[apparmor] [PATCH 4/4] parser: Add DFA minimization test that mimics D-Bus abstractions

Tyler Hicks tyhicks at canonical.com
Fri Jan 3 22:26:53 UTC 2014


This test ensures that the proper DFA minimization occurs when a
permissive D-Bus abstraction #include's the corresponding strict
abstraction.

Signed-off-by: Tyler Hicks <tyhicks at canonical.com>
---
 parser/tst/equality.sh | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/parser/tst/equality.sh b/parser/tst/equality.sh
index c022927..34b1443 100755
--- a/parser/tst/equality.sh
+++ b/parser/tst/equality.sh
@@ -215,6 +215,16 @@ verify_binary_equality "dbus minimization with a deny modifier" \
 	"/t { deny dbus send bus=system peer=(name=com.foo), }" \
 	"/t { deny dbus send bus=system peer=(name=com.foo label=/usr/bin/foo), deny dbus send bus=system peer=(name=com.foo), }" \
 
+verify_binary_equality "dbus minimization found in dbus abstractions" \
+	"/t { dbus send bus=session, }" \
+	"/t { dbus send
+                   bus=session
+                   path=/org/freedesktop/DBus
+                   interface=org.freedesktop.DBus
+                   member={Hello,AddMatch,RemoveMatch,GetNameOwner,NameHasOwner,StartServiceByName}
+                   peer=(name=org.freedesktop.DBus),
+	      dbus send bus=session, }"
+
 if [ $fails -ne 0 -o $errors -ne 0 ]
 then
 	printf "ERRORS: %d\nFAILS: %d\n" $errors $fails 2>&1
-- 
1.8.3.2




More information about the AppArmor mailing list