From 034ac59e4b1a8b0eb9e23e390107492214de02f1 Mon Sep 17 00:00:00 2001 From: alice Date: Tue, 1 Sep 2026 22:16:58 +0000 Subject: [PATCH] test(uat): SYSTEM priv string tracks PHY_IO in VMS_PRV_M_ENFORCED (vms-3a7) #1009 (vms-7eb) added VMS_PRV_M_PHY_IO (bit 22) to VMS_PRV_M_ENFORCED and updated the C-level oracle test (tests/qemu/test_syssvc_ident.c:1937) to expect the booted runtime's SYSTEM identity as ...WORLD,MOUNT,PHY_IO" but left the UAT script's IDENT_CURPRIV/AUTHPRIV literals stale at ...WORLD,MOUNT" The UAT literal is DERIVED from that mask (its own comment says so and that it must be updated whenever VMS_PRV_M_ENFORCED changes); the drift red the "VMS User Acceptance Test" leg on main deterministically. Align the two UAT literals to the shipped, oracle-asserted privilege set and extend the derivation comment to record PHY_IO's addition (bit 22, after MOUNT), matching how it already tracks MOUNT (bit 17, vms-651). Tightens the assertion; nothing weakened. Co-Authored-By: Claude Opus 4.8 (1M context) Claude-Session: https://claude.ai/code/session_01PhM3QcmFEY3p8YNnHGaYwP --- tests/uat/vms_session_qemu.sh | 13 +++++++------ 1 file changed, 7 insertions(+), 6 deletions(-) diff --git a/tests/uat/vms_session_qemu.sh b/tests/uat/vms_session_qemu.sh index 6124499dc..f3cba86e5 100755 --- a/tests/uat/vms_session_qemu.sh +++ b/tests/uat/vms_session_qemu.sh @@ -973,12 +973,13 @@ check_response_at "$IDX_PRIORITY_SET" 'NOPRIV' # SYSNAM/GRPNAM (bit positions 2/3, between CMEXEC and SETPRV) joined # VMS_PRV_M_ENFORCED in vms-5b7 (LNM$SYSTEM/LNM$GROUP privilege # enforcement); MOUNT (bit position 17, right after WORLD) joined it in -# vms-651 (cmd_mount/cmd_dismount really gate on it) -- this literal is -# DERIVED from that mask's current definition, not a number owned by this -# test; update it again whenever VMS_PRV_M_ENFORCED (src/kernel/ -# vms_ioctl.h) changes. -check_response 'SHOW SYMBOL IDENT_CURPRIV' 'IDENT_CURPRIV = "CMKRNL,CMEXEC,SYSNAM,GRPNAM,SETPRV,WORLD,MOUNT"' -check_response 'SHOW SYMBOL IDENT_AUTHPRIV' 'IDENT_AUTHPRIV = "CMKRNL,CMEXEC,SYSNAM,GRPNAM,SETPRV,WORLD,MOUNT"' +# vms-651 (cmd_mount/cmd_dismount really gate on it); PHY_IO (bit position +# 22, after MOUNT) joined it in vms-7eb (#1009 -- the executive L2 datalink +# gates opening the SCS socket on PHY_IO) -- this literal is DERIVED from +# that mask's current definition, not a number owned by this test; update it +# again whenever VMS_PRV_M_ENFORCED (src/kernel/vms_ioctl.h) changes. +check_response 'SHOW SYMBOL IDENT_CURPRIV' 'IDENT_CURPRIV = "CMKRNL,CMEXEC,SYSNAM,GRPNAM,SETPRV,WORLD,MOUNT,PHY_IO"' +check_response 'SHOW SYMBOL IDENT_AUTHPRIV' 'IDENT_AUTHPRIV = "CMKRNL,CMEXEC,SYSNAM,GRPNAM,SETPRV,WORLD,MOUNT,PHY_IO"' # SET PROCESS/PRIVILEGES IS NOW WIRED TO THE EXECUTIVE (vms-e5d7). It used to # be a HIDE stub that printed %OVMX-I-NOSETPRV and changed nothing; it now