1# Copyright (c) 2010 The Chromium OS Authors. All rights reserved. 2# Use of this source code is governed by a BSD-style license that can be 3# found in the LICENSE file. 4 5TIME="SHORT" 6AUTHOR = "The Chromium OS Authors" 7DOC = """ 8Enforces a whitelist of known, allowed setuid/gid binaries on the system 9""" 10NAME = "security_SuidBinaries" 11PURPOSE = "To maintain a minimal set of setuid/gid binaries on the system" 12CRITERIA = """ 13Fail if the list of setuid/gid binaries doesn't match the baseline 14""" 15ATTRIBUTES = "suite:bvt-inline, suite:smoke" 16TEST_CLASS = "security" 17TEST_CATEGORY = "Functional" 18TEST_TYPE = "client" 19JOB_RETRIES = 2 20 21job.run_test("security_SuidBinaries", baseline='suid', tag='suid') 22job.run_test("security_SuidBinaries", baseline='sgid', tag='sgid') 23job.run_test("security_SuidBinaries", baseline='fscap', tag='fscap') 24