cockpit icon indicating copy to clipboard operation
cockpit copied to clipboard

Add a test for namespace tampering

Open gordonmessmer opened this issue 6 months ago • 1 comments

The xz-utils attack involved an ELF library that parsed and modified the global offset table of the OpenSSH server during the runtime linking phase of startup.

I have developed a tool that examines the global offset table of a Linux process to look for signs of similar tampering, and I am adding tests to a variety of Fedora packages to run the tool in order to alert maintainers if a similar attack is detected in the future. (For example: https://src.fedoraproject.org/tests/nginx/pull-request/5)

I'd like to add that tests to cockpit, but I could use some feedback because the arrangement of tests for the Fedora package are a little unusual. Most of the tests I've added have been straightforward: tmt and beakerlib. But the tests for cockpit instead run the test suite from the upstream project.

Would you prefer that I re-write the test and open a PR here in the github project, or should I add the test to Fedora's test repo?

If I contribute the test here on GitHub, which test directory makes the most sense to you? Is a Python test script preferred?

Thanks for any guidance you can provide.

gordonmessmer avatar Aug 02 '24 01:08 gordonmessmer