Enforce causal child acquisition boundaries
This commit is contained in:
parent
1468f6b841
commit
6f722ce079
1 changed files with 603 additions and 146 deletions
|
|
@ -27,7 +27,7 @@ NEXTEST_COMMAND = (
|
|||
"--all-features",
|
||||
"--locked",
|
||||
"--filterset",
|
||||
"not binary(capability-drop-helper)",
|
||||
"not binary(capability-drop-helper) and not binary(acquisition)",
|
||||
)
|
||||
DOCTEST_COMMAND = (
|
||||
"cargo",
|
||||
|
|
@ -48,6 +48,16 @@ CAPABILITY_TEST_COMMAND = (
|
|||
"capability-drop-helper",
|
||||
"--locked",
|
||||
)
|
||||
ACQUISITION_TEST_COMMAND = (
|
||||
"cargo",
|
||||
"test",
|
||||
"--offline",
|
||||
"-p",
|
||||
"lazaret-linux",
|
||||
"--test",
|
||||
"acquisition",
|
||||
"--locked",
|
||||
)
|
||||
REQUIRED_TOOL_VERSIONS = (
|
||||
("rustc", ("--version",), (0,), re.compile(r"^rustc 1\.90\.0 ")),
|
||||
("cargo", ("--version",), (0,), re.compile(r"^cargo 1\.90\.0 ")),
|
||||
|
|
@ -107,6 +117,10 @@ PROCESS_LINT_ALLOWANCES = {
|
|||
"append_to",
|
||||
"send_signal",
|
||||
"acquire",
|
||||
"private_role_command",
|
||||
"require_reapable_sigchld",
|
||||
"cleanup_sigchld_probe",
|
||||
"fail_sigchld_probe",
|
||||
"reap",
|
||||
"acquire_spawned_child",
|
||||
"verify_direct_child_pidfd",
|
||||
|
|
@ -118,8 +132,14 @@ PROCESS_LINT_ALLOWANCES = {
|
|||
"exec_target",
|
||||
},
|
||||
"crates/lazaret-linux/tests/acquisition.rs": {
|
||||
"inherited_barrier_refuses_eof_partial_and_malformed_release",
|
||||
"foreign_non_child_pidfd_is_refused_without_action",
|
||||
"run_acquisition",
|
||||
"successful_acquisition",
|
||||
"failed_stages_and_acknowledgments",
|
||||
"production_wrapper_refuses_former_harness_path",
|
||||
"malformed_barriers_refuse",
|
||||
"sa_nocldwait_refuses",
|
||||
"foreign_non_child_refuses",
|
||||
"concurrent_acquisitions_serialize",
|
||||
},
|
||||
"crates/lazaret-linux/tests/capability-drop-helper.rs": {"main"},
|
||||
}
|
||||
|
|
@ -480,6 +500,7 @@ def refresh_advisories() -> None:
|
|||
|
||||
def run_rust_tests() -> None:
|
||||
run(list(NEXTEST_COMMAND))
|
||||
run(list(ACQUISITION_TEST_COMMAND))
|
||||
run(list(CAPABILITY_TEST_COMMAND))
|
||||
run(list(DOCTEST_COMMAND))
|
||||
|
||||
|
|
|
|||
Loading…
Reference in a new issue