1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
|
/*
* Copyright (C) 2017 Canonical Ltd
*
* This program is free software: you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 3 as
* published by the Free Software Foundation.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License
* along with this program. If not, see <http://www.gnu.org/licenses/>.
*
*/
package backends_test
import (
"testing"
. "gopkg.in/check.v1"
"github.com/snapcore/snapd/interfaces"
"github.com/snapcore/snapd/interfaces/backends"
apparmor_sandbox "github.com/snapcore/snapd/sandbox/apparmor"
"github.com/snapcore/snapd/snapdenv"
"github.com/snapcore/snapd/testutil"
)
func Test(t *testing.T) {
TestingT(t)
}
type backendsSuite struct{}
var _ = Suite(&backendsSuite{})
func (s *backendsSuite) TestIsAppArmorEnabled(c *C) {
for _, level := range []apparmor_sandbox.LevelType{apparmor_sandbox.Unsupported, apparmor_sandbox.Unusable, apparmor_sandbox.Partial, apparmor_sandbox.Full} {
restore := apparmor_sandbox.MockLevel(level)
defer restore()
switch level {
case apparmor_sandbox.Unsupported, apparmor_sandbox.Unusable:
c.Assert(backendNames(backends.All()), Not(testutil.Contains), "apparmor")
case apparmor_sandbox.Partial, apparmor_sandbox.Full:
c.Assert(backendNames(backends.All()), testutil.Contains, "apparmor")
}
}
}
func (s *backendsSuite) TestEssentialOrdering(c *C) {
restore := apparmor_sandbox.MockLevel(apparmor_sandbox.Full)
defer restore()
all := backends.All()
aaIndex := -1
sdIndex := -1
for i, backend := range all {
switch backend.Name() {
case "apparmor":
aaIndex = i
case "systemd":
sdIndex = i
}
}
c.Assert(aaIndex, testutil.IntNotEqual, -1)
c.Assert(sdIndex, testutil.IntNotEqual, -1)
c.Assert(sdIndex, testutil.IntLessThan, aaIndex)
}
func (s *backendsSuite) TestUdevPreseedingInContainers(c *C) {
cmd := testutil.MockCommand(c, "systemd-detect-virt", `
for arg in "$@"; do
if [ "$arg" = --container ]; then
exit 0
fi
done
exit 1
`)
restore := snapdenv.MockPreseeding(true)
defer restore()
defer cmd.Restore()
c.Assert(backendNames(backends.All()), testutil.Contains, "udev")
}
func backendNames(bs []interfaces.SecurityBackend) (names []string) {
names = make([]string, len(bs))
for i, backend := range bs {
names[i] = string(backend.Name())
}
return names
}
|
