# Copyright 2017 The Chromium OS Authors. All rights reserved.
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.

AUTHOR = "ejcaruso@chromium.org"
NAME = "security_DeviceJail_Lockdown"
PURPOSE = "Verify that the device jail module is functioning."
TIME = "SHORT"
ATTRIBUTES = "suite:security"
TEST_CATEGORY = "Functional"
TEST_CLASS = "security"
TEST_TYPE = "client"
DOC = """
This test is not applicable if the control devices for device jail are
not present. This means the kernel must be 3.14 or later.
The test will fail if it can perform a privileged operation on a jail
device which has been locked down. For example, trying to detach the
kernel driver or talk directly to a driver for a USB device should
not be allowed on these devices.
"""

job.run_test('security_DeviceJail_Lockdown')