[apparmor] query_label regression test failures
tyhicks at canonical.com
Thu Jun 25 21:30:46 UTC 2015
On 2015-06-25 13:55:47, Tyler Hicks wrote:
> On 2015-06-25 01:21:39, Steve Beattie wrote:
> > Hi,
> > When running the apparmor regression tests on wily with the trunk of
> > the userspace tools, I'm getting the following two failures in the
> > query_label test:
> > Error: query_label failed. Test 'QUERY file (all base perms #1)' was expected to 'pass'. Reason for failure 'FAIL: the access should not be allowed and should be audited'
> > Error: query_label failed. Test 'QUERY file (all base perms #2)' was expected to 'pass'. Reason for failure 'FAIL: the access should not be allowed and should be audited'
> Note that the test passes when we run them against the wily apparmor
> userspace (2.9.2-0ubuntu1). Seems to be something broken specifically in
The tests start failing after r3081:
That patch defined values for AA_MAY_* perms, in apparmor.h, related to
The query_label.c binary already defined many of the macros:
The problem is that the new macros in apparmor.h do not match the old
macros in query_label.c. Which ones are correct? I assume that the
apparmor.h ones are correct but would like confirmation before I go
modify the query_label.c test program.
> > Does anyone know what's going wrong here? I haven't dug into when
> > they started failing. Running against the stock trusty generates a
> > half-dozen failures on this test.
> > --
> > Steve Beattie
> > <sbeattie at ubuntu.com>
> > http://NxNW.org/~steve/
> > --
> > AppArmor mailing list
> > AppArmor at lists.ubuntu.com
> > Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/apparmor
> AppArmor mailing list
> AppArmor at lists.ubuntu.com
> Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/apparmor
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 819 bytes
Desc: Digital signature
More information about the AppArmor