#!/usr/bin/env python3 # Unit tests for genseccomp.py import textwrap import unittest import genseccomp class TestGenseccomp(unittest.TestCase): def test_convert_NRs_to_ranges(self): ranges = genseccomp.convert_NRs_to_ranges([("b", 2), ("a", 1)]) self.assertEqual(len(ranges), 1) self.assertEqual(ranges[0].begin, 1) self.assertEqual(ranges[0].end, 3) self.assertEqual(set(ranges[0].names), {"a", "b"}) ranges = genseccomp.convert_NRs_to_ranges([("b", 3), ("a", 1)]) self.assertEqual(len(ranges), 2) self.assertEqual(ranges[0].begin, 1) self.assertEqual(ranges[0].end, 2) self.assertEqual(set(ranges[0].names), {"a"}) self.assertEqual(ranges[1].begin, 3) self.assertEqual(ranges[1].end, 4) self.assertEqual(set(ranges[1].names), {"b"}) def test_convert_to_intermediate_bpf(self): ranges = genseccomp.convert_NRs_to_ranges([("b", 2), ("a", 1)]) bpf = genseccomp.convert_to_intermediate_bpf(ranges) self.assertEqual(bpf, ['BPF_JUMP(BPF_JMP|BPF_JGE|BPF_K, 3, {fail}, {allow}), //a|b']) ranges = genseccomp.convert_NRs_to_ranges([("b", 3), ("a", 1)]) bpf = genseccomp.convert_to_intermediate_bpf(ranges) self.assertEqual(bpf, ['BPF_JUMP(BPF_JMP|BPF_JGE|BPF_K, 3, 1, 0),', 'BPF_JUMP(BPF_JMP|BPF_JGE|BPF_K, 2, {fail}, {allow}), //a', 'BPF_JUMP(BPF_JMP|BPF_JGE|BPF_K, 4, {fail}, {allow}), //b']) def test_convert_ranges_to_bpf(self): ranges = genseccomp.convert_NRs_to_ranges([("b", 2), ("a", 1)]) bpf = genseccomp.convert_ranges_to_bpf(ranges, priority_syscalls=[]) self.assertEqual(bpf, ['BPF_JUMP(BPF_JMP|BPF_JGE|BPF_K, 1, 0, 2),', 'BPF_JUMP(BPF_JMP|BPF_JGE|BPF_K, 3, 1, 0), //a|b', 'BPF_STMT(BPF_RET|BPF_K, SECCOMP_RET_ALLOW),']) ranges = genseccomp.convert_NRs_to_ranges([("b", 3), ("a", 1)]) bpf = genseccomp.convert_ranges_to_bpf(ranges, priority_syscalls=[]) self.assertEqual(bpf, ['BPF_JUMP(BPF_JMP|BPF_JGE|BPF_K, 1, 0, 4),', 'BPF_JUMP(BPF_JMP|BPF_JGE|BPF_K, 3, 1, 0),', 'BPF_JUMP(BPF_JMP|BPF_JGE|BPF_K, 2, 2, 1), //a', 'BPF_JUMP(BPF_JMP|BPF_JGE|BPF_K, 4, 1, 0), //b', 'BPF_STMT(BPF_RET|BPF_K, SECCOMP_RET_ALLOW),']) def test_convert_bpf_to_output(self): output = genseccomp.convert_bpf_to_output(["line1", "line2"], "arm", name_modifier="") expected_output = textwrap.dedent("""\ // File autogenerated by genseccomp.py - edit at your peril!! #include #include #include "seccomp/seccomp_bpfs.h" const sock_filter arm_filter[] = { line1 line2 }; const size_t arm_filter_size = sizeof(arm_filter) / sizeof(struct sock_filter); """) self.assertEqual(output, expected_output) if __name__ == '__main__': unittest.main()