# Copyright 2017 The Chromium OS Authors. All rights reserved.
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.

AUTHOR = "ejcaruso@chromium.org"
NAME = "security_DeviceJail_Filesystem"
PURPOSE = "Verify that the device jail FUSE server is functioning."
TIME = "SHORT"
ATTRIBUTES = "suite:security"
TEST_CATEGORY = "Functional"
TEST_CLASS = "security"
TEST_TYPE = "client"
DOC = """
This test is not applicable if the jail-control device is not present.
This restricts it to 3.14 or later kernels.
Ensures that the only visible character devices in the device jail
FUSE filesystem are explicitly whitelisted ones and USB devices, and
that USB devices are not directly passed through.
"""

job.run_test('security_DeviceJail_Filesystem')