PERFORCE change 123935 for review
Zhouyi ZHOU
zhouzhouyi at FreeBSD.org
Mon Jul 23 05:52:01 UTC 2007
http://perforce.freebsd.org/chv.cgi?CH=123935
Change 123935 by zhouzhouyi at zhouzhouyi_mactest on 2007/07/23 05:51:13
Test unlink too
Affected files ...
.. //depot/projects/soc2007/zhouzhouyi_mactest_soc/regression/mactest/tests/link/00.t#2 edit
Differences ...
==== //depot/projects/soc2007/zhouzhouyi_mactest_soc/regression/mactest/tests/link/00.t#2 (text+ko) ====
@@ -7,7 +7,7 @@
dir=`dirname $0`
. ${dir}/../misc.sh
-echo "1..5"
+echo "1..9"
n0=`namegen`
n1=`namegen`
@@ -37,20 +37,48 @@
#############################################################
t=`sysctl security.mac.mls.enabled=1`
echo "enforcing mac/mls!"
-
+#case 1: mkdir
mactestexpect "" 0 -m "mls/low(low-high)" -f ${mactest_conf} mkdir ${n3} 0755
+#case 2: setfmac
mactestexpect "" "" -m "mls/low(low-high)" -f ${mactest_conf} system setfmac "mls/6" ${n3}
+#case 3: create
mactestexpect "" 0 -m "mls/6(low-high)" -f ${mactest_conf} create ${n3}/${n2} 0644
+#case 4: setfmac
mactestexpect "" "" -m "mls/6(low-high)" -f ${mactest_conf} system setfmac "mls/5" ${n3}/${n2}
+
+#case 5: link
+ echo -n "pid = -1 mac_test_check_vnode_link:" > ${mactest_conf}
+ echo "biba/high(low-high),mls/6(low-high) biba/high,mls/6 biba/high,mls/5" >> ${mactest_conf}
mactestexpect "" EACCES -m "mls/6(low-high)" -f ${mactest_conf} link ${n3}/${n2} ${n3}/${n1}
+#############################################################
+#case 6: unlink
+ echo -n "pid = -1 mac_test_check_vnode_delete:" > ${mactest_conf}
+ echo "biba/high(low-high),mls/6(low-high) biba/high,mls/6 biba/high,mls/5" >> ${mactest_conf}
+ mactestexpect "" EACCES -m "mls/6(low-high)" -f ${mactest_conf} unlink ${n3}/${n1}
+
+
+#case 7: setfmac fail, old vnode not in range
+ echo -n "pid = -2 mac_test_check_vnode_relabel:" > ${mactest_conf}
+ echo "biba/high(low-high),mls/6(6-6) biba/high,mls/5 biba/,mls/6" >> ${mactest_conf}
+ mactestexpect "setfmac:.mac_set_link.${n3}.${n1},.biba.,mls.6.:.Operation.not.permitted" "" -m "mls/6(6-6)" -f ${mactest_conf} system setfmac "biba/,mls/6" ${n3}/${n1}
+
+#case 8: setfmac success
+ echo -n "pid = -2 mac_test_check_vnode_relabel:" > ${mactest_conf}
+ echo "biba/high(low-high),mls/6(4-6) biba/high,mls/5 biba/,mls/6" >> ${mactest_conf}
+ mactestexpect "" "" -m "mls/6(4-6)" -f ${mactest_conf} system setfmac "biba/,mls/6" ${n3}/${n1}
+
+#case 9: unlink
+ rm ${mactest_conf}
+ touch ${mactest_conf}
+ mactestexpect "" 0 -m "mls/6(low-high)" -f ${mactest_conf} unlink ${n3}/${n1}
+
#cleanup:
t=`sysctl security.mac.mls.enabled=0`
echo "disabling mac/mls!"
- cd ..
-# rm -fr ${n3}
+ rm -fr ${n3}
rm ${mactest_conf}
fi
More information about the p4-projects
mailing list