mirror of
https://gitlab.com/apparmor/apparmor.git
synced 2025-03-04 08:24:42 +01:00
Add explicit test for parser priority-based carveouts
These are marked as expected fail due to a bug in the parser's priority handling. Signed-off-by: Ryan Lee <ryan.lee@canonical.com>
This commit is contained in:
parent
53e322b755
commit
7b5f4c0d6f
1 changed files with 21 additions and 0 deletions
|
@ -891,6 +891,27 @@ else
|
||||||
features_file=$default_features_file
|
features_file=$default_features_file
|
||||||
fi
|
fi
|
||||||
|
|
||||||
|
# Equality tests that set explicit priority level
|
||||||
|
# TODO: priority handling for file paths is currently broken
|
||||||
|
|
||||||
|
# This test is not actually correct due to two subtle interactions:
|
||||||
|
# - /* is special-cased to expand to /[^/\x00]+ with at least one character
|
||||||
|
# - Quieting of [^a] in the DFA is different and cannot be manually fixed
|
||||||
|
|
||||||
|
#verify_binary_xequality "file rule carveout regex vs priority" \
|
||||||
|
# "/t { deny /[^a]* rwxlk, /a r, }" \
|
||||||
|
# "/t { priority=-1 deny /* rwxlk, /a r, }" \
|
||||||
|
|
||||||
|
# Not grouping all three together because parser correctly handles
|
||||||
|
# the equivalence of carveout regex and default audit deny
|
||||||
|
verify_binary_xequality "file rule carveout regex vs priority (audit)" \
|
||||||
|
"/t { audit deny /[^a]* rwxlk, /a r, }" \
|
||||||
|
"/t { priority=-1 audit deny /* rwxlk, /a r, }" \
|
||||||
|
|
||||||
|
verify_binary_xequality "file rule default audit deny vs audit priority carveout" \
|
||||||
|
"/t { /a r, }" \
|
||||||
|
"/t { priority=-1 audit deny /* rwxlk, /a r, }" \
|
||||||
|
|
||||||
# verify combinations of different priority levels
|
# verify combinations of different priority levels
|
||||||
# for single rule comparisons, rules should keep same expected result
|
# for single rule comparisons, rules should keep same expected result
|
||||||
# even when the priorities are different.
|
# even when the priorities are different.
|
||||||
|
|
Loading…
Add table
Reference in a new issue