]> git.baikalelectronics.ru Git - kernel.git/commit
apparmor: add AppArmor KUnit tests for policy unpack
authorMike Salvatore <mike.salvatore@canonical.com>
Wed, 6 Nov 2019 00:43:29 +0000 (16:43 -0800)
committerShuah Khan <skhan@linuxfoundation.org>
Thu, 9 Jan 2020 23:27:43 +0000 (16:27 -0700)
commit9ed33dbc2bd8e3891e6c1624399383817558b6e4
tree87c144b491c5f4ff0cb9a5095a54ee6a0ef15994
parentd4f46b330cc523efd6fb99dfb35e4def34bd935c
apparmor: add AppArmor KUnit tests for policy unpack

Add KUnit tests to test AppArmor unpacking of userspace policies.
AppArmor uses a serialized binary format for loading policies. To find
policy format documentation see
Documentation/admin-guide/LSM/apparmor.rst.

In order to write the tests against the policy unpacking code, some
static functions needed to be exposed for testing purposes. One of the
goals of this patch is to establish a pattern for which testing these
kinds of functions should be done in the future.

Signed-off-by: Brendan Higgins <brendanhiggins@google.com>
Signed-off-by: Mike Salvatore <mike.salvatore@canonical.com>
Acked-by: John Johansen <john.johansen@canonical.com>
Reviewed-by: Kees Cook <keescook@chromium.org>
Signed-off-by: Shuah Khan <skhan@linuxfoundation.org>
security/apparmor/Kconfig
security/apparmor/policy_unpack.c
security/apparmor/policy_unpack_test.c [new file with mode: 0644]