// apparmor.d - Full set of apparmor profiles // Copyright (C) 2023-2024 Alexandre Pujol // SPDX-License-Identifier: GPL-2.0-only package util import ( "reflect" "regexp" "testing" ) func TestDecodeHexInString(t *testing.T) { tests := []struct { name string str string want string }{ { name: "Hexa", str: `apparmor="ALLOWED" operation="rename_dest" parent=6974 profile="/usr/sbin/httpd2-prefork//vhost_foo" name=2F686F6D652F7777772F666F6F2E6261722E696E2F68747470646F63732F61707061726D6F722F696D616765732F746573742F696D61676520312E6A7067 pid=20143 comm="httpd2-prefork" requested_mask="wc"`, want: `apparmor="ALLOWED" operation="rename_dest" parent=6974 profile="/usr/sbin/httpd2-prefork//vhost_foo" name="/home/www/foo.bar.in/httpdocs/apparmor/images/test/image 1.jpg" pid=20143 comm="httpd2-prefork" requested_mask="wc"`, }, { name: "Not Hexa", str: `type=AVC msg=audit(1424425690.883:716630): apparmor="ALLOWED" operation="file_mmap" info="Failed name lookup - disconnected path" error=-13 profile="/sbin/klogd" name="var/run/nscd/passwd" pid=25333 comm="id" requested_mask="r" denied_mask="r" fsuid=1002 ouid=0`, want: `type=AVC msg=audit(1424425690.883:716630): apparmor="ALLOWED" operation="file_mmap" info="Failed name lookup - disconnected path" error=-13 profile="/sbin/klogd" name="var/run/nscd/passwd" pid=25333 comm="id" requested_mask="r" denied_mask="r" fsuid=1002 ouid=0`, }, } for _, tt := range tests { t.Run(tt.name, func(t *testing.T) { if got := DecodeHexInString(tt.str); got != tt.want { t.Errorf("DecodeHexInString() = %v, want %v", got, tt.want) } }) } } func TestRemoveDuplicate(t *testing.T) { tests := []struct { name string inlist []string want []string }{ { name: "Duplicate", inlist: []string{"foo", "bar", "foo", "bar", ""}, want: []string{"foo", "bar"}, }, } for _, tt := range tests { t.Run(tt.name, func(t *testing.T) { if got := RemoveDuplicate(tt.inlist); !reflect.DeepEqual(got, tt.want) { t.Errorf("RemoveDuplicate() = %v, want %v", got, tt.want) } }) } } func TestToRegexRepl(t *testing.T) { tests := []struct { name string in []string want []RegexRepl }{ { name: "", in: []string{ "^/foo/bar", "/foo/bar", "^/foo/bar", "/foo/bar", }, want: []RegexRepl{ {Regex: regexp.MustCompile("^/foo/bar"), Repl: "/foo/bar"}, {Regex: regexp.MustCompile("^/foo/bar"), Repl: "/foo/bar"}, }, }, } for _, tt := range tests { t.Run(tt.name, func(t *testing.T) { if got := ToRegexRepl(tt.in); !reflect.DeepEqual(got, tt.want) { t.Errorf("ToRegexRepl() = %v, want %v", got, tt.want) } }) } }