mirror of
https://gitlab.com/apparmor/apparmor
synced 2025-08-22 10:07:12 +00:00
125 lines
5.8 KiB
Python
125 lines
5.8 KiB
Python
|
#! /usr/bin/env python
|
||
|
# ------------------------------------------------------------------
|
||
|
#
|
||
|
# Copyright (C) 2014 Canonical Ltd.
|
||
|
#
|
||
|
# This program is free software; you can redistribute it and/or
|
||
|
# modify it under the terms of version 2 of the GNU General Public
|
||
|
# License published by the Free Software Foundation.
|
||
|
#
|
||
|
# ------------------------------------------------------------------
|
||
|
|
||
|
import apparmor.aa as aa
|
||
|
import unittest
|
||
|
|
||
|
|
||
|
class AARegexHasComma(unittest.TestCase):
|
||
|
'''Tests for apparmor.aa.RE_RULE_HAS_COMMA'''
|
||
|
|
||
|
def _check(self, line, expected=True):
|
||
|
result = aa.RE_RULE_HAS_COMMA.search(line)
|
||
|
if expected:
|
||
|
self.assertTrue(result, 'Couldn\'t find a comma in "%s"' % line)
|
||
|
else:
|
||
|
self.assertEqual(None, result, 'Found an unexpected comma in "%s"' % line)
|
||
|
|
||
|
regex_has_comma_testcases = [
|
||
|
('dbus send%s', 'simple'),
|
||
|
('dbus (r, w, bind, eavesdrop)%s', 'embedded parens 01'),
|
||
|
('dbus (r, w,, bind, eavesdrop) %s', 'embedded parens 02'),
|
||
|
('dbus (r, w,, ) %s', 'embedded parens 03'),
|
||
|
('dbus () %s', 'empty parens'),
|
||
|
('member={Hello,AddMatch,RemoveMatch,GetNameOwner,NameHasOwner,StartServiceByName} %s ', 'embedded curly braces 01'),
|
||
|
('member={Hello,,,,,,AddMatch,,,NameHasOwner,StartServiceByName} %s ', 'embedded curly braces 02'),
|
||
|
('member={,Hello,,,,,,AddMatch,,,NameHasOwner,} %s ', 'embedded curly braces 03'),
|
||
|
('member={} %s ', 'empty curly braces'),
|
||
|
('dbus send%s# this is a comment', 'comment 01'),
|
||
|
('dbus send%s# this is a comment,', 'comment 02'),
|
||
|
('audit "/tmp/foo, bar" rw%s', 'quotes 01'),
|
||
|
('audit "/tmp/foo, bar" rw%s # comment', 'quotes 02'),
|
||
|
('audit "/tmp/foo, # bar" rw%s', 'comment embedded in quote 01'),
|
||
|
('audit "/tmp/foo, # bar" rw%s # comment', 'comment embedded in quote 02'),
|
||
|
|
||
|
# lifted from parser/tst/simple_tests/vars/vars_alternation_3.sd
|
||
|
('/does/not/@{BAR},exist,notexist} r%s', 'partial alternation')
|
||
|
|
||
|
# the following fail due to inadequacies in the regex
|
||
|
# ('dbus (r, w, %s', 'incomplete dbus action'),
|
||
|
# ('member="{Hello,AddMatch,RemoveMatch, %s', 'incomplete {} regex'), # also invalid policy
|
||
|
# ('member={Hello,AddMatch,RemoveMatch, %s', 'incomplete {} regex'), # also invalid policy when trailing comma exists
|
||
|
|
||
|
# the following passes the tests, but variable declarations are
|
||
|
# odd in that they *don't* allow trailing commas; commas at the end
|
||
|
# of the line need to be quoted.
|
||
|
# ('@{BAR}={bar,baz,blort %s', 'tricksy variable declaration')
|
||
|
# ('@{BAR}="{bar,baz,blort," %s', 'tricksy variable declaration')
|
||
|
# The following fails the no comma test, but is invalid
|
||
|
# ('@{BAR}={bar,baz,blort, %s', 'tricksy variable declaration')
|
||
|
# The following fails the comma test, because it's really a no comma situation
|
||
|
# ('@{BAR}="{bar,baz,blort%s" ', 'tricksy variable declaration')
|
||
|
]
|
||
|
|
||
|
def setup_has_comma_testcases():
|
||
|
i = 0
|
||
|
for (test_string, description) in regex_has_comma_testcases:
|
||
|
i += 1
|
||
|
def stub_test_comma(self, test_string=test_string):
|
||
|
self._check(test_string % ',')
|
||
|
def stub_test_no_comma(self, test_string=test_string):
|
||
|
self._check(test_string % ' ', False)
|
||
|
stub_test_comma.__doc__ = "test %s (w/comma)" % (description)
|
||
|
stub_test_no_comma.__doc__ = "test %s (no comma)" % (description)
|
||
|
setattr(AARegexHasComma, 'test_comma_%d' % (i), stub_test_comma)
|
||
|
setattr(AARegexHasComma, 'test_no_comma_%d' % (i), stub_test_no_comma)
|
||
|
|
||
|
class AARegexSplitComment(unittest.TestCase):
|
||
|
'''Tests for RE_HAS_COMMENT_SPLIT'''
|
||
|
|
||
|
def _check(self, line, expected, comment=None, not_comment=None):
|
||
|
result = aa.RE_HAS_COMMENT_SPLIT.search(line)
|
||
|
if expected:
|
||
|
self.assertTrue(result, 'Couldn\'t find a comment in "%s"' % line)
|
||
|
self.assertEqual(result.group('comment'), comment, 'Expected comment "%s", got "%s"'
|
||
|
% (comment, result.group('comment')))
|
||
|
self.assertEqual(result.group('not_comment'), not_comment, 'Expected not comment "%s", got "%s"'
|
||
|
% (not_comment, result.group('not_comment')))
|
||
|
else:
|
||
|
self.assertEqual(None, result, 'Found an unexpected comment "%s" in "%s"'
|
||
|
% ("" if result is None else result.group('comment'), line ))
|
||
|
|
||
|
# Tuples of (string, expected result), where expected result is False if
|
||
|
# the string should not be considered as having a comment, or a second
|
||
|
# tuple of the not comment and comment sections split apart
|
||
|
regex_split_comment_testcases = [
|
||
|
('dbus send # this is a comment', ('dbus send ', '# this is a comment')),
|
||
|
('dbus send member=no_comment', False),
|
||
|
('dbus send member=no_comment, ', False),
|
||
|
('audit "/tmp/foo, # bar" rw', False),
|
||
|
('audit "/tmp/foo, # bar" rw # comment', ('audit "/tmp/foo, # bar" rw ', '# comment')),
|
||
|
]
|
||
|
|
||
|
def setup_split_comment_testcases():
|
||
|
i = 0
|
||
|
for (test_string, result) in regex_split_comment_testcases:
|
||
|
i += 1
|
||
|
def stub_test(self, test_string=test_string, result=result):
|
||
|
if result is False:
|
||
|
self._check(test_string, False)
|
||
|
else:
|
||
|
self._check(test_string, True, not_comment=result[0], comment=result[1])
|
||
|
stub_test.__doc__ = "test '%s'" % (test_string)
|
||
|
setattr(AARegexSplitComment, 'test_split_comment_%d' % (i), stub_test)
|
||
|
|
||
|
if __name__ == '__main__':
|
||
|
verbosity = 2
|
||
|
|
||
|
setup_has_comma_testcases()
|
||
|
setup_split_comment_testcases()
|
||
|
|
||
|
test_suite = unittest.TestSuite()
|
||
|
test_suite.addTest(unittest.TestLoader().loadTestsFromTestCase(AARegexHasComma))
|
||
|
test_suite.addTest(unittest.TestLoader().loadTestsFromTestCase(AARegexSplitComment))
|
||
|
result = unittest.TextTestRunner(verbosity=verbosity).run(test_suite)
|
||
|
if not result.wasSuccessful():
|
||
|
exit(1)
|