mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2025-03-04 06:34:43 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions 1
apparmor.d/docs/development/tests.md
Alexandre Pujol fa6c37a7ab
doc: update integration tests section.
2025-03-01 16:04:18 +01:00

1.6 KiB
Raw Blame History

title
Overview

Misconfigured AppArmor profiles is one of the most effective ways to break someone's system. This section present the various tests applied to the profiles as well as their current stage of deployment.

Current

  • Build: make

    • Build the profiles for all supported distributions.
    • All CI jobs validate the profiles syntax and ensure they can be safely loaded into a kernel.
    • Ensure the profile entry point (@{exec_path}) is defined.

  • Checks: make check checks basic style of profiles:

    • Ensure apparmor.d header & licence
    • Ensure 2 spaces indentation
    • Ensure local include for profile and subprofiles
    • Ensure abi 4 is used
    • Ensure modern profile naming
    • Ensure vim:syntax=apparmor

  • Integration Tests: make integration

    • Run simple CLI commands to ensure no logs are raised.
    • Uses the bats test system.
    • Run in the Github Action as well as in all local test VM.

Plan

For more complex software suite, more integration tests need to be done. The plan is to run existing integration suite from these very software in an environment with apparmor.d profiles.