def test_write_manually(self):
obj = NetworkRule('inet', 'stream', allow_keyword=True)
expected = ' allow network inet stream,'
self.assertEqual(expected, obj.get_clean(2), 'unexpected clean rule')
self.assertEqual(expected, obj.get_raw(2), 'unexpected raw rule')
def test_write_manually(self):
obj = NetworkRule('inet', 'stream', allow_keyword=True)
expected = ' allow network inet stream,'
self.assertEqual(expected, obj.get_clean(2), 'unexpected clean rule')
self.assertEqual(expected, obj.get_raw(2), 'unexpected raw rule')
def test_net_from_log(self):
parser = ReadLog('', '', '', '')
event = 'type=AVC msg=audit(1428699242.551:386): apparmor="DENIED" operation="create" profile="/bin/ping" pid=10589 comm="ping" family="inet" sock_type="raw" protocol=1'
parsed_event = parser.parse_event(event)
self.assertEqual(
parsed_event, {
'request_mask': None,
'denied_mask': None,
'error_code': 0,
'family': 'inet',
'magic_token': 0,
'parent': 0,
'profile': '/bin/ping',
'protocol': 'icmp',
'sock_type': 'raw',
'operation': 'create',
'resource': None,
'info': None,
'aamode': 'REJECTING',
'time': 1428699242,
'active_hat': None,
'pid': 10589,
'task': 0,
'attr': None,
'name2': None,
'name': None,
})
obj = NetworkRule(parsed_event['family'],
parsed_event['sock_type'],
log_event=parsed_event)
# audit allow deny comment domain all? type/proto all?
expected = exp(False, False, False, '', 'inet', False, 'raw', False)
self._compare_obj(obj, expected)
self.assertEqual(obj.get_raw(1), ' network inet raw,')
def test_net_from_log(self):
parser = ReadLog('', '', '', '', '')
event = 'type=AVC msg=audit(1428699242.551:386): apparmor="DENIED" operation="create" profile="/bin/ping" pid=10589 comm="ping" family="inet" sock_type="raw" protocol=1'
parsed_event = parser.parse_event(event)
self.assertEqual(parsed_event, {
'request_mask': None,
'denied_mask': None,
'error_code': 0,
'family': 'inet',
'magic_token': 0,
'parent': 0,
'profile': '/bin/ping',
'protocol': 'icmp',
'sock_type': 'raw',
'operation': 'create',
'resource': None,
'info': None,
'aamode': 'REJECTING',
'time': 1428699242,
'active_hat': None,
'pid': 10589,
'task': 0,
'attr': None,
'name2': None,
'name': None,
})
obj = NetworkRule(parsed_event['family'], parsed_event['sock_type'], log_event=parsed_event)
# audit allow deny comment domain all? type/proto all?
expected = exp(False, False, False, '' , 'inet', False, 'raw' , False)
self._compare_obj(obj, expected)
self.assertEqual(obj.get_raw(1), ' network inet raw,')
