[apparmor] [PATCH 4/4] parser: Add DFA minimization test that mimics D-Bus abstractions
Tyler Hicks
tyhicks at canonical.com
Fri Jan 3 22:26:53 UTC 2014
This test ensures that the proper DFA minimization occurs when a
permissive D-Bus abstraction #include's the corresponding strict
abstraction.
Signed-off-by: Tyler Hicks <tyhicks at canonical.com>
---
parser/tst/equality.sh | 10 ++++++++++
1 file changed, 10 insertions(+)
diff --git a/parser/tst/equality.sh b/parser/tst/equality.sh
index c022927..34b1443 100755
--- a/parser/tst/equality.sh
+++ b/parser/tst/equality.sh
@@ -215,6 +215,16 @@ verify_binary_equality "dbus minimization with a deny modifier" \
"/t { deny dbus send bus=system peer=(name=com.foo), }" \
"/t { deny dbus send bus=system peer=(name=com.foo label=/usr/bin/foo), deny dbus send bus=system peer=(name=com.foo), }" \
+verify_binary_equality "dbus minimization found in dbus abstractions" \
+ "/t { dbus send bus=session, }" \
+ "/t { dbus send
+ bus=session
+ path=/org/freedesktop/DBus
+ interface=org.freedesktop.DBus
+ member={Hello,AddMatch,RemoveMatch,GetNameOwner,NameHasOwner,StartServiceByName}
+ peer=(name=org.freedesktop.DBus),
+ dbus send bus=session, }"
+
if [ $fails -ne 0 -o $errors -ne 0 ]
then
printf "ERRORS: %d\nFAILS: %d\n" $errors $fails 2>&1
--
1.8.3.2
More information about the AppArmor
mailing list