mir/apparmor
2
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor synced 2025-09-02 07:15:18 +00:00
Code Issues Releases Wiki Activity

tests: Test the getattr permission in unix_socket_client

Browse Source 
The client will now do a getsockname() on its socket in order to test
the AppArmor 'getattr' unix rule permission.

Signed-off-by: Tyler Hicks <tyhicks@canonical.com>
Acked-by: Steve Beattie <steve@nxnw.org>
This commit is contained in:
Tyler Hicks
2014-09-29 18:47:53 -05:00
parent 48a755d471
commit 3368c9bc40
2 changed files with 21 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

19
tests/regression/apparmor/unix_socket_client.c
View File

@@ -139,6 +139,21 @@ static int get_set_sock_io_timeo(int sock)
return 0; return 0;
} }
static int test_getattr(int sock)
{
struct sockaddr_un addr;
socklen_t addr_len = sizeof(addr);
int rc;
rc = getsockname(sock, (struct sockaddr *)&addr, &addr_len);
if (rc == -1) {
perror("FAIL - getsockname");
return 1;
}
return 0;
}
int main(int argc, char *argv[]) int main(int argc, char *argv[])
{ {
struct sockaddr_un peer_addr, *pa; struct sockaddr_un peer_addr, *pa;
@@ -197,6 +212,10 @@ int main(int argc, char *argv[])
if (rc) if (rc)
exit(1); exit(1);
rc = test_getattr(sock);
if (rc)
exit(1);
pa = &peer_addr; pa = &peer_addr;
pa_len = sun_path_len + sizeof(peer_addr.sun_family); pa_len = sun_path_len + sizeof(peer_addr.sun_family);

3
tests/regression/apparmor/unix_socket_pathname.sh
View File

@@ -49,9 +49,10 @@ fi
# af_unix support requires 'unix create' to call socket() # af_unix support requires 'unix create' to call socket()
# af_unix support requires 'unix getopt' to call getsockopt() # af_unix support requires 'unix getopt' to call getsockopt()
# af_unix support requires 'unix setopt' to call setsockopt() # af_unix support requires 'unix setopt' to call setsockopt()
# af_unix support requires 'unix getattr' to call getsockname()
af_unix= af_unix=
if [ "$(have_features network/af_unix)" == "true" ] ; then if [ "$(have_features network/af_unix)" == "true" ] ; then
af_unix="unix:(create,getopt,setopt)" af_unix="unix:(create,getopt,setopt,getattr)"
fi fi
okclient=rw okclient=rw