[LTP] [PATCH 4/4] landlock: add landlock10 test

[Cyril Hrubis]

Hi!
> Verify that landlock's LANDLOCK_SCOPE_SIGNAL rule rejects any
> signal coming from a process on a different domain, but accept
> signals from processes in the same domain.
> 
> Signed-off-by: Andrea Cervesato <andrea.cervesato@suse.com>
> ---
>  testcases/kernel/syscalls/landlock/.gitignore   |   1 +
>  testcases/kernel/syscalls/landlock/landlock10.c | 110 ++++++++++++++++++++++++
>  2 files changed, 111 insertions(+)

Here as well, runtest entry?

> diff --git a/testcases/kernel/syscalls/landlock/.gitignore b/testcases/kernel/syscalls/landlock/.gitignore
> index cda8d871e051ec88abba4634a2bcda4b10470d9f..8c88803df4580605da800c414ada62994b35d268 100644
> --- a/testcases/kernel/syscalls/landlock/.gitignore
> +++ b/testcases/kernel/syscalls/landlock/.gitignore
> @@ -8,3 +8,4 @@ landlock06
>  landlock07
>  landlock08
>  landlock09
> +landlock10
> diff --git a/testcases/kernel/syscalls/landlock/landlock10.c b/testcases/kernel/syscalls/landlock/landlock10.c
> new file mode 100644
> index 0000000000000000000000000000000000000000..572c3dfe35810e2da301aae4b9807bcc55682f91
> --- /dev/null
> +++ b/testcases/kernel/syscalls/landlock/landlock10.c
> @@ -0,0 +1,110 @@
> +// SPDX-License-Identifier: GPL-2.0-or-later
> +/*
> + * Copyright (C) 2025 SUSE LLC Andrea Cervesato <andrea.cervesato@suse.com>
> + */
> +
> +/*\
> + * Verify that landlock's LANDLOCK_SCOPE_SIGNAL rule rejects any signal coming
> + * from a process on a different domain, but accept signals from processes in
> + * the same domain.
> + */
> +
> +#include "tst_test.h"
> +#include "landlock_common.h"
> +
> +static struct tst_landlock_ruleset_attr_abi6 *ruleset_attr;
> +
> +enum {
> +	DOMAIN_PAUSED = 0,
> +	DOMAIN_KILLER,
> +	DOMAIN_BOTH,
> +	DOMAIN_LENGTH,
                ^
		CNT

Otherwise it looks good:

Reviewed-by: Cyril Hrubis <chrubis@suse.cz>

-- 
Cyril Hrubis
chrubis@suse.cz