RepoMirrors/selinux
1
0
Fork 0
mirror of https://github.com/SELinuxProject/selinux synced 2025-01-09 23:19:26 +00:00
Code Issues Packages Projects Releases Wiki Activity
af67fa5d95
selinux/libsemanage/tests/test_user.c
Jan Zarsky 6f064e0b30 libsemanage: test semanage_user_* functions 
Add new test suite for semanage_user_* functions. The test suite aims for line
coverage and covers expected usage of functions. The test suite uses custom
semanage store and policy written in CIL, it does not require running on SELinux
enabled system.

Signed-off-by: Jan Zarsky <jzarsky@redhat.com>
2019-06-19 09:01:48 -07:00

691 lines
17 KiB
C
Raw Blame History

/*
* Authors: Jan Zarsky <jzarsky@redhat.com>
*
* Copyright (C) 2019 Red Hat, Inc.
*
* This library is free software; you can redistribute it and/or
* modify it under the terms of the GNU Lesser General Public
* License as published by the Free Software Foundation; either
* version 2.1 of the License, or (at your option) any later version.
*
* This library is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
* Lesser General Public License for more details.
*
* You should have received a copy of the GNU Lesser General Public
* License along with this library; if not, write to the Free Software
* Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
*/
#include "utilities.h"
#include "test_user.h"
#define USER_COUNT 3
/* user_record.h */
void test_user_compare(void);
void test_user_compare2(void);
void test_user_key_create(void);
void test_user_key_extract(void);
void test_user_get_set_name(void);
void test_user_get_set_prefix(void);
void test_user_get_set_mlslevel(void);
void test_user_get_set_mlsrange(void);
void test_user_roles(void);
void test_user_create(void);
void test_user_clone(void);
/* users_policy.h */
void test_user_query(void);
void test_user_exists(void);
void test_user_count(void);
void test_user_iterate(void);
void test_user_list(void);
/* users_local.h */
void test_user_modify_del_query_local(void);
void test_user_exists_local(void);
void test_user_count_local(void);
void test_user_iterate_local(void);
void test_user_list_local(void);
extern semanage_handle_t *sh;
int user_test_init(void)
{
if (create_test_store() < 0) {
fprintf(stderr, "Could not create test store\n");
return 1;
}
if (write_test_policy_from_file("test_user.policy") < 0) {
fprintf(stderr, "Could not write test policy\n");
return 1;
}
return 0;
}
int user_test_cleanup(void)
{
if (destroy_test_store() < 0) {
fprintf(stderr, "Could not destroy test store\n");
return 1;
}
return 0;
}
int user_add_tests(CU_pSuite suite)
{
CU_add_test(suite, "user_compare", test_user_compare);
CU_add_test(suite, "user_compare2", test_user_compare2);
CU_add_test(suite, "user_key_create", test_user_key_create);
CU_add_test(suite, "user_key_extract", test_user_key_extract);
CU_add_test(suite, "user_get_set_name", test_user_get_set_name);
CU_add_test(suite, "user_get_set_prefix", test_user_get_set_prefix);
CU_add_test(suite, "user_get_set_mlslevel", test_user_get_set_mlslevel);
CU_add_test(suite, "user_get_set_mlsrange", test_user_get_set_mlsrange);
CU_add_test(suite, "user_roles", test_user_roles);
CU_add_test(suite, "user_create", test_user_create);
CU_add_test(suite, "user_clone", test_user_clone);
CU_add_test(suite, "user_query", test_user_query);
CU_add_test(suite, "user_exists", test_user_exists);
CU_add_test(suite, "user_count", test_user_count);
CU_add_test(suite, "user_iterate", test_user_iterate);
CU_add_test(suite, "user_list", test_user_list);
CU_add_test(suite, "user_modify_del_query_local",
test_user_modify_del_query_local);
CU_add_test(suite, "user_exists_local", test_user_exists_local);
CU_add_test(suite, "user_count_local", test_user_count_local);
CU_add_test(suite, "user_iterate_local", test_user_iterate_local);
CU_add_test(suite, "user_list_local", test_user_list_local);
return 0;
}
/* Helpers */
semanage_user_t *get_user_nth(int idx)
{
int res;
semanage_user_t **records;
semanage_user_t *user;
unsigned int count;
if (idx == I_NULL)
return NULL;
res = semanage_user_list(sh, &records, &count);
CU_ASSERT_FATAL(res >= 0);
CU_ASSERT_FATAL(count >= (unsigned int) idx + 1);
user = records[idx];
for (unsigned int i = 0; i < count; i++)
if (i != (unsigned int) idx)
semanage_user_free(records[i]);
return user;
}
semanage_user_key_t *get_user_key_nth(int idx)
{
semanage_user_key_t *key;
semanage_user_t *user;
int res;
if (idx == I_NULL)
return NULL;
user = get_user_nth(idx);
res = semanage_user_key_extract(sh, user, &key);
CU_ASSERT_FATAL(res >= 0);
CU_ASSERT_PTR_NOT_NULL_FATAL(key);
return key;
}
void add_local_user(int user_idx)
{
semanage_user_t *user;
semanage_user_key_t *key = NULL;
CU_ASSERT_FATAL(user_idx != I_NULL);
user = get_user_nth(user_idx);
CU_ASSERT_FATAL(semanage_user_key_extract(sh, user, &key) >= 0);
CU_ASSERT_PTR_NOT_NULL_FATAL(key);
CU_ASSERT_FATAL(semanage_user_modify_local(sh, key, user) >= 0);
}
void delete_local_user(int user_idx)
{
semanage_user_key_t *key = NULL;
CU_ASSERT_FATAL(user_idx != I_NULL);
key = get_user_key_nth(user_idx);
CU_ASSERT_FATAL(semanage_user_del_local(sh, key) >= 0);
}
/* Function semanage_user_compare */
void test_user_compare(void)
{
semanage_user_t *user = NULL;
semanage_user_key_t *key1 = NULL;
semanage_user_key_t *key2 = NULL;
int res = 42;
/* setup */
setup_handle(SH_CONNECT);
user = get_user_nth(I_FIRST);
key1 = get_user_key_nth(I_FIRST);
key2 = get_user_key_nth(I_SECOND);
/* test */
res = semanage_user_compare(user, key1);
CU_ASSERT(res == 0);
res = semanage_user_compare(user, key2);
CU_ASSERT(res != 0);
/* cleanup */
semanage_user_free(user);
semanage_user_key_free(key1);
semanage_user_key_free(key2);
cleanup_handle(SH_CONNECT);
}
/* Function semanage_user_compare2 */
void test_user_compare2(void)
{
semanage_user_t *user1 = NULL;
semanage_user_t *user2 = NULL;
semanage_user_t *user3 = NULL;
int res = 42;
/* setup */
setup_handle(SH_CONNECT);
user1 = get_user_nth(I_FIRST);
user2 = get_user_nth(I_FIRST);
user3 = get_user_nth(I_SECOND);
/* test */
res = semanage_user_compare2(user1, user2);
CU_ASSERT(res == 0);
res = semanage_user_compare2(user1, user3);
CU_ASSERT(res != 0);
/* cleanup */
semanage_user_free(user1);
semanage_user_free(user2);
semanage_user_free(user3);
cleanup_handle(SH_CONNECT);
}
/* Function semanage_user_key_create */
void test_user_key_create(void)
{
semanage_user_key_t *key = NULL;
/* setup */
setup_handle(SH_CONNECT);
/* test */
CU_ASSERT(semanage_user_key_create(sh, "asdf", &key) >= 0);
CU_ASSERT_PTR_NOT_NULL(key);
/* cleanup */
semanage_user_key_free(key);
cleanup_handle(SH_CONNECT);
}
/* Function semanage_user_key_extract */
void test_user_key_extract(void)
{
semanage_user_t *user = NULL;
semanage_user_key_t *key = NULL;
/* setup */
setup_handle(SH_CONNECT);
user = get_user_nth(I_FIRST);
/* test */
CU_ASSERT(semanage_user_key_extract(sh, user, &key) >= 0);
CU_ASSERT_PTR_NOT_NULL(key);
/* cleanup */
semanage_user_free(user);
semanage_user_key_free(key);
cleanup_handle(SH_CONNECT);
}
/* Function semanage_user_get_name, semanage_user_set_name */
void test_user_get_set_name(void)
{
semanage_user_t *user = NULL;
/* setup */
setup_handle(SH_CONNECT);
CU_ASSERT(semanage_user_create(sh, &user) >= 0);
/* test */
CU_ASSERT(semanage_user_set_name(sh, user, "user_u") == 0);
CU_ASSERT_STRING_EQUAL(semanage_user_get_name(user), "user_u");
/* cleanup */
semanage_user_free(user);
cleanup_handle(SH_CONNECT);
}
/* Function semanage_user_get_prefix, semanage_user_set_prefix */
void test_user_get_set_prefix(void)
{
semanage_user_t *user = NULL;
/* setup */
setup_handle(SH_CONNECT);
CU_ASSERT(semanage_user_create(sh, &user) >= 0);
/* test */
CU_ASSERT(semanage_user_set_prefix(sh, user, "user") == 0);
CU_ASSERT_STRING_EQUAL(semanage_user_get_prefix(user), "user");
/* cleanup */
semanage_user_free(user);
cleanup_handle(SH_CONNECT);
}
/* Function semanage_user_get_mlslevel, semanage_user_set_mlslevel */
void test_user_get_set_mlslevel(void)
{
semanage_user_t *user = NULL;
/* setup */
setup_handle(SH_CONNECT);
CU_ASSERT(semanage_user_create(sh, &user) >= 0);
/* test */
CU_ASSERT(semanage_user_set_mlslevel(sh, user, "s0") == 0);
CU_ASSERT_STRING_EQUAL(semanage_user_get_mlslevel(user), "s0");
/* cleanup */
semanage_user_free(user);
cleanup_handle(SH_CONNECT);
}
/* Function semanage_user_get_mlsrange, semanage_user_set_mlsrange */
void test_user_get_set_mlsrange(void)
{
semanage_user_t *user = NULL;
/* setup */
setup_handle(SH_CONNECT);
CU_ASSERT(semanage_user_create(sh, &user) >= 0);
/* test */
CU_ASSERT(semanage_user_set_mlsrange(sh, user, "s0-s15") == 0);
CU_ASSERT_STRING_EQUAL(semanage_user_get_mlsrange(user), "s0-s15");
/* cleanup */
semanage_user_free(user);
cleanup_handle(SH_CONNECT);
}
/* Function semanage_user_get_num_roles, semanage_user_add_role,
* semanage_user_del_role, semanage_user_has_role, semanage_user_get_roles
* semanage_user_set_roles
*/
void test_user_roles(void)
{
semanage_user_t *user = NULL;
const char **roles_arr = NULL;
unsigned int num_roles = 42;
const char *new_roles_arr[] = { "new_role_r", "new_my_role_r" };
unsigned int new_num_roles = 2;
/* setup */
setup_handle(SH_CONNECT);
CU_ASSERT(semanage_user_create(sh, &user) >= 0);
/* test */
CU_ASSERT(semanage_user_get_num_roles(user) == 0);
CU_ASSERT(semanage_user_add_role(sh, user, "role_r") == 0);
CU_ASSERT(semanage_user_get_num_roles(user) == 1);
CU_ASSERT(semanage_user_has_role(user, "role_r"));
CU_ASSERT(!semanage_user_has_role(user, "my_role_r"));
CU_ASSERT(semanage_user_add_role(sh, user, "my_role_r") == 0);
CU_ASSERT(semanage_user_get_num_roles(user) == 2);
CU_ASSERT(semanage_user_get_roles(sh, user, &roles_arr,
&num_roles) >= 0);
CU_ASSERT(num_roles == 2);
CU_ASSERT_STRING_EQUAL(roles_arr[0], "role_r");
CU_ASSERT_STRING_EQUAL(roles_arr[1], "my_role_r");
CU_ASSERT(semanage_user_set_roles(sh, user, new_roles_arr,
new_num_roles) >= 0);
CU_ASSERT(semanage_user_has_role(user, "new_role_r"));
CU_ASSERT(semanage_user_has_role(user, "new_my_role_r"));
CU_ASSERT(!semanage_user_has_role(user, "role_r"));
CU_ASSERT(!semanage_user_has_role(user, "my_role_r"));
semanage_user_del_role(user, "new_my_role_r");
CU_ASSERT(semanage_user_get_num_roles(user) == 1);
semanage_user_del_role(user, "new_role_r");
CU_ASSERT(semanage_user_get_num_roles(user) == 0);
/* cleanup */
semanage_user_free(user);
cleanup_handle(SH_CONNECT);
}
/* Function semanage_user_create */
void test_user_create(void)
{
semanage_user_t *user = NULL;
/* setup */
setup_handle(SH_CONNECT);
/* test */
CU_ASSERT(semanage_user_create(sh, &user) >= 0);
CU_ASSERT(semanage_user_set_name(sh, user, "user_u") >= 0);
CU_ASSERT(semanage_user_set_prefix(sh, user, "user") >= 0);
CU_ASSERT(semanage_user_set_mlslevel(sh, user, "s0") >= 0);
CU_ASSERT(semanage_user_set_mlsrange(sh, user, "s0-s15") >= 0);
/* cleanup */
semanage_user_free(user);
cleanup_handle(SH_CONNECT);
}
/* Function semanage_user_clone */
void test_user_clone(void)
{
semanage_user_t *user = NULL;
semanage_user_t *user_clone = NULL;
/* setup */
setup_handle(SH_CONNECT);
CU_ASSERT(semanage_user_create(sh, &user) >= 0);
CU_ASSERT(semanage_user_set_name(sh, user, "user_u") >= 0);
CU_ASSERT(semanage_user_set_prefix(sh, user, "user") >= 0);
CU_ASSERT(semanage_user_set_mlslevel(sh, user, "s0") >= 0);
CU_ASSERT(semanage_user_set_mlsrange(sh, user, "s0-s15") >= 0);
/* test */
CU_ASSERT(semanage_user_clone(sh, user, &user_clone) >= 0);
CU_ASSERT_STRING_EQUAL(semanage_user_get_name(user), "user_u");
CU_ASSERT_STRING_EQUAL(semanage_user_get_prefix(user), "user");
CU_ASSERT_STRING_EQUAL(semanage_user_get_mlslevel(user), "s0");
CU_ASSERT_STRING_EQUAL(semanage_user_get_mlsrange(user), "s0-s15");
/* cleanup */
semanage_user_free(user);
semanage_user_free(user_clone);
cleanup_handle(SH_CONNECT);
}
/* Function semanage_user_query */
void test_user_query(void)
{
semanage_user_t *user = NULL;
semanage_user_key_t *key = NULL;
/* setup */
setup_handle(SH_CONNECT);
key = get_user_key_nth(I_FIRST);
/* test */
CU_ASSERT(semanage_user_query(sh, key, &user) >= 0);
/* TODO: test values */
CU_ASSERT_PTR_NOT_NULL(user);
/* cleanup */
semanage_user_free(user);
cleanup_handle(SH_CONNECT);
}
/* Function semanage_user_exists */
void test_user_exists(void)
{
semanage_user_key_t *key1 = NULL;
semanage_user_key_t *key2 = NULL;
int resp = 42;
/* setup */
setup_handle(SH_CONNECT);
key1 = get_user_key_nth(I_FIRST);
CU_ASSERT(semanage_user_key_create(sh, "asdf", &key2) >= 0);
/* test */
CU_ASSERT(semanage_user_exists(sh, key1, &resp) >= 0);
CU_ASSERT(resp);
CU_ASSERT(semanage_user_exists(sh, key2, &resp) >= 0);
CU_ASSERT(!resp);
/* cleanup */
semanage_user_key_free(key1);
semanage_user_key_free(key2);
cleanup_handle(SH_CONNECT);
}
/* Function semanage_user_count */
void test_user_count(void)
{
unsigned int count = 42;
/* setup */
setup_handle(SH_CONNECT);
/* test */
CU_ASSERT(semanage_user_count(sh, &count) >= 0);
CU_ASSERT(count == USER_COUNT);
/* cleanup */
cleanup_handle(SH_CONNECT);
}
/* Function semanage_user_iterate */
unsigned int counter_user_iterate = 0;
int handler_user_iterate(const semanage_user_t *record, void *varg)
{
counter_user_iterate++;
return 0;
}
void test_user_iterate(void)
{
/* setup */
setup_handle(SH_CONNECT);
/* test */
semanage_user_iterate(sh, handler_user_iterate, NULL);
CU_ASSERT(counter_user_iterate == USER_COUNT);
/* cleanup */
cleanup_handle(SH_CONNECT);
}
/* Function semanage_user_list */
void test_user_list(void)
{
semanage_user_t **records = NULL;
unsigned int count = 42;
/* setup */
setup_handle(SH_CONNECT);
/* test */
CU_ASSERT(semanage_user_list(sh, &records, &count) >= 0);
CU_ASSERT(count == USER_COUNT);
/* TODO: check real values */
for (unsigned int i = 0; i < count; i++)
CU_ASSERT_PTR_NOT_NULL(records[i]);
/* cleanup */
for (unsigned int i = 0; i < count; i++)
semanage_user_free(records[i]);
cleanup_handle(SH_CONNECT);
}
/* Function semanage_user_modify_local, semanage_user_del_local,
* semanage_user_query_local
*/
void test_user_modify_del_query_local(void)
{
semanage_user_t *user;
semanage_user_t *user_local;
semanage_user_key_t *key = NULL;
/* setup */
setup_handle(SH_TRANS);
user = get_user_nth(I_FIRST);
CU_ASSERT(semanage_user_key_extract(sh, user, &key) >= 0);
CU_ASSERT_PTR_NOT_NULL(key);
/* test */
CU_ASSERT(semanage_user_modify_local(sh, key, user) >= 0);
/* write changes to file */
helper_commit();
helper_begin_transaction();
CU_ASSERT(semanage_user_query_local(sh, key, &user_local) >= 0);
CU_ASSERT_PTR_NOT_NULL_FATAL(user_local);
CU_ASSERT(semanage_user_del_local(sh, key) >= 0);
CU_ASSERT(semanage_user_query_local(sh, key, &user_local) < 0);
/* cleanup */
semanage_user_free(user);
cleanup_handle(SH_TRANS);
}
/* Function semanage_user_exists_local */
void test_user_exists_local(void)
{
semanage_user_t *user = NULL;
semanage_user_key_t *key1 = NULL;
semanage_user_key_t *key2 = NULL;
int resp = 42;
/* setup */
setup_handle(SH_TRANS);
add_local_user(I_FIRST);
key1 = get_user_key_nth(I_FIRST);
CU_ASSERT(semanage_user_key_create(sh, "asdf", &key2) >= 0);
CU_ASSERT_PTR_NOT_NULL(key2);
/* test */
CU_ASSERT(semanage_user_exists_local(sh, key1, &resp) >= 0);
CU_ASSERT(resp);
CU_ASSERT(semanage_user_exists_local(sh, key2, &resp) >= 0);
CU_ASSERT(!resp);
/* cleanup */
CU_ASSERT(semanage_user_del_local(sh, key1) >= 0);
semanage_user_free(user);
semanage_user_key_free(key1);
semanage_user_key_free(key2);
cleanup_handle(SH_TRANS);
}
/* Function semanage_user_count_local */
void test_user_count_local(void)
{
unsigned int count = 42;
/* setup */
setup_handle(SH_TRANS);
add_local_user(I_FIRST);
add_local_user(I_SECOND);
add_local_user(I_THIRD);
/* test */
CU_ASSERT(semanage_user_count_local(sh, &count) >= 0);
CU_ASSERT(count == 3);
/* cleanup */
delete_local_user(I_FIRST);
delete_local_user(I_SECOND);
delete_local_user(I_THIRD);
cleanup_handle(SH_TRANS);
}
/* Function semanage_user_iterate_local */
unsigned int counter_user_iterate_local = 0;
int handler_user_iterate_local(const semanage_user_t *record, void *varg)
{
counter_user_iterate_local++;
return 0;
}
void test_user_iterate_local(void)
{
/* setup */
setup_handle(SH_TRANS);
add_local_user(I_FIRST);
add_local_user(I_SECOND);
add_local_user(I_THIRD);
/* test */
semanage_user_iterate_local(sh, handler_user_iterate_local, NULL);
CU_ASSERT(counter_user_iterate_local == 3);
/* cleanup */
delete_local_user(I_FIRST);
delete_local_user(I_SECOND);
delete_local_user(I_THIRD);
cleanup_handle(SH_TRANS);
}
/* Function semanage_user_list_local */
void test_user_list_local(void)
{
semanage_user_t **records = NULL;
unsigned int count = 42;
/* setup */
setup_handle(SH_TRANS);
add_local_user(I_FIRST);
add_local_user(I_SECOND);
add_local_user(I_THIRD);
/* test */
CU_ASSERT(semanage_user_list_local(sh, &records, &count) >= 0);
CU_ASSERT(count == 3);
for (unsigned int i = 0; i < count; i++)
CU_ASSERT_PTR_NOT_NULL(records[i]);
/* cleanup */
for (unsigned int i = 0; i < count; i++)
semanage_user_free(records[i]);
delete_local_user(I_FIRST);
delete_local_user(I_SECOND);
delete_local_user(I_THIRD);
cleanup_handle(SH_TRANS);
}
Reference in New Issue View Git Blame Copy Permalink