mirror of
https://github.com/containers/podman.git
synced 2025-10-29 08:57:26 +08:00
06ab343bd7
Make users of libpod more secure by adding the libpod/apparmor package to load a pre-defined AppArmor profile. Large chunks of libpod/apparmor come from github.com/moby/moby. Also check if a specified AppArmor profile is actually loaded and throw an error if necessary. The default profile is loaded only on Linux builds with the `apparmor` buildtag enabled. Signed-off-by: Valentin Rothberg <vrothberg@suse.com> Closes: #1063 Approved by: rhatdan
76 lines
1.3 KiB
Go
76 lines
1.3 KiB
Go
// +build linux,apparmor
|
|
|
|
package apparmor
|
|
|
|
import (
|
|
"testing"
|
|
)
|
|
|
|
type versionExpected struct {
|
|
output string
|
|
version int
|
|
}
|
|
|
|
func TestParseVersion(t *testing.T) {
|
|
versions := []versionExpected{
|
|
{
|
|
output: `AppArmor parser version 2.10
|
|
Copyright (C) 1999-2008 Novell Inc.
|
|
Copyright 2009-2012 Canonical Ltd.
|
|
|
|
`,
|
|
version: 210000,
|
|
},
|
|
{
|
|
output: `AppArmor parser version 2.8
|
|
Copyright (C) 1999-2008 Novell Inc.
|
|
Copyright 2009-2012 Canonical Ltd.
|
|
|
|
`,
|
|
version: 208000,
|
|
},
|
|
{
|
|
output: `AppArmor parser version 2.20
|
|
Copyright (C) 1999-2008 Novell Inc.
|
|
Copyright 2009-2012 Canonical Ltd.
|
|
|
|
`,
|
|
version: 220000,
|
|
},
|
|
{
|
|
output: `AppArmor parser version 2.05
|
|
Copyright (C) 1999-2008 Novell Inc.
|
|
Copyright 2009-2012 Canonical Ltd.
|
|
|
|
`,
|
|
version: 205000,
|
|
},
|
|
{
|
|
output: `AppArmor parser version 2.9.95
|
|
Copyright (C) 1999-2008 Novell Inc.
|
|
Copyright 2009-2012 Canonical Ltd.
|
|
|
|
`,
|
|
version: 209095,
|
|
},
|
|
{
|
|
output: `AppArmor parser version 3.14.159
|
|
Copyright (C) 1999-2008 Novell Inc.
|
|
Copyright 2009-2012 Canonical Ltd.
|
|
|
|
`,
|
|
version: 314159,
|
|
},
|
|
}
|
|
|
|
for _, v := range versions {
|
|
version, err := parseVersion(v.output)
|
|
if err != nil {
|
|
t.Fatalf("expected error to be nil for %#v, got: %v", v, err)
|
|
}
|
|
if version != v.version {
|
|
t.Fatalf("expected version to be %d, was %d, for: %#v\n", v.version, version, v)
|
|
}
|
|
}
|
|
}
|