diff --git a/utils/test/cleanprof_test.in b/utils/test/cleanprof_test.in index 8822b88f1..f55a7b139 100644 --- a/utils/test/cleanprof_test.in +++ b/utils/test/cleanprof_test.in @@ -4,12 +4,32 @@ /usr/bin/a/simple/cleanprof/test/profile { # Just for the heck of it, this comment wont see the day of light #include + + capability sys_admin, + audit capability, + + change_profile -> /bin/foo, + change_profile, + + network inet stream, + network stream, + #Below rule comes from abstractions/base allow /usr/share/X11/locale/** r, allow /home/*/** r, + ptrace tracedby peer=/bin/strace, + ptrace tracedby, unix (receive) type=dgram, + set rlimit nofile <= 256, + set rlimit nofile <= 64, + + signal set=(hup int quit ill trap abrt) + set=(bus,fpe,,,kill,usr1) + set=segv set=usr2 set=pipe set=alrm set=term set=stkflt set=chld, + signal set=(hup int quit), + ^foo { /etc/fstab r, capability dac_override, diff --git a/utils/test/cleanprof_test.out b/utils/test/cleanprof_test.out index c20f6ff4d..83b2f8cec 100644 --- a/utils/test/cleanprof_test.out +++ b/utils/test/cleanprof_test.out @@ -6,11 +6,23 @@ /usr/bin/a/simple/cleanprof/test/profile { #include + set rlimit nofile <= 256, + + audit capability, + + network stream, + + signal set=(abrt alrm bus chld fpe hup ill int kill pipe quit segv stkflt term trap usr1 usr2), + + ptrace tracedby, + unix (receive) type=dgram, /home/*/** r, /home/foo/** w, + change_profile, + ^foo { capability dac_override,