1# Copyright 2017 The Chromium OS Authors. All rights reserved. 2# Use of this source code is governed by a BSD-style license that can be 3# found in the LICENSE file. 4 5AUTHOR = "ejcaruso@chromium.org" 6NAME = "security_DeviceJail_Filesystem" 7PURPOSE = "Verify that the device jail FUSE server is functioning." 8TIME = "SHORT" 9ATTRIBUTES = "suite:security" 10TEST_CATEGORY = "Functional" 11TEST_CLASS = "security" 12TEST_TYPE = "client" 13DOC = """ 14This test is not applicable if the jail-control device is not present. 15This restricts it to 3.14 or later kernels. 16Ensures that the only visible character devices in the device jail 17FUSE filesystem are explicitly whitelisted ones and USB devices, and 18that USB devices are not directly passed through. 19""" 20 21job.run_test('security_DeviceJail_Filesystem') 22