NetCube-Systems-Austria/kumquat-buildroot
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

support/testing/tests/core/test_selinux: new tests for the packages SELinux functionalities

Browse Source 
Add tests to ensure the packages SELinux functionalities (being able to
select an extra SELinux module in the refpolicy, and being able to
provide a custom SELinux module) are working as expected.

We use a BR2_EXTERNAL folder, provided in the tests, to use a custom
SELinux enabled package.

Signed-off-by: Antoine Tenart <antoine.tenart@bootlin.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
This commit is contained in:
Antoine Tenart 2020-09-28 16:54:24 +02:00 committed by Thomas Petazzoni
parent 0f3b931624
commit 751b660c1f
9 changed files with 42 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

22
support/testing/tests/core/test_selinux.py
View File

@ -58,3 +58,25 @@ class TestSELinuxCustomGit(TestSELinuxInfra):
def test_run(self):
pass
class TestSELinuxPackage(TestSELinuxInfra):
br2_external = [infra.filepath("tests/core/test_selinux/br2_external")]
config = TestSELinuxInfra.config + \
"""
BR2_PACKAGE_SELINUX_TEST=y
"""
def test_run(self):
TestSELinuxInfra.base_test_run(self)
out, ret = self.emulator.run("seinfo -t ntpd_t", 15)
self.assertEqual(ret, 0)
self.assertEqual(out[2].strip(), "ntpd_t")
out, ret = self.emulator.run("seinfo -t tor_t", 15)
self.assertEqual(ret, 0)
self.assertEqual(out[2].strip(), "tor_t")
out, ret = self.emulator.run("seinfo -t buildroot_test_t", 15)
self.assertEqual(ret, 0)
self.assertEqual(out[2].strip(), "buildroot_test_t")

1
support/testing/tests/core/test_selinux/br2_external/Config.in Normal file
View File

@ -0,0 +1 @@
source "$BR2_EXTERNAL_SELINUX_PATH/package/selinux-test/Config.in"

1
support/testing/tests/core/test_selinux/br2_external/external.desc Normal file
View File

@ -0,0 +1 @@
name: SELINUX

1
support/testing/tests/core/test_selinux/br2_external/external.mk Normal file
View File

@ -0,0 +1 @@
include $(sort $(wildcard $(BR2_EXTERNAL_SELINUX_PATH)/package/*/*.mk))

4
support/testing/tests/core/test_selinux/br2_external/package/selinux-test/Config.in Normal file
View File

@ -0,0 +1,4 @@
config BR2_PACKAGE_SELINUX_TEST
bool "SELinux test package"
help
Test package for SELinux Buildroot helpers.

9
support/testing/tests/core/test_selinux/br2_external/package/selinux-test/selinux-test.mk Normal file
View File

@ -0,0 +1,9 @@
################################################################################
#
# SELinux test package
#
################################################################################
SELINUX_TEST_SELINUX_MODULES = ntp tor
$(eval $(generic-package))

0
support/testing/tests/core/test_selinux/br2_external/package/selinux-test/selinux/buildroot.fc Normal file
View File

1
support/testing/tests/core/test_selinux/br2_external/package/selinux-test/selinux/buildroot.if Normal file
View File

@ -0,0 +1 @@
## <summary>Buildroot rules</summary>

3
support/testing/tests/core/test_selinux/br2_external/package/selinux-test/selinux/buildroot.te Normal file
View File

@ -0,0 +1,3 @@
policy_module(buildroot, 1.0.0)
type buildroot_test_t;