cockpit
cockpit copied to clipboard
Add a test for namespace tampering
The xz-utils attack involved an ELF library that parsed and modified the global offset table of the OpenSSH server during the runtime linking phase of startup.
I have developed a tool that examines the global offset table of a Linux process to look for signs of similar tampering, and I am adding tests to a variety of Fedora packages to run the tool in order to alert maintainers if a similar attack is detected in the future. (For example: https://src.fedoraproject.org/tests/nginx/pull-request/5)
I'd like to add that tests to cockpit, but I could use some feedback because the arrangement of tests for the Fedora package are a little unusual. Most of the tests I've added have been straightforward: tmt and beakerlib. But the tests for cockpit instead run the test suite from the upstream project.
Would you prefer that I re-write the test and open a PR here in the github project, or should I add the test to Fedora's test repo?
If I contribute the test here on GitHub, which test directory makes the most sense to you? Is a Python test script preferred?
Thanks for any guidance you can provide.