XCVMKit-OS/support/testing/tests/core/test_selinux.py

import os

import infra.basetest


class TestSELinuxInfra(infra.basetest.BRTest):
    config = infra.basetest.BASIC_TOOLCHAIN_CONFIG +\
        """
        BR2_PACKAGE_REFPOLICY=y
        BR2_PACKAGE_PYTHON3=y
        BR2_PACKAGE_SETOOLS=y
        BR2_TARGET_ROOTFS_CPIO=y
        """

    def base_test_run(self):
        cpio_file = os.path.join(self.builddir, "images", "rootfs.cpio")
        self.emulator.boot(arch="armv5", kernel="builtin",
                           options=["-initrd", cpio_file])
        self.emulator.login()


class TestSELinuxExtraModules(TestSELinuxInfra):
    config = TestSELinuxInfra.config + \
        """
        BR2_REFPOLICY_EXTRA_MODULES="ntp tor"
        """

    def test_run(self):
        TestSELinuxInfra.base_test_run(self)

        out, ret = self.emulator.run("seinfo -t ntpd_t", 15)
        self.assertEqual(ret, 0)
        self.assertEqual(out[2].strip(), "ntpd_t")

        out, ret = self.emulator.run("seinfo -t tor_t", 15)
        self.assertEqual(ret, 0)
        self.assertEqual(out[2].strip(), "tor_t")


class TestSELinuxExtraModulesDirs(TestSELinuxInfra):
    config = TestSELinuxInfra.config + \
        """
        BR2_REFPOLICY_EXTRA_MODULES_DIRS="{}"
        """.format(infra.filepath("tests/core/test_selinux/extra_modules"))

    def test_run(self):
        TestSELinuxInfra.base_test_run(self)

        out, ret = self.emulator.run("seinfo -t buildroot_test_t", 15)
        self.assertEqual(ret, 0)
        self.assertEqual(out[2].strip(), "buildroot_test_t")


class TestSELinuxCustomGit(TestSELinuxInfra):
    config = TestSELinuxInfra.config + \
        """
        BR2_PACKAGE_REFPOLICY_CUSTOM_GIT=y
        BR2_PACKAGE_REFPOLICY_CUSTOM_REPO_URL="https://github.com/SELinuxProject/refpolicy.git"
        BR2_PACKAGE_REFPOLICY_CUSTOM_REPO_VERSION="RELEASE_2_20200818"
        """

    def test_run(self):
        pass


class TestSELinuxPackage(TestSELinuxInfra):
    br2_external = [infra.filepath("tests/core/test_selinux/br2_external")]
    config = TestSELinuxInfra.config + \
        """
        BR2_PACKAGE_SELINUX_TEST=y
        """

    def test_run(self):
        TestSELinuxInfra.base_test_run(self)

        out, ret = self.emulator.run("seinfo -t ntpd_t", 15)
        self.assertEqual(ret, 0)
        self.assertEqual(out[2].strip(), "ntpd_t")

        out, ret = self.emulator.run("seinfo -t tor_t", 15)
        self.assertEqual(ret, 0)
        self.assertEqual(out[2].strip(), "tor_t")

        out, ret = self.emulator.run("seinfo -t buildroot_test_t", 15)
        self.assertEqual(ret, 0)
        self.assertEqual(out[2].strip(), "buildroot_test_t")