PWN-Hunter/android_system_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Test that /proc files have proc_type attribute.

Browse Source 
Bug: 74182216
Change-Id: Ia1c6b67ac93ed6e88c50c1527b48275365bf5fd5
Test: build policy
This commit is contained in:
Tri Vo 2018-03-29 03:42:47 +00:00
parent 0d5b954086
commit 4c80c2caa8
1 changed files with 13 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
tests/sepolicy_tests.py
View File

@ -11,6 +11,9 @@ import sys
def TestDataTypeViolations(pol): def TestDataTypeViolations(pol):
return pol.AssertPathTypesHaveAttr(["/data/"], [], "data_file_type") return pol.AssertPathTypesHaveAttr(["/data/"], [], "data_file_type")
def TestProcTypeViolations(pol):
return pol.AssertGenfsFilesystemTypesHaveAttr("proc", "proc_type")
def TestSysfsTypeViolations(pol): def TestSysfsTypeViolations(pol):
ret = pol.AssertGenfsFilesystemTypesHaveAttr("sysfs", "sysfs_type") ret = pol.AssertGenfsFilesystemTypesHaveAttr("sysfs", "sysfs_type")
ret += pol.AssertPathTypesHaveAttr(["/sys/"], ["/sys/kernel/debug/", ret += pol.AssertPathTypesHaveAttr(["/sys/"], ["/sys/kernel/debug/",
@ -48,9 +51,14 @@ class MultipleOption(Option):
else: else:
Option.take_action(self, action, dest, opt, value, values, parser) Option.take_action(self, action, dest, opt, value, values, parser)
Tests = ["TestDataTypeViolators", "TestSysfsTypeViolations", Tests = [
"TestDebugfsTypeViolations", "TestVendorTypeViolations", "TestDataTypeViolators",
"TestCoreDataTypeViolations"] "TestProcTypeViolations",
"TestSysfsTypeViolations",
"TestDebugfsTypeViolations",
"TestVendorTypeViolations",
"TestCoreDataTypeViolations",
]
if __name__ == '__main__': if __name__ == '__main__':
usage = "sepolicy_tests -l $(ANDROID_HOST_OUT)/lib64/libsepolwrap.so " usage = "sepolicy_tests -l $(ANDROID_HOST_OUT)/lib64/libsepolwrap.so "
@ -91,6 +99,8 @@ if __name__ == '__main__':
# If an individual test is not specified, run all tests. # If an individual test is not specified, run all tests.
if options.test is None or "TestDataTypeViolations" in options.test: if options.test is None or "TestDataTypeViolations" in options.test:
results += TestDataTypeViolations(pol) results += TestDataTypeViolations(pol)
if options.test is None or "TestProcTypeViolations" in options.test:
results += TestProcTypeViolations(pol)
if options.test is None or "TestSysfsTypeViolations" in options.test: if options.test is None or "TestSysfsTypeViolations" in options.test:
results += TestSysfsTypeViolations(pol) results += TestSysfsTypeViolations(pol)
if options.test is None or "TestDebugfsTypeViolations" in options.test: if options.test is None or "TestDebugfsTypeViolations" in options.test: