Configure vm.mmap_rnd_bits for test containers

iotivity · Mar 14, 2024 · ec2eb79 · ec2eb79
1 parent d888ea5
commit ec2eb79
Show file tree

Hide file tree

Showing 3 changed files with 13 additions and 1 deletion.
diff --git a/.github/workflows/plgd-device-test-with-cfg.yml b/.github/workflows/plgd-device-test-with-cfg.yml
@@ -59,6 +59,12 @@ jobs:
         with:
           submodules: "true"
 
+      - name: Configure vm.mmap_rnd_bits for sanitizers
+        if: contains(inputs.build_args, 'OC_ASAN_ENABLED') || contains(inputs.build_args, 'OC_LSAN_ENABLED') || contains(inputs.build_args, 'OC_TSAN_ENABLED') || contains(inputs.build_args, 'OC_UBSAN_ENABLED')
+        run: |
+          sudo sysctl vm.mmap_rnd_bits
+          sudo sysctl -w vm.mmap_rnd_bits=28
+
       - name: Build cloud server docker image
         uses: docker/build-push-action@v5
         with:

diff --git a/.github/workflows/plgd-hub-test-with-cfg.yml b/.github/workflows/plgd-hub-test-with-cfg.yml
@@ -75,6 +75,12 @@ jobs:
         with:
           submodules: "true"
 
+      - name: Configure vm.mmap_rnd_bits for sanitizers
+        if: contains(inputs.build_args, 'OC_ASAN_ENABLED') || contains(inputs.build_args, 'OC_LSAN_ENABLED') || contains(inputs.build_args, 'OC_TSAN_ENABLED') || contains(inputs.build_args, 'OC_UBSAN_ENABLED')
+        run: |
+          sudo sysctl vm.mmap_rnd_bits
+          sudo sysctl -w vm.mmap_rnd_bits=28
+
       - name: Build cloud server docker image
         uses: docker/build-push-action@v5
         with:

diff --git a/sonar-project.properties b/sonar-project.properties
@@ -8,7 +8,7 @@ sonar.organization=iotivity-lite
 # Path is relative to the sonar-project.properties file. Replace "\" by "/" on Windows.
 #sonar.sources=.
 # TODO: Java, Python, HTML, JavaScript and CSS are disabled until a maintainer is found
-sonar.exclusions=apps/**,deps/**,docker/**,patches/**,tests/**,tools/**,**/*.java,**/*.py,**/*.html,**/*.js,**/*.css
+sonar.exclusions=apps/**,deps/**,patches/**,tests/**,tools/**,**/*.java,**/*.py,**/*.html,**/*.js,**/*.css
 
 # Encoding of the source code. Default is default system encoding
 #sonar.sourceEncoding=UTF-8