• Home
  • Line#
  • Scopes#
  • Navigate#
  • Raw
  • Download
1import unittest
2import os
3import shutil
4from tempfile import mkdtemp
5from subprocess import Popen, PIPE
6
7
8class SepolicyTests(unittest.TestCase):
9
10    def assertDenied(self, err):
11        self.assert_('Permission denied' in err,
12                     '"Permission denied" not found in %r' % err)
13
14    def assertNotFound(self, err):
15        self.assert_('not found' in err,
16                     '"not found" not found in %r' % err)
17
18    def assertFailure(self, status):
19        self.assertNotEqual(status, 0,
20                     'Succeeded when it should have failed')
21
22    def assertSuccess(self, status, err):
23        self.assertEqual(status, 0,
24                     'sepolicy should have succeeded for this test %r' % err)
25
26    def test_man_domain(self):
27        "Verify sepolicy manpage -d works"
28        p = Popen(['sepolicy', 'manpage', '-d', 'httpd_t'], stdout=PIPE)
29        out, err = p.communicate()
30        self.assertSuccess(p.returncode, err)
31
32    def test_man_all(self):
33        "Verify sepolicy manpage -a works"
34        p = Popen(['sepolicy', 'manpage', '-a'], stdout=PIPE)
35        out, err = p.communicate()
36        self.assertSuccess(p.returncode, err)
37
38    def test_network_l(self):
39        "Verify sepolicy network -l works"
40        p = Popen(['sepolicy', 'network', '-l'], stdout=PIPE)
41        out, err = p.communicate()
42        self.assertSuccess(p.returncode, err)
43
44    def test_network_t(self):
45        "Verify sepolicy network -t works"
46        p = Popen(['sepolicy', 'network', '-t', 'http_port_t'], stdout=PIPE)
47        out, err = p.communicate()
48        self.assertSuccess(p.returncode, err)
49
50    def test_network_p(self):
51        "Verify sepolicy network -p works"
52        p = Popen(['sepolicy', 'network', '-p', '80'], stdout=PIPE)
53        out, err = p.communicate()
54        self.assertSuccess(p.returncode, err)
55
56    def test_network_d(self):
57        "Verify sepolicy network -d works"
58        p = Popen(['sepolicy', 'network', '-d', 'httpd_t'], stdout=PIPE)
59        out, err = p.communicate()
60        self.assertSuccess(p.returncode, err)
61
62    def test_transition_s(self):
63        "Verify sepolicy transition -s works"
64        p = Popen(['sepolicy', 'transition', '-s', 'httpd_t'], stdout=PIPE)
65        out, err = p.communicate()
66        self.assertSuccess(p.returncode, err)
67
68    def test_transition_t(self):
69        "Verify sepolicy transition -t works"
70        p = Popen(['sepolicy', 'transition', '-s', 'httpd_t', '-t', 'sendmail_t'], stdout=PIPE)
71        out, err = p.communicate()
72        self.assertSuccess(p.returncode, err)
73
74    def test_booleans_a(self):
75        "Verify sepolicy booleans -a works"
76        p = Popen(['sepolicy', 'booleans', '-a'], stdout=PIPE)
77        out, err = p.communicate()
78        self.assertSuccess(p.returncode, err)
79
80    def test_booleans_b_alias(self):
81        "Verify sepolicy booleans -b works"
82        p = Popen(['sepolicy', 'booleans', '-b', 'allow_ypbind'], stdout=PIPE)
83        out, err = p.communicate()
84        self.assertSuccess(p.returncode, err)
85
86    def test_booleans_b(self):
87        "Verify sepolicy booleans -b works"
88        p = Popen(['sepolicy', 'booleans', '-b', 'nis_enabled'], stdout=PIPE)
89        out, err = p.communicate()
90        self.assertSuccess(p.returncode, err)
91
92    def test_interface_l(self):
93        "Verify sepolicy interface -l works"
94        p = Popen(['sepolicy', 'interface', '-l'], stdout=PIPE)
95        out, err = p.communicate()
96        self.assertSuccess(p.returncode, err)
97
98    def test_interface_a(self):
99        "Verify sepolicy interface -a works"
100        p = Popen(['sepolicy', 'interface', '-a'], stdout=PIPE)
101        out, err = p.communicate()
102        self.assertSuccess(p.returncode, err)
103
104    def test_interface_p(self):
105        "Verify sepolicy interface -u works"
106        p = Popen(['sepolicy', 'interface', '-u'], stdout=PIPE)
107        out, err = p.communicate()
108        self.assertSuccess(p.returncode, err)
109
110    def test_interface_ci(self):
111        "Verify sepolicy interface -c -i works"
112        p = Popen(['sepolicy', 'interface', '-c', '-i', 'apache_admin'], stdout=PIPE)
113        out, err = p.communicate()
114        self.assertSuccess(p.returncode, err)
115
116if __name__ == "__main__":
117    import selinux
118    if selinux.is_selinux_enabled() and selinux.security_getenforce() == 1:
119        unittest.main()
120    else:
121        print("SELinux must be in enforcing mode for this test")
122