diff options
| author | Paul Buetow <paul@buetow.org> | 2026-05-30 21:30:39 +0300 |
|---|---|---|
| committer | Paul Buetow <paul@buetow.org> | 2026-05-30 21:30:39 +0300 |
| commit | f91ad2b5b4a17b6237c50a9501658310ab52362f (patch) | |
| tree | 6a9b1c8d4ae4a166c7b5180ac245030531f17654 /internal/generate/testdata.go | |
| parent | cf0fc43651cb6bbf71d8f18a530c177dc7f717dd (diff) | |
test(request_key): lock in keyctl kind, security family, and unclassified return
Audit of request_key(2) found the tracing implementation already
correct and consistent with the man page and the prior keyctl audit
(task 7v): request_key classifies as KindKeyctl/FamilySecurity, the
BPF handler captures option=-2 sentinel and key_serial=dest_keyring
(args[3]) with no path/string capture of the const char *
type/description/callout_info key-metadata args, and the exit returns
a key serial / -1 that stays UNCLASSIFIED.
Strengthen the dedicated TestClassifyRequestKey beyond a bare kind
check to also assert PathnameField stays empty (string args are key
metadata, not paths), family is Security on enter and exit, and the
return is UNCLASSIFIED — bringing it to parity with the add_key
contrast assertion. No code/generated changes; mage generate produces
no diff.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Diffstat (limited to 'internal/generate/testdata.go')
0 files changed, 0 insertions, 0 deletions
