Changes in commoncap_test.c

c17ee635fd3a482b2ad2bf5e269755c2eae5f25e - Merge drm/drm-fixes into drm-misc-fixes

Mon, 23 Feb 2026 09:09:45 +0000

Merge drm/drm-fixes into drm-misc-fixes7.0-rc1 was just released, let's merge it to kick the new release cycle.Signed-off-by: Maxime Ripard List of files: /linux/security/commoncap_test.c

6179d7a630c2747e2a9329149de2a7aa67a95978 - Merge tag 'caps-pr-20260213' of git://git.kernel.org/pub/scm/linux/kernel/git/sergeh/linux

Sat, 14 Feb 2026 19:30:05 +0000

Merge tag 'caps-pr-20260213' of git://git.kernel.org/pub/scm/linux/kernel/git/sergeh/linuxPull capabilities updates from Serge Hallyn: - add KUnit tests for some core capabilities helpers - avoid emitting IPC audit messages when there's not actually a permission being denied* tag 'caps-pr-20260213' of git://git.kernel.org/pub/scm/linux/kernel/git/sergeh/linux: ipc: don't audit capability check in ipc_permissions() security: Add KUnit tests for kuid_root_in_ns and vfsuid_root_in_currentns List of files: /linux/security/commoncap_test.c

24e9b431b5837bc9d2cf2c2fde4abf507e2fae19 - security: Add KUnit tests for kuid_root_in_ns and vfsuid_root_in_currentns

Wed, 07 Jan 2026 21:51:28 +0000

security: Add KUnit tests for kuid_root_in_ns and vfsuid_root_in_currentnsAdd comprehensive KUnit tests for the namespace-related capabilityfunctions that Serge Hallyn refactored in commit 9891d2f79a9f("Clarify the rootid_owns_currentns").The tests verify:- Basic functionality: UID 0 in init namespace, invalid vfsuid, non-zero UIDs- Actual namespace traversal: Creating user namespaces with different UID mappings where uid 0 maps to different kuids (e.g., 1000, 2000, 3000)- Hierarchy traversal: Testing multiple nested namespaces to verify correct namespace hierarchy traversalThis addresses the feedback to "test the actual functionality" bycreating real user namespaces with different values for thenamespace's uid 0, rather than just basic input validation.The test file is included at the end of commoncap.c whenCONFIG_SECURITY_COMMONCAP_KUNIT_TEST is enabled, following thestandard kernel pattern (e.g., scsi_lib.c, ext4/mballoc.c). Thisallows tests to access static functions in the same compilation unitwithout modifying production code based on test configuration.The tests require CONFIG_USER_NS to be enabled since they rely on usernamespace mapping functionality. The Kconfig dependency ensures thetests only build when this requirement is met.All 7 tests pass:- test_vfsuid_root_in_currentns_init_ns- test_vfsuid_root_in_currentns_invalid- test_vfsuid_root_in_currentns_nonzero- test_kuid_root_in_ns_init_ns_uid0- test_kuid_root_in_ns_init_ns_nonzero- test_kuid_root_in_ns_with_mapping- test_kuid_root_in_ns_with_different_mappingsUpdated MAINTAINER capabilities to include commoncap testSigned-off-by: Ryan Foster Signed-off-by: Serge Hallyn List of files: /linux/security/commoncap_test.c