2
0
mirror of https://gitlab.com/apparmor/apparmor synced 2025-09-02 15:25:27 +00:00

libapparmor tests: add userns denied logs

Signed-off-by: Georgia Garcia <georgia.garcia@canonical.com>
This commit is contained in:
Georgia Garcia
2022-10-27 17:28:14 +00:00
parent 5cc7a26e78
commit e492eb34b1
5 changed files with 20 additions and 0 deletions

View File

@@ -0,0 +1 @@
[ 176.385388] audit: type=1400 audit(1666891380.570:78): apparmor="DENIED" operation="userns_create" class="namespace" profile="/usr/bin/userns_child_exec" pid=1785 comm="userns_child_ex" requested="userns_create" denied="userns_create"

View File

@@ -0,0 +1,13 @@
START
File: testcase_userns_01.in
Event type: AA_RECORD_DENIED
Audit ID: 1666891380.570:78
Operation: userns_create
Mask: userns_create
Denied Mask: userns_create
Profile: /usr/bin/userns_child_exec
Command: userns_child_ex
PID: 1785
Class: namespace
Epoch: 1666891380
Audit subid: 78

View File

@@ -0,0 +1,4 @@
/usr/bin/userns_child_exec {
userns create,
}

View File

@@ -170,6 +170,8 @@ log_to_profile_skip = [
'testcase_changehat_01', # interactive, asks to add a hat
'testcase_dbus_09', # multiline log not currently supported
'testcase_userns_01', # userns currently not supported
]
# tests that cause an empty log