2
0
mirror of https://gitlab.com/apparmor/apparmor synced 2025-09-05 16:55:32 +00:00

Test aa_getcon SWIG bindings and leave some comments for untested ones

Signed-off-by: Ryan Lee <ryan.lee@canonical.com>
(cherry picked from commit 369c9e73de)
Signed-off-by: John Johansen <john.johansen@canonical.com>
This commit is contained in:
Ryan Lee
2024-10-03 09:42:09 -07:00
committed by John Johansen
parent ae08d09995
commit e8cb8da296

View File

@@ -98,6 +98,30 @@ class AAPythonBindingsTests(unittest.TestCase):
self.assertGreater(len(mount_point), 0, "mount point should not be empty")
self.assertTrue(os.path.isdir(mount_point))
# TODO: test commented out functions (or at least their prototypes)
# extern int aa_change_hat(const char *subprofile, unsigned long magic_token);
# extern int aa_change_profile(const char *profile);
# extern int aa_change_onexec(const char *profile);
# extern int aa_change_hatv(const char *subprofiles[], unsigned long token);
# extern int aa_stack_profile(const char *profile);
# extern int aa_stack_onexec(const char *profile);
# extern int aa_getprocattr(pid_t tid, const char *attr, char **label, char **mode);
# extern int aa_gettaskcon(pid_t target, char **label, char **mode);
def test_aa_getcon(self):
aa_enabled = libapparmor.aa_is_enabled()
self.assertIsInstance(aa_enabled, bool)
if not aa_enabled:
self.skipTest("AppArmor is not enabled")
# Our test harness should be running us as unconfined
label, mode = libapparmor.aa_getcon()
self.assertEqual(label, "unconfined", "aa_getcon label should be unconfined")
self.assertIsNone(mode, "aa_getcon mode should be unconfined")
# extern int aa_getpeercon(int fd, char **label, char **mode);
class AALogParsePythonBindingsTests(unittest.TestCase):