mirrors/apparmor
1
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor.git synced 2025-03-04 08:24:42 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

test-libapparmor-test_multi.py: test for known-empty log

Browse source 
Add a check to logfile_to_profile() that checks the parsed log against a
list of input logs (log_to_profile_known_empty_log) that produce an
empty output.
This commit is contained in:
Christian Boltz 2018-10-01 20:49:42 +02:00
parent 63cb46d20a
commit cf33ec99fc
Failed to generate hash of commit
1 changed files with 20 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

20
utils/test/test-libapparmor-test_multi.py
View file

@ -186,6 +186,18 @@ log_to_profile_skip = [
'testcase_changehat_01', # interactive, asks to add a hat
]
# tests that cause an empty log
log_to_profile_known_empty_log = [
'change_onexec_lp1648143', # change_onexec not supported in logparser.py yet (and the log is about "no new privs" error)
'testcase_changeprofile_01', # change_profile not supported in logparser.py yet
'testcase_mount_01', # mount rules not supported in logparser
'testcase_pivotroot_01', # pivotroot not yet supported in logparser
'ptrace_garbage_lp1689667_1', # no denied= in log
'ptrace_no_denied_mask', # no denied= in log
'testcase_dmesg_changeprofile_01', # change_profile not yet supported in logparser
'unconfined-change_hat', # unconfined trying to change_hat, which isn't allowed
]
class TestLogToProfile(AATest):
'''Check if the libraries/libapparmor/testsuite/test_multi tests result in the expected profile'''
@ -260,6 +272,14 @@ def logfile_to_profile(logfile):
apparmor.aa.filelist = apparmor.aa.hasher()
apparmor.aa.filelist[profile_dummy_file]['profiles'][profile] = True
if logfile.split('/')[-1][:-3] in log_to_profile_known_empty_log:
# unfortunately this function might be called outside Unittest.TestCase, therefore we can't use assertEqual / assertNotEqual
if log != []:
raise Exception('got non-empty log for logfile in log_to_profile_known_empty_log: %s %s' % (logfile, log))
else:
if log == []:
raise Exception('got empty log for logfile not in log_to_profile_known_empty_log: %s %s' % (logfile, log))
new_profile = apparmor.aa.serialize_profile(log_dict[aamode][profile], profile, {})
return profile, new_profile