apparmor: add AppArmor KUnit tests for policy unpack
authorMike Salvatore <mike.salvatore@canonical.com>
Wed, 6 Nov 2019 00:43:29 +0000 (16:43 -0800)
committerShuah Khan <skhan@linuxfoundation.org>
Thu, 9 Jan 2020 23:27:43 +0000 (16:27 -0700)
commit4d944bcd4e731ab7bfe8d01a7041ea0ebdc090f1
tree87c144b491c5f4ff0cb9a5095a54ee6a0ef15994
parentc79f46a282390e0f5b306007bf7b11a46d529538
apparmor: add AppArmor KUnit tests for policy unpack

Add KUnit tests to test AppArmor unpacking of userspace policies.
AppArmor uses a serialized binary format for loading policies. To find
policy format documentation see
Documentation/admin-guide/LSM/apparmor.rst.

In order to write the tests against the policy unpacking code, some
static functions needed to be exposed for testing purposes. One of the
goals of this patch is to establish a pattern for which testing these
kinds of functions should be done in the future.

Signed-off-by: Brendan Higgins <brendanhiggins@google.com>
Signed-off-by: Mike Salvatore <mike.salvatore@canonical.com>
Acked-by: John Johansen <john.johansen@canonical.com>
Reviewed-by: Kees Cook <keescook@chromium.org>
Signed-off-by: Shuah Khan <skhan@linuxfoundation.org>
security/apparmor/Kconfig
security/apparmor/policy_unpack.c
security/apparmor/policy_unpack_test.c [new file with mode: 0644]