mirror of
https://github.com/netdata/libbpf.git
synced 2026-04-05 08:09:07 +08:00
ci: update blacklists and Kconfig
Disable some of newest selftests on 5.5.0, turn on BPF_LSM on latest. Signed-off-by: Andrii Nakryiko <andriin@fb.com>
This commit is contained in:
committed by
Andrii Nakryiko
parent
9a35753b42
commit
97ada10bd8
@@ -1,20 +1,26 @@
|
|||||||
# PERMANENTLY DISABLED
|
# PERMANENTLY DISABLED
|
||||||
bpf_tcp_ca # STRUCT_OPS is missing
|
bpf_tcp_ca # STRUCT_OPS is missing
|
||||||
cgroup_attach_multi # BPF_F_REPLACE_PROG missing
|
cgroup_attach_multi # BPF_F_REPLACE_PROG missing
|
||||||
|
cgroup_link # LINK_CREATE is missing
|
||||||
fentry_fexit # bpf_prog_test_tracing missing
|
fentry_fexit # bpf_prog_test_tracing missing
|
||||||
fentry_test # bpf_prog_test_tracing missing
|
fentry_test # bpf_prog_test_tracing missing
|
||||||
fexit_bpf2bpf # freplace is missing
|
fexit_bpf2bpf # freplace is missing
|
||||||
fexit_test # bpf_prog_test_tracing missing
|
fexit_test # bpf_prog_test_tracing missing
|
||||||
|
get_stack_raw_tp # exercising BPF verifier bug causing infinite loop
|
||||||
link_pinning # bpf_link is missing
|
link_pinning # bpf_link is missing
|
||||||
modify_return # fmod_ret is missing
|
modify_return # fmod_ret is missing
|
||||||
ns_current_pid_tgid # bpf_get_ns_current_pid_tgid() helper is missing
|
ns_current_pid_tgid # bpf_get_ns_current_pid_tgid() helper is missing
|
||||||
perf_branches # bpf_read_branch_records() helper is missing
|
perf_branches # bpf_read_branch_records() helper is missing
|
||||||
select_reuseport # UDP support is missing
|
select_reuseport # UDP support is missing
|
||||||
|
sk_assign # bpf_sk_assign helper missing
|
||||||
sockmap_listen # no listen socket supportin SOCKMAP
|
sockmap_listen # no listen socket supportin SOCKMAP
|
||||||
skb_ctx # ctx_{size, }_{in, out} in BPF_PROG_TEST_RUN is missing
|
skb_ctx # ctx_{size, }_{in, out} in BPF_PROG_TEST_RUN is missing
|
||||||
test_global_funcs # kernel doesn't support BTF linkage=global on FUNCs
|
test_global_funcs # kernel doesn't support BTF linkage=global on FUNCs
|
||||||
|
test_lsm # no BPF_LSM support
|
||||||
vmlinux # hrtimer_nanosleep() signature changed incompatibly
|
vmlinux # hrtimer_nanosleep() signature changed incompatibly
|
||||||
|
xdp_attach # IFLA_XDP_EXPECTED_FD support is missing
|
||||||
xdp_bpf2bpf # freplace is missing
|
xdp_bpf2bpf # freplace is missing
|
||||||
|
|
||||||
|
|
||||||
# TEMPORARILY DISABLED
|
# TEMPORARILY DISABLED
|
||||||
send_signal # flaky
|
send_signal # flaky
|
||||||
|
|||||||
@@ -1,2 +1,4 @@
|
|||||||
# TEMPORARILY DISABLED
|
# TEMPORARILY DISABLED
|
||||||
send_signal # flaky
|
send_signal # flaky
|
||||||
|
test_lsm # semi-working
|
||||||
|
sk_assign # needs better setup in Travis CI
|
||||||
|
|||||||
@@ -2372,7 +2372,10 @@ CONFIG_IMA_MEASURE_ASYMMETRIC_KEYS=y
|
|||||||
CONFIG_IMA_QUEUE_EARLY_BOOT_KEYS=y
|
CONFIG_IMA_QUEUE_EARLY_BOOT_KEYS=y
|
||||||
# CONFIG_EVM is not set
|
# CONFIG_EVM is not set
|
||||||
CONFIG_DEFAULT_SECURITY_DAC=y
|
CONFIG_DEFAULT_SECURITY_DAC=y
|
||||||
CONFIG_LSM="selinux"
|
CONFIG_LSM="selinux,bpf"
|
||||||
|
CONFIG_BPF_LSM=y
|
||||||
|
CONFIG_AUDIT=y
|
||||||
|
CONFIG_SECURITY_SELINUX=y
|
||||||
|
|
||||||
#
|
#
|
||||||
# Kernel hardening options
|
# Kernel hardening options
|
||||||
|
|||||||
Reference in New Issue
Block a user