_testing_server; };

  testScript =
    ''
      $machine->succeed("uname -a") =~ /grsec/;
      # FIXME: this seems to hang the whole test. Unclear why, but let's fix it
      # $machine->succeed("${pkgs.paxtest}/bin/paxtest blackhat");
    '';
})