summaryrefslogtreecommitdiffstats
path: root/libapol/tests/avrule-tests.c
diff options
context:
space:
mode:
Diffstat (limited to 'libapol/tests/avrule-tests.c')
-rw-r--r--libapol/tests/avrule-tests.c161
1 files changed, 161 insertions, 0 deletions
diff --git a/libapol/tests/avrule-tests.c b/libapol/tests/avrule-tests.c
new file mode 100644
index 0000000..f86bbe2
--- /dev/null
+++ b/libapol/tests/avrule-tests.c
@@ -0,0 +1,161 @@
+/**
+ * @file
+ *
+ * Test the AV rule queries, both semantic and syntactic searches.
+ *
+ * @author Jeremy A. Mowery jmowery@tresys.com
+ * @author Jason Tang jtang@tresys.com
+ *
+ * Copyright (C) 2007 Tresys Technology, LLC
+ *
+ * This library is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU Lesser General Public
+ * License as published by the Free Software Foundation; either
+ * version 2.1 of the License, or (at your option) any later version.
+ *
+ * This library is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
+ * Lesser General Public License for more details.
+ *
+ * You should have received a copy of the GNU Lesser General Public
+ * License along with this library; if not, write to the Free Software
+ * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
+ */
+
+#include <config.h>
+
+#include <CUnit/CUnit.h>
+#include <apol/avrule-query.h>
+#include <apol/policy.h>
+#include <apol/policy-path.h>
+#include <qpol/policy_extend.h>
+#include <stdbool.h>
+
+#define BIN_POLICY TEST_POLICIES "/setools-3.3/rules/rules-mls.21"
+#define SOURCE_POLICY TEST_POLICIES "/setools-3.3/rules/rules-mls.conf"
+
+static apol_policy_t *bp = NULL;
+static apol_policy_t *sp = NULL;
+
+static void avrule_basic_syn(void)
+{
+ apol_avrule_query_t *aq = apol_avrule_query_create();
+ CU_ASSERT_PTR_NOT_NULL_FATAL(aq);
+
+ int retval;
+ retval = apol_avrule_query_set_rules(sp, aq, QPOL_RULE_AUDITALLOW | QPOL_RULE_DONTAUDIT);
+ CU_ASSERT_EQUAL_FATAL(retval, 0);
+
+ apol_vector_t *v = NULL;
+ retval = apol_syn_avrule_get_by_query(sp, aq, &v);
+ CU_ASSERT_EQUAL_FATAL(retval, 0);
+ CU_ASSERT_PTR_NOT_NULL(v);
+
+ size_t num_auditallows = 0, num_dontaudits = 0;
+
+ qpol_policy_t *q = apol_policy_get_qpol(sp);
+ size_t i;
+ for (i = 0; i < apol_vector_get_size(v); i++) {
+ const qpol_syn_avrule_t *syn = (const qpol_syn_avrule_t *)apol_vector_get_element(v, i);
+ uint32_t rule_type;
+ retval = qpol_syn_avrule_get_rule_type(q, syn, &rule_type);
+ CU_ASSERT_EQUAL_FATAL(retval, 0);
+
+ CU_ASSERT(rule_type == QPOL_RULE_AUDITALLOW || rule_type == QPOL_RULE_DONTAUDIT);
+ if (rule_type == QPOL_RULE_AUDITALLOW) {
+ num_auditallows++;
+ } else if (rule_type == QPOL_RULE_DONTAUDIT) {
+ num_dontaudits++;
+ }
+ }
+ CU_ASSERT(num_auditallows == 4 && num_dontaudits == 1);
+ apol_vector_destroy(&v);
+
+ retval = apol_avrule_query_append_class(sp, aq, "unknown class");
+ CU_ASSERT_EQUAL_FATAL(retval, 0);
+
+ retval = apol_syn_avrule_get_by_query(sp, aq, &v);
+ CU_ASSERT_EQUAL_FATAL(retval, 0);
+ CU_ASSERT(v != NULL && apol_vector_get_size(v) == 0);
+ apol_vector_destroy(&v);
+ apol_avrule_query_destroy(&aq);
+}
+
+static void avrule_default(void)
+{
+ apol_avrule_query_t *aq = apol_avrule_query_create();
+ CU_ASSERT_PTR_NOT_NULL_FATAL(aq);
+
+ int retval;
+ qpol_policy_t *sq = apol_policy_get_qpol(sp);
+
+ apol_vector_t *v = NULL;
+
+ retval = apol_avrule_get_by_query(sp, aq, &v);
+ CU_ASSERT_EQUAL_FATAL(retval, 0);
+ CU_ASSERT_PTR_NOT_NULL(v);
+ CU_ASSERT(apol_vector_get_size(v) == 396);
+ apol_vector_destroy(&v);
+
+ qpol_policy_rebuild(sq, QPOL_POLICY_OPTION_NO_NEVERALLOWS);
+ retval = apol_avrule_get_by_query(sp, aq, &v);
+ CU_ASSERT_EQUAL_FATAL(retval, 0);
+ CU_ASSERT_PTR_NOT_NULL(v);
+ CU_ASSERT(apol_vector_get_size(v) == 21);
+ apol_vector_destroy(&v);
+
+ retval = apol_avrule_get_by_query(bp, aq, &v);
+ CU_ASSERT_EQUAL_FATAL(retval, 0);
+ CU_ASSERT_PTR_NOT_NULL(v);
+ CU_ASSERT(apol_vector_get_size(v) == 21);
+ apol_vector_destroy(&v);
+
+ apol_avrule_query_destroy(&aq);
+}
+
+CU_TestInfo avrule_tests[] = {
+ {"basic syntactic search", avrule_basic_syn}
+ ,
+ {"default query", avrule_default}
+ ,
+ CU_TEST_INFO_NULL
+};
+
+int avrule_init()
+{
+ apol_policy_path_t *ppath = apol_policy_path_create(APOL_POLICY_PATH_TYPE_MONOLITHIC, BIN_POLICY, NULL);
+ if (ppath == NULL) {
+ return 1;
+ }
+
+ if ((bp = apol_policy_create_from_policy_path(ppath, 0, NULL, NULL)) == NULL) {
+ apol_policy_path_destroy(&ppath);
+ return 1;
+ }
+ apol_policy_path_destroy(&ppath);
+
+ ppath = apol_policy_path_create(APOL_POLICY_PATH_TYPE_MONOLITHIC, SOURCE_POLICY, NULL);
+ if (ppath == NULL) {
+ return 1;
+ }
+
+ if ((sp = apol_policy_create_from_policy_path(ppath, 0, NULL, NULL)) == NULL) {
+ apol_policy_path_destroy(&ppath);
+ return 1;
+ }
+ apol_policy_path_destroy(&ppath);
+
+ if (qpol_policy_build_syn_rule_table(apol_policy_get_qpol(sp)) != 0) {
+ return 1;
+ }
+
+ return 0;
+}
+
+int avrule_cleanup()
+{
+ apol_policy_destroy(&bp);
+ apol_policy_destroy(&sp);
+ return 0;
+}