apparmor/Testing/aa_test.py

import unittest
import sys

sys.path.append('../')
import apparmor.aa

#from apparmor.aa import parse_event

class Test(unittest.TestCase):

    def test_loadinclude(self):
        apparmor.aa.loadincludes()
    
        
    def test_parse_event(self):
        event = 'type=AVC msg=audit(1345027352.096:499): apparmor="ALLOWED" operation="rename_dest" parent=6974 profile="/usr/sbin/httpd2-prefork//vhost_foo" name=2F686F6D652F7777772F666F6F2E6261722E696E2F68747470646F63732F61707061726D6F722F696D616765732F746573742F696D61676520312E6A7067 pid=20143 comm="httpd2-prefork" requested_mask="wc" denied_mask="wc" fsuid=30 ouid=30'
        parsed_event = apparmor.aa.parse_event(event)
        self.assertEqual(parsed_event['name'], '/home/www/foo.bar.in/httpdocs/apparmor/images/test/image 1.jpg', 'Incorrectly parsed/decoded name')
        self.assertEqual(parsed_event['profile'], '/usr/sbin/httpd2-prefork//vhost_foo', 'Incorrectly parsed/decode profile name')
        self.assertEqual(parsed_event['aamode'], 'PERMITTING')
        
        #print(parsed_event)
        
        #event = 'type=AVC msg=audit(1322614912.304:857): apparmor="ALLOWED" operation="getattr" parent=16001 profile=74657374207370616365 name=74657374207370616365 pid=17011 comm="bash" requested_mask="r" denied_mask="r" fsuid=0 ouid=0'
        #parsed_event = apparmor.aa.parse_event(event)
        #print(parsed_event)
        
        event = 'type=AVC msg=audit(1322614918.292:4376): apparmor="ALLOWED" operation="file_perm" parent=16001 profile=666F6F20626172 name="/home/foo/.bash_history" pid=17011 comm="bash" requested_mask="w" denied_mask="w" fsuid=0 ouid=1000'
        parsed_event = apparmor.aa.parse_event(event)
        self.assertEqual(parsed_event['name'], '/home/foo/.bash_history', 'Incorrectly parsed/decoded name')
        self.assertEqual(parsed_event['profile'], 'foo bar', 'Incorrectly parsed/decode profile name')
        self.assertEqual(parsed_event['aamode'], 'PERMITTING')
        
        #print(parsed_event)
        
        
    def test_modes_to_string(self):
        self.assertEqual(apparmor.aa.mode_to_str(32270), 'rwPCUx')
        
        MODE_TEST = {'x': apparmor.aa.AA_MAY_EXEC,
             'w': apparmor.aa.AA_MAY_WRITE,
             'r': apparmor.aa.AA_MAY_READ,
             'a': apparmor.aa.AA_MAY_APPEND,
             'l': apparmor.aa.AA_MAY_LINK,
             'k': apparmor.aa.AA_MAY_LOCK,
             'm': apparmor.aa.AA_EXEC_MMAP,
             'i': apparmor.aa.AA_EXEC_INHERIT,
             'u': apparmor.aa.AA_EXEC_UNCONFINED + apparmor.aa.AA_EXEC_UNSAFE,  # Unconfined + Unsafe
              'U': apparmor.aa.AA_EXEC_UNCONFINED,
              'p': apparmor.aa.AA_EXEC_PROFILE + apparmor.aa.AA_EXEC_UNSAFE,    # Profile + unsafe
              'P': apparmor.aa.AA_EXEC_PROFILE,
              'c': apparmor.aa.AA_EXEC_CHILD + apparmor.aa.AA_EXEC_UNSAFE,  # Child + Unsafe
              'C': apparmor.aa.AA_EXEC_CHILD,
              #'n': AA_EXEC_NT + AA_EXEC_UNSAFE,
              #'N': AA_EXEC_NT
              }
        
        while MODE_TEST:
            string,mode = MODE_TEST.popitem()
            self.assertEqual(apparmor.aa.mode_to_str(mode), string)
            
        mode = 2048
        self.assertEqual(apparmor.aa.mode_to_str(mode), 'C')
        
    def test_string_to_modes(self):

        #self.assertEqual(apparmor.aa.str_to_mode('wc'), 32270)

        MODE_TEST = {'x': apparmor.aa.AA_MAY_EXEC,
             'w': apparmor.aa.AA_MAY_WRITE,
             'r': apparmor.aa.AA_MAY_READ,
             'a': apparmor.aa.AA_MAY_APPEND,
             'l': apparmor.aa.AA_MAY_LINK,
             'k': apparmor.aa.AA_MAY_LOCK,
             'm': apparmor.aa.AA_EXEC_MMAP,
             'i': apparmor.aa.AA_EXEC_INHERIT,
             'u': apparmor.aa.AA_EXEC_UNCONFINED + apparmor.aa.AA_EXEC_UNSAFE,  # Unconfined + Unsafe
              'U': apparmor.aa.AA_EXEC_UNCONFINED,
              'p': apparmor.aa.AA_EXEC_PROFILE + apparmor.aa.AA_EXEC_UNSAFE,    # Profile + unsafe
              'P': apparmor.aa.AA_EXEC_PROFILE,
              'c': apparmor.aa.AA_EXEC_CHILD + apparmor.aa.AA_EXEC_UNSAFE,  # Child + Unsafe
              'C': apparmor.aa.AA_EXEC_CHILD,
              #'n': AA_EXEC_NT + AA_EXEC_UNSAFE,
              #'N': AA_EXEC_NT
              }
        
        #while MODE_TEST:
        #    string,mode = MODE_TEST.popitem()
        #    self.assertEqual(apparmor.aa.str_to_mode(string), mode)
            
        #self.assertEqual(apparmor.aa.str_to_mode('C'), 2048)


if __name__ == "__main__":
    #import sys;sys.argv = ['', 'Test.testName']
    unittest.main()