diff --git a/tests/check.sh b/tests/check.sh index 3ddda9827..e35fd8b39 100644 --- a/tests/check.sh +++ b/tests/check.sh @@ -106,6 +106,16 @@ _ensure_vim() { fi } +check_sbin() { + echo -e "\033[1m ⋅ \033[0mEnsuring '@{sbin}' is used in all profiles:" + while IFS= read -r name; do + mapfile -t files < <(grep -l -R "@{bin}/$name" apparmor.d) + for file in "${files[@]}"; do + _die "$file contains '@{bin}/$name' instead of '@{sbin}/$name'" + done + done