Fix security-test

- Add rule ~PROCESS ~PROCESS, rxxat for the same non-hybrid app label.

Change-Id: I749a37bc2d2b63e31ceeb187bc466b1a2c191e1b

diff --git a/test/smack_rule_test/checksmackrule_loaded.sh b/test/smack_rule_test/checksmackrule_loaded.sh
index f8e12d149a8b791526a0418e239936184b00c6c9..99f213f6391c1f9b662cc3612e13ba5456e324dd 100755 (executable)
--- a/test/smack_rule_test/checksmackrule_loaded.sh
+++ b/test/smack_rule_test/checksmackrule_loaded.sh
@@ -533,6 +533,15 @@ function RULE_CHECK
                then
                        return 0
                fi
+       # ~PROCESS ~PROCESS, same label, rwxat
+       elif [[ "$1" == "User::Pkg::"* ]] && [ "$1" == "$2" ]
+       then
+               pkgname=$(/bin/echo ${1##User::Pkg::})
+               ishybrid=$(/usr/bin/sqlite3 $dbpath "select DISTINCT is_hybrid from user_app_pkg_view where pkg_name='$pkgname';")
+               if [ "$3" == "rwxat" ] && [ "$ishybrid" == "0" ]
+               then
+                       return 0
+               fi 
        fi
 
        EXCEPTION_CHECK $1 $2 $3

diff --git a/test/smack_rule_test/checksmackrule_saved.sh b/test/smack_rule_test/checksmackrule_saved.sh
index c7fcdc0f687251463105fa6c13dbc754afd29b68..e6725e9b88f9b349c45ab0d20cb84aa3663b8125 100755 (executable)
--- a/test/smack_rule_test/checksmackrule_saved.sh
+++ b/test/smack_rule_test/checksmackrule_saved.sh
@@ -534,6 +534,15 @@ function RULE_CHECK
                then
                        return 0
                fi
+       # ~PROCESS ~PROCESS, same label, rwxat
+       elif [[ "$1" == "User::Pkg::"* ]] && [ "$1" == "$2" ]
+       then
+               pkgname=$(/bin/echo ${1##User::Pkg::})
+               ishybrid=$(/usr/bin/sqlite3 $dbpath "select DISTINCT is_hybrid from user_app_pkg_view where pkg_name='$pkgname';")
+               if [ "$3" == "rwxat-" ] && [ "$ishybrid" == "0" ]
+               then
+                       return 0
+               fi 
        fi
 
        EXCEPTION_CHECK $1 $2 $3