256 lines
9.6 KiB
Bash
Executable File
256 lines
9.6 KiB
Bash
Executable File
#!/bin/bash
|
|
# vim: dict+=/usr/share/beakerlib/dictionary.vim cpt=.,w,b,u,t,i,k
|
|
# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
#
|
|
# runtest.sh of /CoreOS/libsemanage/Sanity/semanage-seuser-functions
|
|
# Description: Test semanage_seuser_* functions
|
|
# Author: Jan Zarsky <jzarsky@redhat.com>
|
|
#
|
|
# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
#
|
|
# Copyright (c) 2017 Red Hat, Inc.
|
|
#
|
|
# This program is free software: you can redistribute it and/or
|
|
# modify it under the terms of the GNU General Public License as
|
|
# published by the Free Software Foundation, either version 2 of
|
|
# the License, or (at your option) any later version.
|
|
#
|
|
# This program is distributed in the hope that it will be
|
|
# useful, but WITHOUT ANY WARRANTY; without even the implied
|
|
# warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR
|
|
# PURPOSE. See the GNU General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU General Public License
|
|
# along with this program. If not, see http://www.gnu.org/licenses/.
|
|
#
|
|
# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
|
|
# Include Beaker environment
|
|
. /usr/bin/rhts-environment.sh || exit 1
|
|
. /usr/share/beakerlib/beakerlib.sh || exit 1
|
|
|
|
PACKAGE="libsemanage"
|
|
|
|
rlJournalStart
|
|
rlPhaseStartSetup
|
|
rlAssertRpm ${PACKAGE}
|
|
rlAssertRpm ${PACKAGE}-devel
|
|
rlAssertRpm "glibc"
|
|
rlAssertRpm "gcc"
|
|
|
|
for f in test_*.c ; do
|
|
out=$(echo -n $f | cut -d'.' -f1)
|
|
rlRun "gcc $f -o $out -lsemanage -Wall -Wextra -Werror -std=c99"
|
|
done
|
|
|
|
POLICY_TYPE="$(grep -E '^SELINUXTYPE=' /etc/selinux/config | cut -d'=' -f2 | tr '[:upper:]' '[:lower:]' | tr -d ' ')"
|
|
|
|
if rlIsFedora; then
|
|
SEUSERS_PATH="/var/lib/selinux/$POLICY_TYPE/active/seusers"
|
|
elif rlIsRHEL '>=7'; then
|
|
SEUSERS_PATH="/etc/selinux/$POLICY_TYPE/active/seusers"
|
|
else
|
|
SEUSERS_PATH="/etc/selinux/$POLICY_TYPE/seusers"
|
|
fi
|
|
|
|
rlRun "cat $SEUSERS_PATH"
|
|
|
|
SEUSERS_COUNT="$(cat $SEUSERS_PATH | grep -vE '^#|^$' | wc -l)"
|
|
rlRun "[[ \"$SEUSERS_COUNT\" -gt 0 ]]"
|
|
|
|
SEUSERS="$(cat $SEUSERS_PATH | grep -vE '^#|^$' | cut -d':' -f1 | tr '\n' ' ')"
|
|
rlRun "[[ -n \"$SEUSERS\" ]]"
|
|
|
|
first_line="$(cat $SEUSERS_PATH | grep -vE '^#|^$' | head -n 1)"
|
|
SEUSER="$(echo -n $first_line | cut -d':' -f1)"
|
|
rlRun "[[ -n \"$SEUSER\" ]]"
|
|
SEUSER_SENAME="$(echo -n $first_line | cut -d':' -f2)"
|
|
rlRun "[[ -n \"$SEUSER_SENAME\" ]]"
|
|
SEUSER_MLSRANGE="$(echo -n $first_line | cut -d':' -f3-4)"
|
|
rlRun "[[ -n \"$SEUSER_MLSRANGE\" ]]"
|
|
|
|
SEUSER_NONEXISTENT="nonuser"
|
|
SEUSER_DEFAULT="__default__"
|
|
|
|
ERR_FAIL=1
|
|
ERR_ABORT=134
|
|
ERR_SEGFAULT=139
|
|
|
|
# note: each test_*.c program takes first argument which specifies setup
|
|
# before executing specified function
|
|
# init semanage handle == NULL
|
|
# handle semanage handle obtained via semanage_handle_create
|
|
# conn connected via semanage_connect
|
|
# trans inside transaction, via semanage_begin_transaction
|
|
# program returns 1 on error in function, 2 on error in setup
|
|
rlPhaseEnd
|
|
|
|
rlPhaseStartTest "semanage_seuser_key_create, semanage_seuser_key_free"
|
|
# FIXME
|
|
# rlRun "./test_key_create init $SEUSER" $ERR_ABORT,$ERR_SEGFAULT
|
|
# rlRun "./test_key_create handle $SEUSER" $ERR_FAIL
|
|
rlRun "./test_key_create conn $SEUSER"
|
|
rlRun "./test_key_create trans $SEUSER"
|
|
rlPhaseEnd
|
|
|
|
rlPhaseStartTest "semanage_seuser_key_extract"
|
|
# FIXME
|
|
#rlRun "./test_key_extract conn new"
|
|
rlRun "./test_key_extract conn first"
|
|
# FIXME
|
|
#rlRun "./test_key_extract trans new"
|
|
rlRun "./test_key_extract trans first"
|
|
rlPhaseEnd
|
|
|
|
rlPhaseStartTest "semanage_seuser_compare"
|
|
rlRun "./test_compare conn $SEUSER same"
|
|
rlRun "./test_compare conn $SEUSER_NONEXISTENT different"
|
|
rlRun "./test_compare trans $SEUSER same"
|
|
rlRun "./test_compare trans $SEUSER_NONEXISTENT different"
|
|
rlPhaseEnd
|
|
|
|
rlPhaseStartTest "semanage_seuser_compare2"
|
|
rlRun "./test_compare2 conn NULL 0" $ERR_ABORT,$ERR_SEGFAULT
|
|
rlRun "./test_compare2 conn 0 NULL" $ERR_ABORT,$ERR_SEGFAULT
|
|
rlRun "./test_compare2 conn NULL NULL" $ERR_ABORT,$ERR_SEGFAULT
|
|
rlRun "./test_compare2 conn 0 0"
|
|
rlRun "./test_compare2 conn 0 1"
|
|
rlRun "./test_compare2 trans NULL 0" $ERR_ABORT,$ERR_SEGFAULT
|
|
rlRun "./test_compare2 trans 0 NULL" $ERR_ABORT,$ERR_SEGFAULT
|
|
rlRun "./test_compare2 trans NULL NULL" $ERR_ABORT,$ERR_SEGFAULT
|
|
rlRun "./test_compare2 trans 0 0"
|
|
rlRun "./test_compare2 trans 0 1"
|
|
rlPhaseEnd
|
|
|
|
rlPhaseStartTest "semanage_seuser_count"
|
|
rlRun "./test_count init" $ERR_ABORT,$ERR_SEGFAULT
|
|
rlRun "./test_count handle" $ERR_FAIL
|
|
rlRun "./test_count conn $SEUSERS_COUNT"
|
|
rlRun "./test_count trans $SEUSERS_COUNT"
|
|
rlPhaseEnd
|
|
|
|
rlPhaseStartTest "semanage_seuser_list"
|
|
rlRun "./test_list init" $ERR_ABORT,$ERR_SEGFAULT
|
|
rlRun "./test_list handle" $ERR_FAIL
|
|
rlRun "./test_list conn $SEUSERS_COUNT $SEUSERS"
|
|
rlRun "./test_list trans $SEUSERS_COUNT $SEUSERS"
|
|
rlPhaseEnd
|
|
|
|
rlPhaseStartTest "semanage_seuser_iterate"
|
|
rlRun "./test_iterate init" $ERR_ABORT,$ERR_SEGFAULT
|
|
rlRun "./test_iterate handle" $ERR_FAIL
|
|
rlRun "./test_iterate conn $SEUSERS"
|
|
rlRun "./test_iterate trans $SEUSERS"
|
|
rlPhaseEnd
|
|
|
|
rlPhaseStartTest "semanage_seuser_exists"
|
|
rlRun "./test_exists conn $SEUSER_NONEXISTENT 0"
|
|
rlRun "./test_exists conn $SEUSER_DEFAULT 1"
|
|
rlRun "./test_exists conn $USER 1"
|
|
rlRun "./test_exists trans $SEUSER_NONEXISTENT 0"
|
|
rlRun "./test_exists trans $SEUSER_DEFAULT 1"
|
|
rlRun "./test_exists trans $SEUSER 1"
|
|
rlPhaseEnd
|
|
|
|
rlPhaseStartTest "semanage_seuser_query"
|
|
rlRun "./test_query conn $SEUSER_NONEXISTENT" $ERR_FAIL
|
|
rlRun "./test_query conn $SEUSER_DEFAULT"
|
|
rlRun "./test_query conn $SEUSER"
|
|
rlRun "./test_query trans $SEUSER_NONEXISTENT" $ERR_FAIL
|
|
rlRun "./test_query trans $SEUSER_DEFAULT"
|
|
rlRun "./test_query trans $SEUSER"
|
|
rlPhaseEnd
|
|
|
|
rlPhaseStartTest "semanage_seuser_get_name"
|
|
rlRun "./test_get_name conn new NULL"
|
|
rlRun "./test_get_name conn first $SEUSER"
|
|
rlRun "./test_get_name trans new NULL"
|
|
rlRun "./test_get_name trans first $SEUSER"
|
|
rlPhaseEnd
|
|
|
|
rlPhaseStartTest "semanage_seuser_set_name"
|
|
name="someuser"
|
|
rlRun "./test_set_name conn $name"
|
|
rlRun "./test_set_name trans $name"
|
|
rlPhaseEnd
|
|
|
|
rlPhaseStartTest "semanage_seuser_get_sename"
|
|
rlRun "./test_get_sename conn new NULL"
|
|
rlRun "./test_get_sename conn first $SEUSER_SENAME"
|
|
rlRun "./test_get_sename trans new NULL"
|
|
rlRun "./test_get_sename trans first $SEUSER_SENAME"
|
|
rlPhaseEnd
|
|
|
|
rlPhaseStartTest "semanage_seuser_set_sename"
|
|
sename="someuser_u"
|
|
rlRun "./test_set_sename conn $sename"
|
|
rlRun "./test_set_sename trans $sename"
|
|
rlPhaseEnd
|
|
|
|
rlPhaseStartTest "semanage_seuser_get_mlsrange"
|
|
rlRun "./test_get_mlsrange conn new NULL"
|
|
rlRun "./test_get_mlsrange conn first $SEUSER_MLSRANGE"
|
|
rlRun "./test_get_mlsrange trans new NULL"
|
|
rlRun "./test_get_mlsrange trans first $SEUSER_MLSRANGE"
|
|
rlPhaseEnd
|
|
|
|
rlPhaseStartTest "semanage_seuser_set_mlsrange"
|
|
mlsrange="c0-s1:c0.c42"
|
|
rlRun "./test_set_mlsrange conn $mlsrange"
|
|
rlRun "./test_set_mlsrange trans $mlsrange"
|
|
rlPhaseEnd
|
|
|
|
rlPhaseStartTest "semanage_seuser_clone"
|
|
# FIXME
|
|
#rlRun "./test_clone conn new"
|
|
rlRun "./test_clone conn first"
|
|
# FIXME
|
|
#rlRun "./test_clone trans new"
|
|
rlRun "./test_clone trans first"
|
|
rlPhaseEnd
|
|
|
|
rlPhaseStartTest "semanage_seuser_create"
|
|
# FIXME
|
|
#rlRun "./test_create init" $ERR_ABORT,$ERR_SEGFAULT
|
|
#rlRun "./test_create handle" $ERR_ABORT,$ERR_SEGFAULT
|
|
rlRun "./test_create conn"
|
|
rlRun "./test_create trans"
|
|
rlPhaseEnd
|
|
|
|
rlPhaseStartTest "semanage_seuser_modify_local"
|
|
# function requires transaction
|
|
#rlRun "./test_modify_local conn new" $ERR_FAIL
|
|
#rlRun "./test_modify_local conn first" $ERR_FAIL
|
|
#rlRun "./test_modify_local trans new" $ERR_FAIL
|
|
rlRun "./test_modify_local trans first"
|
|
rlPhaseEnd
|
|
|
|
rlPhaseStartTest "semanage_seuser_del_local"
|
|
# adding local seuser requires transaction
|
|
# FIXME
|
|
#rlRun "./test_del_local trans first new"
|
|
#rlRun "./test_del_local trans first second"
|
|
rlRun "./test_del_local trans first first"
|
|
rlPhaseEnd
|
|
|
|
rlPhaseStartTest "semanage_seuser_exists_local"
|
|
# adding local seuser requires transaction
|
|
rlRun "./test_exists_local trans first first 1"
|
|
rlRun "./test_exists_local trans first second 0"
|
|
rlPhaseEnd
|
|
|
|
rlPhaseStartTest "semanage_seuser_count_local"
|
|
# adding local seuser requires transaction
|
|
# FIXME
|
|
#rlRun "./test_count_local trans 0"
|
|
rlRun "./test_count_local trans 1"
|
|
rlRun "./test_count_local trans 2"
|
|
rlPhaseEnd
|
|
|
|
rlPhaseStartCleanup
|
|
testfiles="$(ls -1 test_* | grep -v '\.c' | tr '\n' ' ')"
|
|
rlRun "rm -f $testfiles"
|
|
rlPhaseEnd
|
|
rlJournalPrintText
|
|
rlJournalEnd
|