| # Copyright 2017 The Chromium OS Authors. All rights reserved. |
| # Use of this source code is governed by a BSD-style license that can be |
| # found in the LICENSE file. |
| |
| AUTHOR = "ejcaruso@chromium.org" |
| NAME = "security_DeviceJail_Lockdown" |
| PURPOSE = "Verify that the device jail module is functioning." |
| TIME = "SHORT" |
| ATTRIBUTES = "suite:security" |
| TEST_CATEGORY = "Functional" |
| TEST_CLASS = "security" |
| TEST_TYPE = "client" |
| DOC = """ |
| This test is not applicable if the control devices for device jail are |
| not present. This means the kernel must be 3.14 or later. |
| The test will fail if it can perform a privileged operation on a jail |
| device which has been locked down. For example, trying to detach the |
| kernel driver or talk directly to a driver for a USB device should |
| not be allowed on these devices. |
| """ |
| |
| job.run_test('security_DeviceJail_Lockdown') |
