felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

tests: enforce abstractions test.

Browse source
This commit is contained in:
Alexandre Pujol 2025-06-20 00:00:48 +02:00
parent f29041576e
commit 3ffff07f3f
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
2 changed files with 10 additions and 14 deletions
Download patch file Download diff file Expand all files Collapse all files

10
tests/check.sh
View file

@ -93,7 +93,7 @@ _check() {
# Rules checks: security, compatibility and rule issues
readonly ABS="abstractions"
readonly ABS_DANGEROUS=(dbus-session dbus-system dbus-accessibility user-tmp)
readonly ABS_DANGEROUS=(dbus dbus-session dbus-system dbus-accessibility user-tmp)
declare -A ABS_DEPRECATED=(
["nameservice"]="nameservice-strict"
["bash"]="shell"
@ -142,7 +142,7 @@ _check_equivalent() {
_is_enabled equivalent || return 0
local prgmname
for prgmname in "${!EQUIVALENTS[@]}"; do
if [[ "$line" == *"/$prgmname"* ]]; then
if [[ "$line" == *"/$prgmname "* ]]; then
if [[ ! "$line" == *"${EQUIVALENTS[$prgmname]}"* ]]; then
_err compatibility "$file:$line_number" "missing equivalent program: '@{bin}/$prgmname' instead of '@{bin}/${EQUIVALENTS[$prgmname]}'"
fi
@ -373,7 +373,7 @@ check_profiles() {
)
jobs=0
WITH_CHECK=(
equivalent
abstractions equivalent
abi include profile header tabs trailing indentation subprofiles vim
)
for file in "${files[@]}"; do
@ -393,7 +393,7 @@ check_abstractions() {
mapfile -t files < <(find "$APPARMORD/abstractions" -type f -not -path "$APPARMORD/abstractions/*.d/*")
jobs=0
WITH_CHECK=(
equivalent
abstractions equivalent
abi include header tabs trailing indentation vim
)
for file in "${files[@]}"; do
@ -414,7 +414,7 @@ check_abstractions() {
# shellcheck disable=SC2034
jobs=0
WITH_CHECK=(
equivalent
abstractions equivalent
header tabs trailing indentation vim
)
for file in "${files[@]}"; do