def test_123_include_perm(self):
"""PermMap include permission."""
permmap = PermissionMap("tests/perm_map")
permmap.exclude_permission("infoflow", "med_w")
self.validate_permmap_entry(permmap.permmap, 'infoflow', 'med_w', 'w', 5, False)
permmap.include_permission("infoflow", "med_w")
self.validate_permmap_entry(permmap.permmap, 'infoflow', 'med_w', 'w', 5, True)
def test_123_include_perm(self):
"""PermMap include permission."""
permmap = PermissionMap("tests/perm_map")
permmap.exclude_permission("infoflow", "med_w")
self.validate_permmap_entry(permmap._permmap, 'infoflow', 'med_w', 'w',
5, False)
permmap.include_permission("infoflow", "med_w")
self.validate_permmap_entry(permmap._permmap, 'infoflow', 'med_w', 'w',
5, True)
def test_147_weight_excluded_permission(self):
"""PermMap get weight of a rule with excluded permission."""
rule = Mock()
rule.ruletype = TERuletype.allow
rule.tclass = "infoflow"
rule.perms = set(["med_r", "hi_r"])
permmap = PermissionMap("tests/perm_map")
permmap.exclude_permission("infoflow", "hi_r")
r, w = permmap.rule_weight(rule)
self.assertEqual(r, 5)
self.assertEqual(w, 0)
def test_147_weight_excluded_permission(self):
"""PermMap get weight of a rule with excluded permission."""
rule = Mock()
rule.ruletype = "allow"
rule.tclass = "infoflow"
rule.perms = set(["med_r", "hi_r"])
permmap = PermissionMap("tests/perm_map")
permmap.exclude_permission("infoflow", "hi_r")
r, w = permmap.rule_weight(rule)
self.assertEqual(r, 5)
self.assertEqual(w, 0)
def test_122_exclude_perm_unmapped_perm(self):
"""PermMap exclude permission unmapped permission."""
permmap = PermissionMap("tests/perm_map")
with self.assertRaises(UnmappedPermission):
permmap.exclude_permission("infoflow", "UNMAPPED")
def test_121_exclude_perm_unmapped_class(self):
"""PermMap exclude permission unmapped class."""
permmap = PermissionMap("tests/perm_map")
with self.assertRaises(UnmappedClass):
permmap.exclude_permission("UNMAPPED", "med_w")
def test_122_exclude_perm_unmapped_perm(self):
"""PermMap exclude permission unmapped permission."""
permmap = PermissionMap("tests/perm_map")
with self.assertRaises(UnmappedPermission):
permmap.exclude_permission("infoflow", "UNMAPPED")
def test_121_exclude_perm_unmapped_class(self):
"""PermMap exclude permission unmapped class."""
permmap = PermissionMap("tests/perm_map")
with self.assertRaises(UnmappedClass):
permmap.exclude_permission("UNMAPPED", "med_w")
