From 8ae1118de61b750ae39ceebb40dc420931c07f9d Mon Sep 17 00:00:00 2001 From: Alexandre Pujol Date: Mon, 28 Apr 2025 21:48:53 +0200 Subject: [PATCH] tests(check): ensure bin is not used instead of sbin. --- tests/check.sh | 11 + tests/sbin.list | 738 ++++++++++++++++++++++++++++++++++++++++++++++++ 2 files changed, 749 insertions(+) create mode 100644 tests/sbin.list diff --git a/tests/check.sh b/tests/check.sh index 3ddda9827..e35fd8b39 100644 --- a/tests/check.sh +++ b/tests/check.sh @@ -106,6 +106,16 @@ _ensure_vim() { fi } +check_sbin() { + echo -e "\033[1m ⋅ \033[0mEnsuring '@{sbin}' is used in all profiles:" + while IFS= read -r name; do + mapfile -t files < <(grep -l -R "@{bin}/$name" apparmor.d) + for file in "${files[@]}"; do + _die "$file contains '@{bin}/$name' instead of '@{sbin}/$name'" + done + done