mirror of
https://github.com/roddhjav/apparmor.d.git
synced 2024-11-15 07:54:17 +01:00
89abbae6bd
Improve go apparmor lib. * aa: (62 commits) feat(aa): handle appending value to defined variables. chore(aa): cosmetic. fix: userspace prebuild test. chore: cleanup unit test. feat(aa): improve log conversion. feat(aa): move conversion function to its own file & add unit tests. fix: go linter issue & not defined variables. tests(aa): improve aa unit tests. tests(aa): improve rules unit tests. feat(aa): ensure the prebuild jobs are working. feat(aa): add more unit tests. chore(aa): cleanup. feat(aa): Move sort, merge and format methods to the rules interface. feat(aa): add the hat template. feat(aa): add the Kind struct to manage aa rules. feat(aa): cleanup rules methods. feat(aa): add function to resolve include preamble. feat(aa): updaqte mount flags order. feat(aa): update default tunable selection. feat(aa): parse apparmor preamble files. ...
83 lines
1.8 KiB
Go
83 lines
1.8 KiB
Go
// apparmor.d - Full set of apparmor profiles
|
|
// Copyright (C) 2021-2024 Alexandre Pujol <alexandre@pujol.io>
|
|
// SPDX-License-Identifier: GPL-2.0-only
|
|
|
|
package directive
|
|
|
|
import (
|
|
"testing"
|
|
|
|
"github.com/roddhjav/apparmor.d/pkg/paths"
|
|
"github.com/roddhjav/apparmor.d/pkg/prebuild/cfg"
|
|
)
|
|
|
|
func TestStack_Apply(t *testing.T) {
|
|
tests := []struct {
|
|
name string
|
|
rootApparmord *paths.Path
|
|
opt *Option
|
|
profile string
|
|
want string
|
|
wantErr bool
|
|
}{
|
|
{
|
|
name: "stack",
|
|
rootApparmord: paths.New("../../../apparmor.d/groups/freedesktop/"),
|
|
opt: &Option{
|
|
Name: "stack",
|
|
ArgMap: map[string]string{"plymouth": ""},
|
|
ArgList: []string{"plymouth"},
|
|
File: nil,
|
|
Raw: " #aa:stack plymouth",
|
|
},
|
|
profile: `
|
|
profile parent @{exec_path} {
|
|
include <abstractions/base>
|
|
|
|
@{exec_path} mr,
|
|
|
|
#aa:stack plymouth
|
|
@{bin}/plymouth rPx -> parent//&plymouth,
|
|
|
|
@{PROC}/cmdline r,
|
|
|
|
include if exists <local/parent>
|
|
}`,
|
|
want: `
|
|
profile parent @{exec_path} {
|
|
include <abstractions/base>
|
|
|
|
@{exec_path} mr,
|
|
|
|
|
|
@{bin}/plymouth rPx -> parent//&plymouth,
|
|
|
|
@{PROC}/cmdline r,
|
|
|
|
# Stacked profile: plymouth
|
|
include <abstractions/fonts>
|
|
include <abstractions/fontconfig-cache-read>
|
|
include <abstractions/consoles>
|
|
unix (send, receive, connect) type=stream peer=(addr="@/org/freedesktop/plymouthd"),
|
|
@{PROC}/cmdline r,
|
|
include if exists <local/plymouth>
|
|
|
|
include if exists <local/parent>
|
|
}`,
|
|
},
|
|
}
|
|
for _, tt := range tests {
|
|
t.Run(tt.name, func(t *testing.T) {
|
|
cfg.RootApparmord = tt.rootApparmord
|
|
got, err := Directives["stack"].Apply(tt.opt, tt.profile)
|
|
if (err != nil) != tt.wantErr {
|
|
t.Errorf("Stack.Apply() error = %v, wantErr %v", err, tt.wantErr)
|
|
return
|
|
}
|
|
if got != tt.want {
|
|
t.Errorf("Stack.Apply() = %v, want %v", got, tt.want)
|
|
}
|
|
})
|
|
}
|
|
}
|