From babd0604bd379a1a2e5a34aea12fe14199a21d4b Mon Sep 17 00:00:00 2001 From: Jooyung Han Date: Mon, 24 Apr 2023 15:34:49 +0900 Subject: [PATCH] Add linker.config.pb test In apex, ./etc/linker.config.pb file should be readable by linkerconfig. Bug: 218922042 Test: apex_sepolicy_tests_test Change-Id: Id41710dc127b5f5bda2d5bbb65271bcc0c5179b1 --- tests/apex_sepolicy_tests.py | 2 ++ tests/apex_sepolicy_tests_test.py | 5 +++++ 2 files changed, 7 insertions(+) diff --git a/tests/apex_sepolicy_tests.py b/tests/apex_sepolicy_tests.py index 2cdde3c72..0bcc99867 100644 --- a/tests/apex_sepolicy_tests.py +++ b/tests/apex_sepolicy_tests.py @@ -105,6 +105,8 @@ rules = [ # ./ and apex_manifest.pb (Is('./apex_manifest.pb'), AllowRead('file', {'linkerconfig', 'apexd'})), (Is('./'), AllowRead('dir', {'linkerconfig', 'apexd'})), + # linker.config.pb + (Is('./etc/linker.config.pb'), AllowRead('file', {'linkerconfig'})), ] diff --git a/tests/apex_sepolicy_tests_test.py b/tests/apex_sepolicy_tests_test.py index 125290c2d..9b427a0ee 100644 --- a/tests/apex_sepolicy_tests_test.py +++ b/tests/apex_sepolicy_tests_test.py @@ -88,6 +88,11 @@ class ApexSepolicyTests(unittest.TestCase): self.assert_ok('./etc/init.x32rc u:object_r:vendor_file:s0') self.assert_ok('./etc/init.x32rc u:object_r:unknown:s0') + def test_linkerconfig(self): + self.assert_ok('./etc/linker.config.pb u:object_r:system_file:s0') + self.assert_ok('./etc/linker.config.pb u:object_r:linkerconfig_file:s0') + self.assert_error('./etc/linker.config.pb u:object_r:vendor_file:s0', + r'Error: .*linkerconfig.* can\'t read') if __name__ == '__main__': unittest.main(verbosity=2)