Commit graph

295 commits

Author SHA1 Message Date
John Johansen
e981282bd4 add tests for mediate of the creation of the symlink link file. Remove the patch from for-mainline since it is no longer necessary 2007-03-23 17:31:32 +00:00
Matt Barringer
19efd07a71 Fixed formatting. 2007-03-22 20:42:36 +00:00
Matt Barringer
371f984e09 Initial checkin of the netdomain test suite. It requires
dejagnu (which, in turn, requires tcl).
2007-03-21 22:27:37 +00:00
Steve Beattie
a39a3b0410 Add tests to openat to test what names apparmor sees when a rename
occurs between the open(dir) and openat(file) calls.
2007-03-14 19:53:10 +00:00
Steve Beattie
94d4ac649e Fixup the openat.sh test as well. 2007-03-13 22:10:45 +00:00
Steve Beattie
063bb1b26e Fix up some of the patches after I messed them up by incorporating some of their changes. 2007-03-13 18:27:21 +00:00
Steve Beattie
30a2252adf Add some basic tests for openat(). Need to add tests that delete the
opened directory before the openat() call occurs.
2007-03-13 11:57:36 +00:00
Steve Beattie
3f32351793 Misc cleanups. 2007-03-13 11:32:04 +00:00
Steve Beattie
7b391f3d5c Add a testcase to verify when clone() is allowed. 2007-03-08 23:40:10 +00:00
Steve Beattie
b0733fb3a4 Based on a patch from jjohansen@suse.de, does s/constrained/confined/ in
comments and descriptions. A later patch will fix it for the few
testcases that actually check the value in /proc/pid/attr/current.
2007-03-08 21:23:17 +00:00
Steve Beattie
19235e440a Patch by jjohansen@suse.de: fix the syscall_chroot test to work even
when chroot pathnames are reported against the namespace root instead of
the chroot root.
2007-03-08 21:00:12 +00:00
John Johansen
b787d8ac21 Patches against test suite to match the for-mainline branch 2007-03-08 17:15:12 +00:00
Steve Beattie
23f05801f6 Add testcases for fchmod/fchown and clean up some formatting in the
original chmod/chown tests.
2007-03-08 00:09:47 +00:00
Steve Beattie
ad542aba23 Add a test for cap net_bind_service w/tcp. Alas, this test is still
disabled.
2007-03-07 18:54:28 +00:00
Steve Beattie
beac286a5c Run fork.c through lindent. 2007-03-06 20:13:31 +00:00
Steve Beattie
065b7bf660 Add a couple of testcases to the hardlink test. 2007-02-28 17:39:53 +00:00
Steve Beattie
57761032f9 Add a timeout to work around ptrace(PTRACE_SYSCALL) on a parent attached
ptrace() call never waking the child process on RHEL5 beta 2. Also did
some minor code formatting cleanup.
2007-01-08 12:08:08 +00:00
John Johansen
9d6ce46f3b fix changehat tests to work with the new ECHILD error code returned by the module when a changehat is attempted against a profile with no hats 2007-01-05 21:14:59 +00:00
Steve Beattie
eddd069354 jjohanen pointed out that our regression tests were not compiling on
the openSUSE 10.2 RC candidates. This is because the _syscallN macros
are (apparently) no longer user visible. This patch replaces uses of
_syscallN() in the regression test source with invocations of syscall(2),
the preferred linux kernel way of doing things. With this patch, our
regression tests compile on the openSUSE 10.2 candidates as well as older
distributions (tested as far back as slackware 10.0, which includes a
2.4.x kernel).

(A missing license header got added as well as some minor coding style
cleanups leaked into the patch as well.)
2006-12-04 06:43:42 +00:00
John Johansen
508d8e1da7 add audit_write and audit_control to the list of capabilities tested against, for current regression tests. This does not extend the regression suite to test the audit_write and audit_control capabilities 2006-11-08 10:46:49 +00:00
John Johansen
d2c636b859 regression tests for changehat returning eperm when an application is unconfined and tries to do a changehat 2006-10-24 22:15:32 +00:00
John Johansen
e813acfd50 fix a small race condition where is_done is set before the thread is actually done. 2006-10-18 21:12:30 +00:00
Steve Beattie
0961fb5a5b This checkin fixes the environ.sh to work on 64bit systems (with /lib64/
directories). It also disables the longpath test (after locking up
another machine from running it), but adds a 'make alltests' target
which will run all the tests plus that one (and any others defined in
the RISKY_TESTS variable.)
2006-09-15 22:39:59 +00:00
Steve Beattie
16ede09541 Fix a tyop and add corresponding profile names for other error
conditions.
2006-09-13 20:06:16 +00:00
Steve Beattie
e291f9933e Add a user tunable setting to add arguments to the parser invocations,
if necessary.  Currently used to suppress warnings about unsafe/unfiltered
environment 'u' exec transitions. 

[Corresponds to rev 6415 in the old svn repo]
2006-09-13 18:40:52 +00:00
Steve Beattie
c59d7489be [This commit corresponds to revs 6425 and 6429 in the old svn repo]
This commit adds a test that checks to see if exec unconfined -->
confined requires any access to the binary being run confined. Current
behavior is that it does not.
2006-09-12 22:22:51 +00:00
Steve Beattie
5bc7850467 Convert the struct expected by ptrace.c to be struct user from
asm-xxx/user.h rather than struct user_regs_struct, as we had a report
that that wasn't available on some arches.
2006-09-12 20:57:29 +00:00
Steve Beattie
76cbeb9892 [This corresponds to commits 6414, 6415, 6417, 6422, 6423, and 6424 in
the old svn tree.]

This patch adds tests to verify the environment filtering done in the Px
and Ux cases. It tests the environment from both an elf executable and
from a shell script. Also verifies that with the apparmor module loaded,
environment filtering on setuid apps still happens.
2006-09-12 05:55:31 +00:00
John Johansen
39adc91bbb fix xattr regression test. variable perm was being modified as a side affect of called functions so it was passing the wrong perm to the tests. 2006-08-04 22:39:16 +00:00
John Johansen
5c2fe819d8 fix prologue.inc previous patch was broken in porting so that profiles could not be generated 2006-08-04 21:27:38 +00:00
John Johansen
7f1df42d3e update regresssion test prologue.inc for m flag 2006-08-04 17:19:41 +00:00
John Johansen
2e0cfb276d add longpath test 2006-08-04 17:18:41 +00:00
John Johansen
313c2a35ec This patch adds m support to the regression tests 2006-08-04 17:15:41 +00:00
Dominic Reynolds
3b35618ccb remove test changes. 2006-07-31 19:45:49 +00:00
Dominic Reynolds
82811e139e Testing. 2006-07-31 19:38:28 +00:00
forgeuser2
f3acd28ceb Testing. 2006-07-31 19:36:31 +00:00
forgeuser2
b6f3dee92c Test. 2006-07-31 19:31:00 +00:00
forgeuser2
352a6c9584 Testing again. 2006-07-31 19:29:44 +00:00
forgeuser2
e0a5dd6758 A test commit 2006-07-31 19:24:07 +00:00
Steve Beattie
4db9519e28 Fix up warning on 64bit platforms 2006-06-21 04:55:48 +00:00
Steve Beattie
b1d35ce262 Set svn:keyword attributes on everything, kill Makefile rule for
ptrace_helper.c so that it gets the default compilation rules.
2006-05-19 17:32:14 +00:00
Steve Beattie
92c9c8732d [This commit is taken from commits 6391, 6401, and 6402 of the internal tree.]
tonyj:
- Verify long path (d_path) error checking. (6391)
- Better ptrace tests. (6401)
- Confined mount tests require cap_sys_admin to even get to the confined
  checks. (6402)
2006-05-19 16:50:17 +00:00
Steve Beattie
16ce411178 [https://bugzilla.novell.com/show_bug.cgi?id=165177]
XFS appears to be more strict than the Linux vfs layer wrt whether a
process can chgrp a file when it's not the owner but still in the same
group -- XFS doesn't allow it and requires CAP_FOWNER instead.

This fix rorders the tests so that the chgrp operations occur before the
chown operations happen, avoiding the difference in requirements between
XFS and linux's vfs.
2006-04-14 18:11:55 +00:00
Steve Beattie
bc9d0ee80b MOve the parser regression tests to the parser package itself. 2006-04-13 20:38:37 +00:00
Steve Beattie
6d3e74907d Import the rest of the core functionality of the internal apparmor
development tree (trunk branch). From svn repo version 6381.
2006-04-11 21:52:54 +00:00