test(aa): update unit tests.

pkg/aa/data_test.go

@@ -197,7 +197,7 @@ var (
 		"protocol":       "0",
 	}
 	unix1 = &Unix{
-		Access:    []string{"receive", "send"},
+		Access:    []string{"send", "receive"},
 		Type:      "stream",
 		Protocol:  "0",
 		Address:   "none",
@@ -290,4 +290,30 @@ var (
 		Path:     "@{PROC}/4163/cgroup",
 		Access:   []string{"r"},
 	}
+
+	// Link
+	link1Log    = map[string]string{
+		"apparmor":       "ALLOWED",
+		"operation":      "link",
+		"class":          "file",
+		"profile":        "mkinitcpio",
+		"name":           "/tmp/mkinitcpio.QDWtza/early@{lib}/firmware/i915/dg1_dmc_ver2_02.bin.zst",
+		"comm":           "cp",
+		"requested_mask": "l",
+		"denied_mask":    "l",
+		"fsuid":          "0",
+		"ouid":           "0",
+		"target":         "/tmp/mkinitcpio.QDWtza/root@{lib}/firmware/i915/dg1_dmc_ver2_02.bin.zst",
+		"FSUID":          "root",
+		"OUID":           "root",
+	}
+	link1 = &Link{
+		Path:   "/tmp/mkinitcpio.QDWtza/early@{lib}/firmware/i915/dg1_dmc_ver2_02.bin.zst",
+		Target: "/tmp/mkinitcpio.QDWtza/root@{lib}/firmware/i915/dg1_dmc_ver2_02.bin.zst",
+	}
+	link2 = &File{
+		Owner:  true,
+		Path:   "@{user_config_dirs}/powerdevilrc{,.@{rand6}}",
+		Target: "@{user_config_dirs}/#@{int}",
+	}
 )

pkg/aa/rules_test.go

@@ -88,6 +88,12 @@ func TestRules_FromLog(t *testing.T) {
 			log:     file1Log,
 			want:    file1,
 		},
+		{
+			name:    "link",
+			fromLog: newLinkFromLog,
+			log:     link1Log,
+			want:    link1,
+		},
 	}
 	for _, tt := range tests {
 		t.Run(tt.name, func(t *testing.T) {
@@ -442,7 +448,7 @@ func TestRules_String(t *testing.T) {
 		{
 			name: "unix",
 			rule: unix1,
-			want: "unix (receive send) type=stream protocol=0 addr=none peer=(label=dbus-daemon, addr=@/tmp/dbus-AaKMpxzC4k),",
+			want: "unix (send receive) type=stream protocol=0 addr=none peer=(label=dbus-daemon, addr=@/tmp/dbus-AaKMpxzC4k),",
 		},
 		{
 			name: "dbus",