diff options
author | Jamie Strandboge <jamie@canonical.com> | 2011-09-28 15:43:39 +0800 |
---|---|---|
committer | Daniel Veillard <veillard@redhat.com> | 2011-09-28 15:43:39 +0800 |
commit | 03d89991f24f67ec5900bd8bbe0b09dbd0f536e4 (patch) | |
tree | 05e3e3e922fd09f7473ab3e1babdb96408aaaafb /tests/virt-aa-helper-test | |
parent | virsh: Allow using complete <capabilities> elements with cpu-baseline (diff) | |
download | libvirt-03d89991f24f67ec5900bd8bbe0b09dbd0f536e4.tar.gz libvirt-03d89991f24f67ec5900bd8bbe0b09dbd0f536e4.tar.bz2 libvirt-03d89991f24f67ec5900bd8bbe0b09dbd0f536e4.zip |
fix AppArmor driver for pipe character devices
The AppArmor security driver adds only the path specified in the domain
XML for character devices of type 'pipe'. It should be using <path>.in
and <path>.out. We do this by creating a new vah_add_file_chardev() and
use it for char devices instead of vah_add_file(). Also adjust
valid_path() to accept S_FIFO (since qemu chardevs of type 'pipe' use
fifos). This is https://launchpad.net/bugs/832507
Diffstat (limited to 'tests/virt-aa-helper-test')
-rwxr-xr-x | tests/virt-aa-helper-test | 18 |
1 files changed, 18 insertions, 0 deletions
diff --git a/tests/virt-aa-helper-test b/tests/virt-aa-helper-test index c8bf398de..21a27666b 100755 --- a/tests/virt-aa-helper-test +++ b/tests/virt-aa-helper-test @@ -1,4 +1,10 @@ #!/bin/sh +# +# virt-aa-helper needs a working locale system. If testing this in a chroot +# system, need to make sure these are setup properly. On Debian-based systems +# this can be done with something like (as root): +# locale-gen en_US.UTF-8 + set -e test_hostdev="no" @@ -255,6 +261,10 @@ testme "0" "serial (pty)" "-r -u $valid_uuid" "$test_xml" sed -e "s,###UUID###,$uuid,g" -e "s,###DISK###,$disk1,g" -e "s,</devices>,<serial type='dev'><source path='/dev/ttyS0'/><target port='0'/></serial></devices>,g" "$template_xml" > "$test_xml" testme "0" "serial (dev)" "-r -u $valid_uuid" "$test_xml" +sed -e "s,###UUID###,$uuid,g" -e "s,###DISK###,$disk1,g" -e "s,</devices>,<serial type='pipe'><source path='$tmpdir/serial.pipe'/><target port='0'/></serial></devices>,g" "$template_xml" > "$test_xml" +mkfifo "$tmpdir/serial.pipe.in" "$tmpdir/serial.pipe.out" +testme "0" "serial (pipe)" "-r -u $valid_uuid" "$test_xml" + sed -e "s,###UUID###,$uuid,g" -e "s,###DISK###,$disk1,g" -e "s,</devices>,<console type='file'><source path='$tmpdir/console.log'/><target port='0'/></console></devices>,g" "$template_xml" > "$test_xml" touch "$tmpdir/console.log" testme "0" "console" "-r -u $valid_uuid" "$test_xml" @@ -262,9 +272,17 @@ testme "0" "console" "-r -u $valid_uuid" "$test_xml" sed -e "s,###UUID###,$uuid,g" -e "s,###DISK###,$disk1,g" -e "s,</devices>,<console type='pty'><target port='0'/></console></devices>,g" "$template_xml" > "$test_xml" testme "0" "console (pty)" "-r -u $valid_uuid" "$test_xml" +sed -e "s,###UUID###,$uuid,g" -e "s,###DISK###,$disk1,g" -e "s,</devices>,<console type='pipe'><source path='$tmpdir/console.pipe'/><target port='0'/></console></devices>,g" "$template_xml" > "$test_xml" +mkfifo "$tmpdir/console.pipe.in" "$tmpdir/console.pipe.out" +testme "0" "console (pipe)" "-r -u $valid_uuid" "$test_xml" + sed -e "s,###UUID###,$uuid,g" -e "s,###DISK###,$disk1,g" -e "s,</devices>,<parallel type='pty'><source path='/dev/pts/0'/><target port='0'/></parallel></devices>,g" "$template_xml" > "$test_xml" testme "0" "parallel (pty)" "-r -u $valid_uuid" "$test_xml" +sed -e "s,###UUID###,$uuid,g" -e "s,###DISK###,$disk1,g" -e "s,</devices>,<parallel type='pipe'><source path='$tmpdir/parallel.pipe'/><target port='0'/></parallel></devices>,g" "$template_xml" > "$test_xml" +mkfifo "$tmpdir/parallel.pipe.in" "$tmpdir/parallel.pipe.out" +testme "0" "parallel (pipe)" "-r -u $valid_uuid" "$test_xml" + sed -e "s,###UUID###,$uuid,g" -e "s,###DISK###,$disk1,g" -e "s,</devices>,<channel type='unix'><source mode='bind' path='$tmpdir/guestfwd'/><target type='guestfwd' address='10.0.2.1' port='4600'/></channel></devices>,g" "$template_xml" > "$test_xml" touch "$tmpdir/guestfwd" testme "0" "channel (unix)" "-r -u $valid_uuid" "$test_xml" |