mirror of
https://github.com/jmcorgan/fips.git
synced 2026-10-06 11:38:24 +00:00
The regression test re-runs itself in a child process, and the child selected the test with --ignored. libtest exits 0 when its filter selects nothing, so the parent passed without the test running if the module path changed or the #[ignore] attribute was removed, since --ignored then selects nothing. The child now uses --include-ignored, the parent requires "1 passed" in the child's output, and a failed match on the open result prints the result, which shows the CAP_NET_RAW error from an unprivileged run. The same leak happened whenever the beacon sender reopened its socket after the interface went away: a failed reopen is retried on each later beacon, so a node whose interface was removed and not recreated leaked one descriptor per beacon interval. The changelog entry now says so.