mirror of
https://gitlab.com/apparmor/apparmor.git
synced 2025-03-04 08:24:42 +01:00
add missing tests
This commit is contained in:
John Johansen
parent
ecf6b55baf
commit
831f2e252c
8 changed files with 308 additions and 0 deletions
155
parser/tst/simple_tests/cap_set_ok1.sd
Normal file
155
parser/tst/simple_tests/cap_set_ok1.sd
Normal file
|
|
@ -0,0 +1,155 @@
|
|||
#
|
||||
# $Id: capabilities_ok.sd 211 2006-11-08 10:59:09Z steve-beattie $
|
||||
#=DESCRIPTION validate some uses of capabilties.
|
||||
#=EXRESULT PASS
|
||||
# vim:syntax=subdomain
|
||||
# Last Modified: Sun Apr 17 19:44:44 2005
|
||||
#
|
||||
/does/not/exist {
|
||||
set capability chown,
|
||||
set capability dac_override,
|
||||
set capability dac_read_search,
|
||||
set capability fowner,
|
||||
set capability fsetid,
|
||||
set capability kill,
|
||||
set capability setgid,
|
||||
set capability setuid,
|
||||
set capability setpcap,
|
||||
set capability linux_immutable,
|
||||
set capability net_bind_service,
|
||||
set capability net_broadcast,
|
||||
set capability net_admin,
|
||||
set capability net_raw,
|
||||
set capability ipc_lock,
|
||||
set capability ipc_owner,
|
||||
set capability sys_module,
|
||||
set capability sys_rawio,
|
||||
set capability sys_chroot,
|
||||
set capability sys_ptrace,
|
||||
set capability sys_pacct,
|
||||
set capability sys_admin,
|
||||
set capability sys_boot,
|
||||
set capability sys_nice,
|
||||
set capability sys_resource,
|
||||
set capability sys_time,
|
||||
set capability sys_tty_config,
|
||||
set capability mknod,
|
||||
set capability lease,
|
||||
set capability audit_write,
|
||||
set capability audit_control,
|
||||
}
|
||||
|
||||
/does/not/exist2 {
|
||||
^chown {
|
||||
set capability chown,
|
||||
}
|
||||
^dac_override {
|
||||
set capability dac_override,
|
||||
}
|
||||
^dac_read_search {
|
||||
set capability dac_read_search,
|
||||
}
|
||||
^fowner {
|
||||
set capability fowner,
|
||||
}
|
||||
^fsetid {
|
||||
set capability fsetid,
|
||||
}
|
||||
^kill {
|
||||
set capability kill,
|
||||
}
|
||||
^setgid {
|
||||
set capability setgid,
|
||||
}
|
||||
^setuid {
|
||||
set capability setuid,
|
||||
}
|
||||
^setpcap {
|
||||
set capability setpcap,
|
||||
}
|
||||
^linux_immutable {
|
||||
set capability linux_immutable,
|
||||
}
|
||||
^net_bind_service {
|
||||
set capability net_bind_service,
|
||||
}
|
||||
^net_broadcast {
|
||||
set capability net_broadcast,
|
||||
}
|
||||
^net_admin {
|
||||
set capability net_admin,
|
||||
}
|
||||
^net_raw {
|
||||
set capability net_raw,
|
||||
}
|
||||
^ipc_lock {
|
||||
set capability ipc_lock,
|
||||
}
|
||||
^ipc_owner {
|
||||
set capability ipc_owner,
|
||||
}
|
||||
^sys_module {
|
||||
set capability sys_module,
|
||||
}
|
||||
^sys_rawio {
|
||||
set capability sys_rawio,
|
||||
}
|
||||
^sys_chroot {
|
||||
set capability sys_chroot,
|
||||
}
|
||||
^sys_ptrace {
|
||||
set capability sys_ptrace,
|
||||
}
|
||||
^sys_pacct {
|
||||
set capability sys_pacct,
|
||||
}
|
||||
^sys_admin {
|
||||
set capability sys_admin,
|
||||
}
|
||||
^sys_boot {
|
||||
set capability sys_boot,
|
||||
}
|
||||
^sys_nice {
|
||||
set capability sys_nice,
|
||||
}
|
||||
^sys_resource {
|
||||
set capability sys_resource,
|
||||
}
|
||||
^sys_time {
|
||||
set capability sys_time,
|
||||
}
|
||||
^sys_tty_config {
|
||||
set capability sys_tty_config,
|
||||
}
|
||||
^mknod {
|
||||
set capability mknod,
|
||||
}
|
||||
^lease {
|
||||
set capability lease,
|
||||
}
|
||||
^audit_write {
|
||||
set capability audit_write,
|
||||
}
|
||||
^audit_control {
|
||||
set capability audit_control,
|
||||
}
|
||||
}
|
||||
|
||||
# Test for duplicates?
|
||||
/does/not/exist3 {
|
||||
set capability mknod,
|
||||
set capability mknod,
|
||||
}
|
||||
|
||||
/does/not/exit101 {
|
||||
set capability chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control,
|
||||
|
||||
}
|
||||
|
||||
/does/not/exit102 {
|
||||
set capability chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control,
|
||||
|
||||
set capability chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control,
|
||||
|
||||
}
|
||||
|
||||
15
parser/tst/simple_tests/profile_bad1.sd
Normal file
15
parser/tst/simple_tests/profile_bad1.sd
Normal file
|
|
@ -0,0 +1,15 @@
|
|||
#
|
||||
# $Id: profile_ns_ok2.sd 81 2006-08-04 18:14:49Z jrjohansen $
|
||||
#=DESCRIPTION unattached profile without profile keyword
|
||||
#=EXRESULT FAIL
|
||||
# vim:syntax=subdomain
|
||||
# Last Modified: Sun Apr 17 19:44:44 2005
|
||||
#
|
||||
unattached {
|
||||
/usr/X11R6/lib/lib*so* rrr,
|
||||
/does/not/exist r,
|
||||
/var/log/messages www,
|
||||
/tmp/sd*.foo rwrwwrll,
|
||||
/bin/cat pxpxpxpxpx,
|
||||
/bin/ls ixixixix,
|
||||
}
|
||||
18
parser/tst/simple_tests/profile_basic_ok2.sd
Normal file
18
parser/tst/simple_tests/profile_basic_ok2.sd
Normal file
|
|
@ -0,0 +1,18 @@
|
|||
#
|
||||
# $Id: profile_basic_ok1.sd 81 2006-08-04 18:14:49Z jrjohansen $
|
||||
#=DESCRIPTION Basic parsing test, unattached profile
|
||||
#=EXRESULT PASS
|
||||
# vim:syntax=subdomain
|
||||
# Last Modified: Sun Apr 17 19:44:44 2005
|
||||
#
|
||||
profile notattached {
|
||||
#include <includes/base>
|
||||
|
||||
/usr/X11R6/lib/lib*so* rrr,
|
||||
/does/not/exist r,
|
||||
/var/log/messages www,
|
||||
/tmp/sd*.foo rwrwwrll,
|
||||
/bin/cat pxpxpxpxpx,
|
||||
/bin/ls ixixixix,
|
||||
/bin/echo uxuxuxuxux,
|
||||
}
|
||||
18
parser/tst/simple_tests/profile_ns_bad2.sd
Normal file
18
parser/tst/simple_tests/profile_ns_bad2.sd
Normal file
|
|
@ -0,0 +1,18 @@
|
|||
#
|
||||
# $Id: profile_ns_bad1.sd 81 2006-08-04 18:14:49Z jrjohansen $
|
||||
#=DESCRIPTION collision same profile, same namespace
|
||||
#=EXRESULT FAIL
|
||||
# vim:syntax=subdomain
|
||||
# Last Modified: Sun Apr 17 19:44:44 2005
|
||||
#
|
||||
foo:/does/not/exist {
|
||||
#include <includes/base>
|
||||
|
||||
/usr/X11R6/lib/lib*so* rrr,
|
||||
/does/not/exist r,
|
||||
/var/log/messages www,
|
||||
/tmp/sd*.foo rwrwwrll,
|
||||
/bin/cat pxpxpxpxpx,
|
||||
/bin/ls ixixixix,
|
||||
/bin/echo uxuxuxuxux,
|
||||
}
|
||||
18
parser/tst/simple_tests/profile_ns_bad3.sd
Normal file
18
parser/tst/simple_tests/profile_ns_bad3.sd
Normal file
|
|
@ -0,0 +1,18 @@
|
|||
#
|
||||
# $Id: profile_ns_bad1.sd 81 2006-08-04 18:14:49Z jrjohansen $
|
||||
#=DESCRIPTION collision same profile, same namespace
|
||||
#=EXRESULT FAIL
|
||||
# vim:syntax=subdomain
|
||||
# Last Modified: Sun Apr 17 19:44:44 2005
|
||||
#
|
||||
:/does/not/exist {
|
||||
#include <includes/base>
|
||||
|
||||
/usr/X11R6/lib/lib*so* rrr,
|
||||
/does/not/exist r,
|
||||
/var/log/messages www,
|
||||
/tmp/sd*.foo rwrwwrll,
|
||||
/bin/cat pxpxpxpxpx,
|
||||
/bin/ls ixixixix,
|
||||
/bin/echo uxuxuxuxux,
|
||||
}
|
||||
18
parser/tst/simple_tests/profile_ns_bad4.sd
Normal file
18
parser/tst/simple_tests/profile_ns_bad4.sd
Normal file
|
|
@ -0,0 +1,18 @@
|
|||
#
|
||||
# $Id: profile_ns_bad1.sd 81 2006-08-04 18:14:49Z jrjohansen $
|
||||
#=DESCRIPTION collision same profile, same namespace
|
||||
#=EXRESULT FAIL
|
||||
# vim:syntax=subdomain
|
||||
# Last Modified: Sun Apr 17 19:44:44 2005
|
||||
#
|
||||
::/does/not/exist {
|
||||
#include <includes/base>
|
||||
|
||||
/usr/X11R6/lib/lib*so* rrr,
|
||||
/does/not/exist r,
|
||||
/var/log/messages www,
|
||||
/tmp/sd*.foo rwrwwrll,
|
||||
/bin/cat pxpxpxpxpx,
|
||||
/bin/ls ixixixix,
|
||||
/bin/echo uxuxuxuxux,
|
||||
}
|
||||
33
parser/tst/simple_tests/profile_ns_ok3.sd
Normal file
33
parser/tst/simple_tests/profile_ns_ok3.sd
Normal file
|
|
@ -0,0 +1,33 @@
|
|||
#
|
||||
# $Id: profile_ns_ok2.sd 81 2006-08-04 18:14:49Z jrjohansen $
|
||||
#=DESCRIPTION same unattached profile different namespaces test, duplicate mode bits
|
||||
#=EXRESULT PASS
|
||||
# vim:syntax=subdomain
|
||||
# Last Modified: Sun Apr 17 19:44:44 2005
|
||||
#
|
||||
profile unattached {
|
||||
/usr/X11R6/lib/lib*so* rrr,
|
||||
/does/not/exist r,
|
||||
/var/log/messages www,
|
||||
/tmp/sd*.foo rwrwwrll,
|
||||
/bin/cat pxpxpxpxpx,
|
||||
/bin/ls ixixixix,
|
||||
}
|
||||
|
||||
:foo:unattached {
|
||||
/usr/X11R6/lib/lib*so* rrr,
|
||||
/does/not/exist r,
|
||||
/var/log/messages www,
|
||||
/tmp/sd*.foo rwrwwrll,
|
||||
/bin/cat pxpxpxpxpx,
|
||||
/bin/ls ixixixix,
|
||||
}
|
||||
|
||||
:bar:unattached {
|
||||
/usr/X11R6/lib/lib*so* rrr,
|
||||
/does/not/exist r,
|
||||
/var/log/messages www,
|
||||
/tmp/sd*.foo rwrwwrll,
|
||||
/bin/cat pxpxpxpxpx,
|
||||
/bin/ls ixixixix,
|
||||
}
|
||||
33
parser/tst/simple_tests/profile_ns_ok4.sd
Normal file
33
parser/tst/simple_tests/profile_ns_ok4.sd
Normal file
|
|
@ -0,0 +1,33 @@
|
|||
#
|
||||
# $Id: profile_ns_ok2.sd 81 2006-08-04 18:14:49Z jrjohansen $
|
||||
#=DESCRIPTION same unattached profile different namespaces test, duplicate mode bits
|
||||
#=EXRESULT PASS
|
||||
# vim:syntax=subdomain
|
||||
# Last Modified: Sun Apr 17 19:44:44 2005
|
||||
#
|
||||
profile unattached {
|
||||
/usr/X11R6/lib/lib*so* rrr,
|
||||
/does/not/exist r,
|
||||
/var/log/messages www,
|
||||
/tmp/sd*.foo rwrwwrll,
|
||||
/bin/cat pxpxpxpxpx,
|
||||
/bin/ls ixixixix,
|
||||
}
|
||||
|
||||
profile :foo:unattached {
|
||||
/usr/X11R6/lib/lib*so* rrr,
|
||||
/does/not/exist r,
|
||||
/var/log/messages www,
|
||||
/tmp/sd*.foo rwrwwrll,
|
||||
/bin/cat pxpxpxpxpx,
|
||||
/bin/ls ixixixix,
|
||||
}
|
||||
|
||||
profile :bar:unattached {
|
||||
/usr/X11R6/lib/lib*so* rrr,
|
||||
/does/not/exist r,
|
||||
/var/log/messages www,
|
||||
/tmp/sd*.foo rwrwwrll,
|
||||
/bin/cat pxpxpxpxpx,
|
||||
/bin/ls ixixixix,
|
||||
}
|
||||
Loading…
Add table
Reference in a new issue