Maciej J. Karpiuk [Mon, 8 Dec 2014 15:43:29 +0000 (16:43 +0100)]
Add test for using proper DKEK key to decrypt data.
Issue: another label is accessing data, while cached DKEK on data save
was already removed from the cache. This scenario was failing before
key-manager commit
4fe08778f9c31a698c6faace9b13fd6c5a4d9a7c.
Change-Id: I04c26c5ce5a86e83ab84ed78758984f7a0c2b5e4
Maciej J. Karpiuk [Thu, 13 Nov 2014 15:53:12 +0000 (16:53 +0100)]
CKM table separation: tests adjusted to new C++ API.
Change-Id: I74f742a75190fd66618cf0960836c3d7907059d4
Maciej J. Karpiuk [Fri, 28 Nov 2014 16:15:29 +0000 (17:15 +0100)]
Add tests for scenario trying to save/modify other label's data.
Change-Id: I3940c7c88cb1e8bbd4f11cc04eaef1755b72a246
Maciej J. Karpiuk [Wed, 26 Nov 2014 14:39:52 +0000 (15:39 +0100)]
Access Control layer: tests adjusted to C++ API changes.
Change-Id: Ia3b045ab7a935d37186dee37de730ddea4d0ec1b
Maciej J. Karpiuk [Wed, 19 Nov 2014 09:57:59 +0000 (10:57 +0100)]
Tests use new CC variable scheme (Disabled means device disabled, not CC-mode disabled).
Minor logging change in CAPI tests (error code was not logged).
Change-Id: I2bedc75da254ee87977453aac736861162890baa
Krzysztof Jackiewicz [Tue, 28 Oct 2014 17:02:04 +0000 (18:02 +0100)]
CommonCriteria tests refactored and updated
[Verification] Run ckm-tests --group=CKM_CC_MODE
Change-Id: Idb3e7a8d1e0df2913b3537d7cc4f109f12fffb0f
Krzysztof Jackiewicz [Thu, 30 Oct 2014 15:59:25 +0000 (16:59 +0100)]
Start&stop support added to DBusAccess
[Verification] Run security-server-tests-password --output=text
to make sure existing tests are not broken
Change-Id: Ib5b1353c5892fb3685ace4f8f6226ab842c07ec8
Maciej J. Karpiuk [Wed, 22 Oct 2014 10:28:56 +0000 (12:28 +0200)]
Alias is not unique user-wide: modified test set.
Change-Id: I90577f4eaf02c24f5c7d390820c9de6817fc2142
Maciej J. Karpiuk [Thu, 16 Oct 2014 13:25:04 +0000 (15:25 +0200)]
Add service-side data verification test.
Normally, data is validated on the client side.
New tests verify if data is verified on the service side.
Change-Id: Ia6f8ab71b8d03c0dea3140f4e2fb4bc175a26f9d
Marcin Niesluchowski [Mon, 15 Dec 2014 15:52:20 +0000 (16:52 +0100)]
Merge branch 'tizen' into ckm
Change-Id: I534565bfd910dca35be33ca57c4467ca634bf716
Rafal Krypa [Mon, 8 Dec 2014 12:00:11 +0000 (13:00 +0100)]
Drop unneeded dependency against dbus-glib-1
Change-Id: Id27aa959d0456c873ad3b5178b0f8b77a6d22a47
Marcin Niesluchowski [Mon, 13 Oct 2014 16:39:53 +0000 (18:39 +0200)]
Move Summary collector to test framework
Change-Id: Ief5a3b837382651bd030642c262d3c69c408a4bb
Marcin Niesluchowski [Mon, 13 Oct 2014 15:02:17 +0000 (17:02 +0200)]
Change FailStatus from struct to enum class
Change-Id: I9df26486b0b009e5f97b99358d0112556d87a700
Marcin Niesluchowski [Mon, 13 Oct 2014 14:21:47 +0000 (16:21 +0200)]
Remove INTERNAL type from FailStatus enum
INTERNAL fail status is treated as FAILED fail status. It is collected
in case of:
* DPL::Exception - should not be thrown by test cased body, as it is used
in test framework only
* std::exception - which implies that test case is not constructed well
or there is not enough resources, which may be also passed as Failed
state in RUNNER_* macros.
* other exceptions - same as std::exception
Change-Id: I8776622afcb9d01739f8780183ad4c5f364deb25
Bartlomiej Grzelewski [Fri, 28 Nov 2014 14:48:15 +0000 (15:48 +0100)]
Comment out all tests that were fixed in next version of CKM.
Change-Id: I638c51225da2ed8d7026fb133d503fdc671f35b5
Marcin Niesluchowski [Thu, 27 Nov 2014 17:47:10 +0000 (18:47 +0100)]
Merge branch 'tizen' into ckm
Change-Id: I1d9bf221dc53b1f41056ca81ffa399cb494f9c78
Rafal Krypa [Tue, 18 Nov 2014 10:37:34 +0000 (11:37 +0100)]
Don't provide perf binary, depend on it
Perf binary was provided in SLP as a work around for not having it
on the platform. This is no longer needed and harmful, because we
provided only the ARM binary, even for i686 and x86_64 builds.
Change-Id: I2157b7fd75a6ff3f713bf199d996c831a2f20673
Rafal Krypa [Tue, 18 Nov 2014 10:35:34 +0000 (11:35 +0100)]
Remove unneeded manual dependencies
Dependencies against shared libraries should be auto-generated.
Change-Id: I24c422b4f3488c0dacc63dbe2ac11d9ae026dfa4
Lukasz Wojciechowski [Mon, 24 Nov 2014 11:33:25 +0000 (12:33 +0100)]
Prevent running cynara service by masking
Before and after each testcase CynaraTestEnv runs code, that
saves and restores cynara's database. Cynara service is stopped
for that time, however it can be socket-activated and start during
critical moment of database modification.
To prevent such situation cynara is masked for critical sections.
Change-Id: I2dba7f9985121d92a2bb2ffd6318ec922022979c
Lukasz Wojciechowski [Mon, 24 Nov 2014 05:30:20 +0000 (06:30 +0100)]
Add methods for masking and unmasking service
Masking a service prevents the service from being started.
Unmasking allows to start service again. Both of these operations
are implemented to affect service only till device reboot.
Masking and unmasking service needs reloading configuration
of dbus manager. That is also done in implementation.
Change-Id: Ibbb64dbae6ed6aaa68b085f8a66d4810cecd22c1
Lukasz Wojciechowski [Mon, 24 Nov 2014 05:18:35 +0000 (06:18 +0100)]
Add method for getting service's pid
Systemd that is responsible for launching service provide information
about it's pid with dbus properties mechanism.
Change-Id: Ia56094ad776a758596b4344172a6109b3648365e
Lukasz Wojciechowski [Mon, 24 Nov 2014 04:31:40 +0000 (05:31 +0100)]
Handle job signals from systemd
A set of currently running jobs was added. Jobs are identified
with unique job path created by systemd.
Every time a start/stop/restart command is sent to systemd,
related job is added to set.
When JobNew signal is received its handler puts it also in the set.
Job is removed from the set, when JobRemoved signal is delivered from
systemd.
After each action generating a job in systemd unit (start/stop/restart)
program waits until all jobs from the set are removed.
Timeouts used earlier to "synchronize" action calls are removed.
Change-Id: Id944c9f52ecfeb06efabdb9424c835d09af7bb4f
Lukasz Wojciechowski [Mon, 24 Nov 2014 03:08:32 +0000 (04:08 +0100)]
Subscribe to dbus signals from systemd
Set bus matching filters for JobNew and JobRemove signals from systemd.
Subscribe to signals from systemd over dbus
Add dbus filter for all incoming messages (stub - empty body).
Change-Id: I516bf562d50a4e7a3933e0a1d5905bffb73dbc68
Lukasz Wojciechowski [Mon, 24 Nov 2014 02:42:53 +0000 (03:42 +0100)]
Cleanup DBusAccess
Remove not used variables and function.
Fix memory leak of not released objects in sendResetFailedToService().
Read object path data from dbus response.
Change-Id: I94e531fe6aef64de9eb8a1fc3e7fc8623727e697
Marcin Niesluchowski [Mon, 24 Nov 2014 13:18:23 +0000 (14:18 +0100)]
Ignore smack-dbus tests
Current dbus release does not support smack context in GetConnectionCredentials
method yet.
Change-Id: I58112e9702c04a634c149c5c2c3753404970cc87
Rafal Krypa [Mon, 24 Nov 2014 11:27:24 +0000 (12:27 +0100)]
Merge branch 'security-manager' into tizen
Conflicts:
tests/security-manager-tests/common/sm_db.cpp
tests/security-manager-tests/common/sm_db.h
tests/security-manager-tests/security_manager_tests.cpp
Change-Id: I69e6e9321ab58702086ba402e23a6d9b06e7fdb9
Rafal Krypa [Mon, 24 Nov 2014 10:19:41 +0000 (11:19 +0100)]
Merge branch 'cynara' into tizen
Conflicts:
tests/cynara-tests/common/cynara_test_admin.h
tests/cynara-tests/test_cases.cpp
Change-Id: I49296db7a8983f3aee1f4750852ea516e9d7f3a2
Marcin Lis [Tue, 18 Nov 2014 15:04:56 +0000 (16:04 +0100)]
security-manager tests: reorganize directories used and registered by apps
1. Move global user directories from /etc/smack/ to its home dir: /usr/apps/
2. Remove directories, functions and checks associated with
SECURITY_MANAGER_PATH_PUBLIC - it should not be used anymore and will be
removed.
[Verification] run security-manager-tests and ensure that all succeed.
Change-Id: Ifb04fd19b35cc226473159728d172525fbc44bdc
Signed-off-by: Marcin Lis <m.lis@samsung.com>
Rafal Krypa [Tue, 18 Nov 2014 14:37:33 +0000 (15:37 +0100)]
Require gum-utils, not libgum
In gumd 1.0.2 gum-utils tool has been split from package libgum into
separate package gum-utils.
Change-Id: Ia5903f1b5725e681545b56a1e581312a22443017
Marcin Niesluchowski [Mon, 17 Nov 2014 16:36:16 +0000 (17:36 +0100)]
Ignore tests failing on file label removal
Change-Id: Ib4f97f1bfdda0cf2229852096bf47582dc68aa3b
Aleksander Zdyb [Mon, 17 Nov 2014 12:16:32 +0000 (13:16 +0100)]
Fix build dependencies on Cynara
Change-Id: I3bb0ec78446999e2dfb7fe6e670fc586c113b5bf
Krzysztof Sasiak [Thu, 23 Oct 2014 11:53:58 +0000 (13:53 +0200)]
Update tests to work with group names instead of gids
Change-Id: Ia6ac604ca4d5369a486772d1f9f39fd57e1c3ecd
Michal Eljasiewicz [Tue, 4 Nov 2014 11:15:00 +0000 (12:15 +0100)]
security-server tests commented out from all tests
Change-Id: I549718922f98f08c242b9bde313ecad839392b8e
Signed-off-by: Michal Eljasiewicz <m.eljasiewic@samsung.com>
Michal Eljasiewicz [Wed, 5 Nov 2014 13:04:51 +0000 (14:04 +0100)]
security_server_tests_dbus moved to separate directory
tests moved out of security_server directory and renamed
Change-Id: If3a3aedecc91f43803dfb349ac6a06a79ed4eccd
Signed-off-by: Michal Eljasiewicz <m.eljasiewic@samsung.com>
Zbigniew Jasinski [Fri, 31 Oct 2014 11:11:20 +0000 (12:11 +0100)]
Extending security_manager_set_process_label_from_binary and
security_manager_set_process_label_from_appid for proper socket
labeling.
Added checking for proper socket Smack labeling. Implementation:
https://review.tizen.org/gerrit/27849
Change-Id: I3cf1f7a06615f7652fcefe6d89b2fe370d5f2ba5
Zbigniew Jasinski [Wed, 29 Oct 2014 09:10:26 +0000 (10:10 +0100)]
Test case for security_manager_drop_process_privileges function.
security_manager_drop_process_privileges implementation:
https://review.tizen.org/gerrit/27848
Change-Id: I17732780dad25f8c3ecdde3e9ad30781a87a6b69
Rafal Krypa [Tue, 4 Nov 2014 18:21:08 +0000 (19:21 +0100)]
Remove test for security_manager_set_process_label_from_binary()
Removing test for security-manager function that is now being removed
from security-manager (https://review.tizen.org/gerrit/27041).
Change-Id: I879016d2d0e87b7d0e1eafe982d4e25e61b2f71e
Signed-off-by: Rafal Krypa <r.krypa@samsung.com>
Michal Eljasiewicz [Tue, 4 Nov 2014 10:51:04 +0000 (11:51 +0100)]
libprivilege-control tests commented out from all tests
Change-Id: Id76b6b0ba3b9b5c2ee8948fb2078c44e5a444fdc
Signed-off-by: Michal Eljasiewicz <m.eljasiewic@samsung.com>
Lukasz Wojciechowski [Fri, 17 Oct 2014 18:27:59 +0000 (20:27 +0200)]
Check creation of maximal count of cynara requests
Request creating function should return CYNARA_API_MAX_PENDING_REQUESTS,
when maximal number of possible requests (2^16) is created.
Change-Id: Icdbbf6e6377a73892ccd8f4affa31756f6161414
Lukasz Wojciechowski [Fri, 17 Oct 2014 18:22:57 +0000 (20:22 +0200)]
Add CynaraTestAsync::Client::createRequest() method
Method can be used for testing cynara_async_create_request() API function.
Change-Id: Ib26d97a1a45451c014f3a495408f555c203bf834
Lukasz Wojciechowski [Fri, 17 Oct 2014 16:45:33 +0000 (18:45 +0200)]
Add test for checking CACHE_MISS when cache is empty
Change-Id: I5857cec7b8d8da2b281a60029648d70516a3c00f
Lukasz Wojciechowski [Fri, 17 Oct 2014 16:44:02 +0000 (18:44 +0200)]
Add CynaraTestAsync::Client::checkCache() method
Method can be used to test cynara_async_check_cache() API function.
Change-Id: Ibc7009362bec2cfdc90472299d3bfdf155f186c3
Lukasz Wojciechowski [Fri, 17 Oct 2014 14:15:43 +0000 (16:15 +0200)]
Add CynaraTestAsync::RequestMonitor class
Added class shall be used for monitoring all requests, matching
callbacks and checking expected causes and responses in callbacks.
Change-Id: I0ddb2d8848d80950d430f768510c6466144b399d
Lukasz Wojciechowski [Thu, 16 Oct 2014 17:23:13 +0000 (19:23 +0200)]
Create cynara_async_tests group
Create a test group for asynchronous API tests
and add CynaraTestAsync::Client initialization test.
Change-Id: I0e8cc37cd16282a7834cc61dd72e1aa90fb9129e
Lukasz Wojciechowski [Thu, 16 Oct 2014 17:21:58 +0000 (19:21 +0200)]
Add CynaraTestAsync::Client
This is a class that will wrap usage of libcynara-client-async API.
Change-Id: I89124b57c811e016854122fec6b2cf0ddbaa0525
Lukasz Wojciechowski [Thu, 16 Oct 2014 17:10:49 +0000 (19:10 +0200)]
Add RUNNER_ERROR_MSG(message) macro
Macro can be used to print error messages during test runtime.
Sometimes there is a need to print out important information
that are related to error that happen during test run, but it is
impossible to do that with RUNNER_ASSERT... macros because
an exception is alredy thrown.
Change-Id: I574af27bba7c20f21e2c6f9fc0b808f7ed9675ed
Lukasz Wojciechowski [Thu, 16 Oct 2014 15:25:13 +0000 (17:25 +0200)]
Add CynaraTestAsync::StatusMonitor
Added class wraps functionality of status callbacks.
Change-Id: I8c42a80d02b9092e89d930367632110ca33e3fa9
Marcin Niesluchowski [Thu, 23 Oct 2014 11:32:38 +0000 (13:32 +0200)]
Fix security_manager_05_app_install_uninstall_by_uid_5000
User app (uid 5000) used for tests has been removed from system.
Due to this chage security-manager can not find it in /etc/passwd.
Special user is created in %post section and is removed in %postun
section. Current test name:
security_manager_05_app_install_uninstall_by_app_user
Change-Id: Ia2eec416b44fe216b08f1fc29ec46826621ad796
Lukasz Wojciechowski [Thu, 16 Oct 2014 14:01:55 +0000 (16:01 +0200)]
Add licence and copyright header to cynara test files
Change-Id: I4cb894b91b076c6475f8c285966dd2bacc0ff64d
Rafal Krypa [Tue, 21 Oct 2014 11:35:55 +0000 (13:35 +0200)]
One missing fix for cynara_check return code
Commit
1c357c269b should also adjust tests for security-manager.
Changing expected return code of cynara_check from CYNARA_API_SUCCESS
to CYNARA_API_ACCESS_ALLOWED.
Change-Id: I4f1ad908f0d91f91af9dec9a701f8f41504730dc
Marcin Niesluchowski [Wed, 22 Oct 2014 11:34:10 +0000 (13:34 +0200)]
Merge remote-tracking branch 'tizen-gerrit/cynara' into HEAD
Change-Id: Id5089ff0e604c1608038d68ffc5d5e041a2d29d7
Marcin Niesluchowski [Wed, 22 Oct 2014 11:10:37 +0000 (13:10 +0200)]
Merge commit '
af35045308e6b0221690b420f530e53ce6c2fbad' into HEAD
Change-Id: Ib16081848a41ef480360b31a14bb9a9bc4786c3f
Marcin Niesluchowski [Mon, 13 Oct 2014 13:05:27 +0000 (15:05 +0200)]
Move HTML collector to separate files
Change-Id: I9e3d507cbde42bced1daac0eae351c55b925a63c
Marcin Niesluchowski [Mon, 13 Oct 2014 11:39:02 +0000 (13:39 +0200)]
Move Console collector to separate files
Change-Id: Ia7c23d144db858f94eac34e79e12dd11faad9de4
Marcin Niesluchowski [Mon, 13 Oct 2014 09:09:48 +0000 (11:09 +0200)]
Move XML collector to separate files
Change-Id: I7c82a9415bbf9969ab2bc5bc008878b8b61bbcc4
Marcin Niesluchowski [Mon, 13 Oct 2014 09:42:33 +0000 (11:42 +0200)]
Move statistic class to separate file
Change-Id: Ife2fd4e0e2952d6145096a8c4de14ed5bbfdb369
Marcin Niesluchowski [Mon, 13 Oct 2014 08:24:02 +0000 (10:24 +0200)]
Remove CSV collector
Change-Id: Iae8c4bbb7cfd415e228426885f224412122ce52f
Marcin Niesluchowski [Mon, 13 Oct 2014 08:13:47 +0000 (10:13 +0200)]
Remove TAP collector
Change-Id: Ie9022778cf489eaaba0177ba8b84c5d0dd425fdb
Marcin Niesluchowski [Mon, 13 Oct 2014 13:21:49 +0000 (15:21 +0200)]
Remove unnecessary includes from test_results_collector.cpp
Change-Id: I7caaf12269eb63f1a1e7ec2dc3afaa203aa8ad82
Marcin Niesluchowski [Tue, 21 Oct 2014 09:34:12 +0000 (11:34 +0200)]
Revert commits to cynara tests
Some commits to cynara tests making security-tests not buildable
with cynara release.
This reverts commits:
1c357c2 "Fix cynara_check return codes"
d2eb84f "Add tests for cynara_admin_check function"
a58d784 "Enhance CynaraTestAdmin with adminCheck() method"
e0b08a3 "Add tests for none bucket"
Change-Id: If344771ef62de103c24cd551cd40a6b9b8be44a3
Marcin Niesluchowski [Tue, 21 Oct 2014 09:43:03 +0000 (11:43 +0200)]
Revert commits to security-manager tests
Some commits to security-manager tests making security-tests not buildable
with security-manager release.
This reverts commits:
e3e2809 "security-manager: test security_manager_set_process_groups_from_appid"
Change-Id: I009c33811a3af23451e5cac6db142a555f248408
Bartlomiej Grzelewski [Mon, 20 Oct 2014 13:23:53 +0000 (15:23 +0200)]
Adopt test to newer version of libsmack.
Change-Id: I1e908016923dc489f6fd1c82dc6409e10106859c
Bartlomiej Grzelewski [Thu, 16 Oct 2014 17:16:20 +0000 (19:16 +0200)]
Move smack_access and access_provider to ckm test.
Change-Id: I5098846a2edcb7597252f2ab08444f6428c73cc7
Krzysztof Jackiewicz [Tue, 23 Sep 2014 08:04:16 +0000 (10:04 +0200)]
Add remaining Async API tests
run ckm-tests --group=CKM_ASYNC_API
Change-Id: I0b270ade92c88b946dc8a9b6eefa542e391572ea
Krzysztof Jackiewicz [Tue, 7 Oct 2014 06:57:00 +0000 (08:57 +0200)]
Common ckm functions moved to separate file
Change-Id: Iddca880cf7824b0696d3375cb8cb391b29df183a
Krzysztof Jackiewicz [Mon, 25 Aug 2014 16:00:01 +0000 (18:00 +0200)]
Add tests for async ckm API - saveKey
Change-Id: I5caf324c5861a44edb613bf11e52fd02f270d27f
Krzysztof Jackiewicz [Tue, 30 Sep 2014 06:27:21 +0000 (08:27 +0200)]
Access control tests
run with: ckm-tests --group=T300_CKMC_ACCESS_CONTROL_C_API
Change-Id: I0d7fcf254a4df705155a535957f380bf8d77db17
kyungwook tak [Wed, 1 Oct 2014 05:57:09 +0000 (14:57 +0900)]
Restore cc mode status to off in deinit
Change-Id: I1ae644057580248a8134d7c47101bbfce4ad72d5
Signed-off-by: kyungwook tak <k.tak@samsung.com>
kyungwook tak [Wed, 1 Oct 2014 04:46:45 +0000 (13:46 +0900)]
Rebase TC and TC Group numbering
Change-Id: Ic8f4346a5c863347d054ee033a694bb0a6892224
Signed-off-by: kyungwook tak <k.tak@samsung.com>
yuseok.jeon [Tue, 30 Sep 2014 06:37:12 +0000 (15:37 +0900)]
Add test cases related to the CC mode change
Change-Id: Iea9d634f9e61f730dc600216dc177218d3ff3cf7
Dongsun Lee [Fri, 26 Sep 2014 10:34:14 +0000 (19:34 +0900)]
add test for HASH_NONE and NO_PADDING algo
Change-Id: I262202949af148cb0433260965718ee3fff9627a
Signed-off-by: Dongsun Lee <ds73.lee@samsung.com>
Bartlomiej Grzelewski [Thu, 16 Oct 2014 14:21:51 +0000 (16:21 +0200)]
Add DSA tests.
Generating and importing DSA keys.
Importing certificates with DSA public key.
Certificate verification & negative testing.
Get alias list little code refactoring.
Change-Id: I06947f8fe1e4eec8cba346c223410661aa376ec4
Lukasz Wojciechowski [Thu, 16 Oct 2014 08:21:42 +0000 (10:21 +0200)]
Adjust libcynara-admin error codes
Cynara integrates error codes in all libraries.
Release 0.4.0 uses new unified error codes.
Old error codes are removed.
This patch changes old error codes into new ones.
Please do not merge this patch until 0.4.0 is released
or patch "35771f4 Use client error codes in admin libraries"
in cynara repository is merged.
Change-Id: I7d89945a075b9353399b417f1fce5ef8a06694c4
José Bollo [Tue, 14 Oct 2014 15:39:19 +0000 (17:39 +0200)]
Building: better handling of deprecated
It is useful to keep deprecated items as warning.
For doing that, this new option is needed.
Change-Id: Iaf140652f40d8a990d246741091119106c7b132b
Signed-off-by: José Bollo <jose.bollo@open.eurogiciel.org>
Lukasz Wojciechowski [Thu, 9 Oct 2014 16:28:29 +0000 (18:28 +0200)]
Fix cynara_check return codes
After merging "151ad89 Change client API error codes"
into cynara values returned by cynara_check() changed.
In case of access allowed cynara_check returns
CYNARA_API_ACCESS_ALLOWED instead of CYNARA_API_SUCCESS.
Change-Id: I98ff68068c9c67648601c339b0ff51af7e3e1280
Lukasz Wojciechowski [Tue, 23 Sep 2014 15:56:03 +0000 (17:56 +0200)]
Add tests for cynara_admin_check function
cynara_admin_check() function provides simmilar functionality to
cynara_check() from client's API. Differences between those two are:
* admin version can start check search in any given bucket;
* admin version can constrain search to single bucket (no recursion);
* in admin version policy types are returned without being interpreted
by plugins in cynara service (e.g. no UI popups are launched).
There are 4 tests added:
* tc16_admin_check_single_bucket - for trivial single bucket checks;
* tc17_admin_check_nested_bucket - for testing proper check search
scope (recursion and start bucket);
* tc18_admin_check_multiple_matches - for testing if minimum policy
is found, when there is more than a single policy matching;
* tc19_admin_check_none_bucket - for testing proper behaviour, when
default and only matching policy in bucket is of type NONE.
Verification:
After cynara patch https://review.tizen.org/gerrit/27971 is applied
test should pass. They can fail before due to policy types enumeration
inconsistency between external and internal caynara layers.
Change-Id: Ia37df3491fbc31beb9c638daa515ce5a6b92eb59
Lukasz Wojciechowski [Mon, 22 Sep 2014 14:03:36 +0000 (16:03 +0200)]
Enhance CynaraTestAdmin with adminCheck() method
adminCheck() method allows running and checking result of
cynara_admin_check() form libcynara-admin API.
It asserts result of cynara_admin_check() function call
and values of check results with expected values.
Change-Id: Id2a35b3b1f43f2802ccee14355b6efb8a5f5c511
Marcin Niesluchowski [Mon, 1 Sep 2014 09:38:06 +0000 (11:38 +0200)]
Make expected result of cynara client check default
Change-Id: If5e51ff720c8b03aa2d3beabefce459b65306fca
Marcin Niesluchowski [Wed, 20 Aug 2014 09:13:28 +0000 (11:13 +0200)]
Add tests for none bucket
Change-Id: I546ded4f234470ab3754338080ab9800dde18279
Rafal Krypa [Tue, 16 Sep 2014 14:28:07 +0000 (16:28 +0200)]
security-manager: test security_manager_set_process_groups_from_appid
New security-manager API supports setting process groups based on
privilege settings. This is intended for launchers. Check it during
application installation check to verify if gid-mapped privileges
are handled correctly.
Change-Id: Ie558bf985dbbc5cd1451ae743aa2f26f519fef5e
Signed-off-by: Rafal Krypa <r.krypa@samsung.com>
Rafal Krypa [Fri, 12 Sep 2014 15:14:25 +0000 (17:14 +0200)]
security-manager: drop testing of obsolete TIZENEXEC label on symlinks
This feature is just being removed from security-manager. No labels
will be set on symlinks.
Change-Id: I9f19cb0b4f2d273407654f9e04f15d6d4823ed05
Signed-off-by: Rafal Krypa <r.krypa@samsung.com>
Rafal Krypa [Fri, 12 Sep 2014 15:10:27 +0000 (17:10 +0200)]
security-manager: use Smack label for verifying Cynara rules, not pkgId
Since security-manager doesn't provide function for that, tests
need to reimplement it. It should be kept in line with security-manager
code. For now there is only one label for all apps: "User".
Change-Id: I79eafea8c38bb86a3ec775a851d7e7605c1865e8
Signed-off-by: Rafal Krypa <r.krypa@samsung.com>
Lukasz Wojciechowski [Mon, 15 Sep 2014 12:17:57 +0000 (14:17 +0200)]
Check integrity after partial policy set
cynara_admin_set_policy() API function sets whole collection of policies
in single call. Setting some of them may fail. In such case no policies
should be applied to cynara service.
This test confirms existance of detected bug. Try to set 2 policies
(one good and one that is not allowed) leads to setPolicies() error,
however 1st policy remains in cynara's storage.
Verification: until bug is fixed in cynara's storage test should fail.
Change-Id: I3449ccbcfacb03bdcdc7a5cfb4a3b639d9b694ce
Maciej J. Karpiuk [Wed, 17 Sep 2014 09:45:37 +0000 (11:45 +0200)]
Added ckm tests.
Change-Id: I69ba5318e73ee9f6844787f2ba6a29afec293f45
Aleksander Zdyb [Wed, 3 Sep 2014 06:11:47 +0000 (08:11 +0200)]
Add include for strerror()
Change-Id: Idf24aaca911199e40b87c78ac2dd4c03d378afbd
Marcin Niesluchowski [Wed, 27 Aug 2014 07:51:12 +0000 (09:51 +0200)]
Change NULL to nullptr
Change-Id: I316a253e25a2460c9e2ff85a791550073ebde51a
Marcin Niesluchowski [Wed, 30 Jul 2014 10:41:12 +0000 (12:41 +0200)]
Adjust README to actual version of security-tests
Change-Id: I575d19fb5abe525b168c1610ed24ca70f9d684c0
Marcin Niesluchowski [Mon, 18 Aug 2014 09:34:44 +0000 (11:34 +0200)]
Use SocketUniquePtr in libprivilege-control tests
Change-Id: I47a95cf3f8d6e4c830d1c26e1bfef70ed78747e3
Marcin Niesluchowski [Wed, 30 Jul 2014 07:54:08 +0000 (09:54 +0200)]
Reorder and change test macros
Change-Id: Id05a92516053ca7128198fe61f8f5c805637d645
Jan Cybulski [Tue, 12 Aug 2014 10:54:57 +0000 (12:54 +0200)]
Adjust security-manager tests
Security-manager is no longer using libprivilege-control
Tests should now use cynara to check if privileges
were granted during application installation.
Change-Id: I4a0fea8edfad31cb9265c89b9498d6fd27d47676
Jan Cybulski [Thu, 7 Aug 2014 06:31:48 +0000 (08:31 +0200)]
Allow to run tests without arguments
If no arguments are given, then tests will be run
as if argument was '--output=text', which already
implemented. The only obstracle is check for number
of arguments that is removed in this commit.
To verify this just run any tests without arguments.
Change-Id: I17f60518d6d137c12a5a53f7852653e5f07d7599
Signed-off-by: Jan Cybulski <j.cybulski@samsung.com>
Marcin Niesluchowski [Mon, 28 Jul 2014 08:49:13 +0000 (10:49 +0200)]
Move test framework from wrt-commons to security-tests
Change-Id: If185e7401ded389f40d1a07e610c5d999ff152c1
Jan Cybulski [Fri, 18 Jul 2014 07:59:10 +0000 (09:59 +0200)]
Add tests for installing apps by different users
Change-Id: I65f78b92c974f5711f91a526593e4d222e1bd43b
Marcin Niesluchowski [Tue, 15 Jul 2014 16:54:35 +0000 (18:54 +0200)]
Add cynara test environment class
Change-Id: I6a83f3aab6e5ff4de4d6a9092b0b882af0eb22be
Marcin Niesluchowski [Thu, 17 Jul 2014 17:06:37 +0000 (19:06 +0200)]
Add extra bucket cynara tests
Change-Id: I195ac63e423b79b422978003892d78b863cfc2e0
Marcin Niesluchowski [Thu, 17 Jul 2014 13:48:23 +0000 (15:48 +0200)]
Add single wildcard policies cynara test
Change-Id: If3dc244bcc93b6d02c981fcb3f9cd5cbc7004705
Marcin Niesluchowski [Thu, 17 Jul 2014 11:43:59 +0000 (13:43 +0200)]
Add allow remove set policies cynara tests
Change-Id: I4be35a4242e381fbac176ad5591d2a90e50dc423
Marcin Niesluchowski [Thu, 17 Jul 2014 09:29:43 +0000 (11:29 +0200)]
Add empty bucket cynara tests
Change-Id: Ie3eb6ece201e31490e72180d0c4f53397c8976e8
Marcin Niesluchowski [Tue, 15 Jul 2014 17:34:43 +0000 (19:34 +0200)]
Add cynara invalid params tests
Change-Id: I45a63f43911c57b2d1ceb8b69410e41b527066bc
Marcin Niesluchowski [Wed, 9 Jul 2014 13:52:12 +0000 (15:52 +0200)]
Add cynara test client class
Change-Id: I8ef613c06d5fbe2a3764aaac7fa1b0b1009a860b