diff options
| author | Paul Meyer <49727155+katexochen@users.noreply.github.com> | 2023-11-13 22:03:57 +0100 |
|---|---|---|
| committer | Paul Meyer <49727155+katexochen@users.noreply.github.com> | 2023-11-13 22:13:07 +0100 |
| commit | a503c9757cf9e8f66aa0a29bbeeab59c6bce7836 (patch) | |
| tree | 4ef1d640c2ae0c2e5df8527def7b4a0db16f596a /pkgs/os-specific | |
| parent | a58a8909a1a15b50013530ff54e1a66b66daf5d4 (diff) | |
| download | nixpkgs-a503c9757cf9e8f66aa0a29bbeeab59c6bce7836.tar nixpkgs-a503c9757cf9e8f66aa0a29bbeeab59c6bce7836.tar.gz nixpkgs-a503c9757cf9e8f66aa0a29bbeeab59c6bce7836.tar.bz2 nixpkgs-a503c9757cf9e8f66aa0a29bbeeab59c6bce7836.tar.lz nixpkgs-a503c9757cf9e8f66aa0a29bbeeab59c6bce7836.tar.xz nixpkgs-a503c9757cf9e8f66aa0a29bbeeab59c6bce7836.tar.zst nixpkgs-a503c9757cf9e8f66aa0a29bbeeab59c6bce7836.zip | |
checksec: add tests
Diffstat (limited to 'pkgs/os-specific')
| -rw-r--r-- | pkgs/os-specific/linux/checksec/default.nix | 22 |
1 files changed, 22 insertions, 0 deletions
diff --git a/pkgs/os-specific/linux/checksec/default.nix b/pkgs/os-specific/linux/checksec/default.nix index 74b73e1e933..07574722cd2 100644 --- a/pkgs/os-specific/linux/checksec/default.nix +++ b/pkgs/os-specific/linux/checksec/default.nix @@ -3,6 +3,8 @@ , fetchpatch , fetchFromGitHub , makeWrapper +, testers +, runCommand # dependencies , binutils @@ -20,6 +22,9 @@ , sysctl , wget , which + + # tests +, checksec }: stdenv.mkDerivation rec { @@ -37,6 +42,11 @@ stdenv.mkDerivation rec { ./0001-attempt-to-modprobe-config-before-checking-kernel.patch # Tool would sanitize the environment, removing the PATH set by our wrapper. ./0002-don-t-sanatize-the-environment.patch + # Fix the exit code of debug_report command. Check if PR 226 was merged when upgrading version. + (fetchpatch { + url = "https://github.com/slimm609/checksec.sh/commit/851ebff6972f122fde5507f1883e268bbff1f23d.patch"; + hash = "sha256-DOcVF+oPGIR9VSbqE+EqWlcNANEvou1gV8qBvJLGLBE="; + }) ]; nativeBuildInputs = [ @@ -73,6 +83,18 @@ stdenv.mkDerivation rec { --prefix PATH : ${path} ''; + passthru.tests = { + version = testers.testVersion { + package = checksec; + version = "v${version}"; + }; + debug-report = runCommand "debug-report" { buildInputs = [ checksec ]; } '' + checksec --debug_report || exit 1 + echo "OK" + touch $out + ''; + }; + meta = with lib; { description = "Tool for checking security bits on executables"; homepage = "https://www.trapkit.de/tools/checksec/"; |