lp:~georgiag/qa-regression-testing

Author: Georgia Garcia
Author Date: 2024-02-05 19:14:03 UTC

test-apparmor.py handle unprivileged_userns transition in userns tests

There is a kernel feature, available under
namespaces/userns_create/pciu&, that enables the transition of
unconfined tasks to a special profile called unprivileged_userns when
they try to create an unprivileged user namespace with
clone/unshare. This transition allows the creation of the unprivileged
user namespace but hinders its privileges by not allowing
capabilities. Refer to the unprivileged_userns profile to check what
rules are allowed.

If either the feature is not present in the kernel, or the
unprivileged_userns profile is not loaded, then the defined behavior
is to deny the creation of the unprivileged user namespace

Signed-off-by: Georgia Garcia <georgia.garcia@canonical.com>

Author: Georgia Garcia
Author Date: 2024-02-01 17:46:50 UTC

test-apparmor.py: parse result of multiple lines in output

Add the upstream patch that enables checking multiple lines in the
output file for tests that have a caller and callee writing to the
same file. The test infrastructure expected only one line and tests
with pass for both caller and callee were failing.

This change to the test infrastructure is not significant enough to
warrant a SRU, since it doesn't affect the userspace apparmor tools.

Bug: https://launchpad.net/bugs/2051932
Signed-off-by: Georgia Garcia <georgia.garcia@canonical.com>

Author: Georgia Garcia
Author Date: 2024-01-29 18:19:08 UTC

testlib: use PERL regexp on grep because of similarity to Python's re

On the function that ensures that deb-src entries are in sources.list
we are using grep to check if the entry is already on the file, and to
escape potential characters, we are using Python's re.escape.

The issue is that re.escape may escape more than what is required by
grep's basic-regexp, which is the case for parenthesis (), causing the
test to fail because it didn't realize the deb-src is there.

By specifying the regex variant, we can ensure that they will most
likely match. The re module documentation mentions that it is most
similar to Perl [1], that's why I chose grep -P.

[1] https://docs.python.org/3/library/re.html

Signed-off-by: Georgia Garcia <georgia.garcia@canonical.com>

Author: Georgia Garcia
Author Date: 2024-01-25 21:32:25 UTC

test-apparmor.py: workaround to fix posix_ipc tests for non-x86 archs on focal

The fix that was previously applied kinetic and jammy also applies to
focal since the mqueue patches were backported into focal, but this
test fix was not.

Bug: https://bugs.launchpad.net/ubuntu-kernel-tests/+bug/2051227
Signed-off-by: Georgia Garcia <georgia.garcia@canonical.com>

Author: Georgia Garcia
Author Date: 2023-10-06 14:06:54 UTC

scripts/test-apparmor.py: ignore dbus not available in dbus tests

The DBus tests tries to check if either dbus-daemon or dbus-broker are
available for the tests and it displays an error message in case it is
not.

Due to how QRT checks if the regression tests failed, the DBus tests
were being treated as if they had failed because dbus-broker was not
installed, so I'm adding the error message as one to be ignored while
dbus daemon is the default dbus on Ubuntu.

If dbus-broker becomes the default for Ubuntu, then the test needs to
be updated. The efforts of having dbus-broker as the default in main
can be tracked in https://bugs.launchpad.net/bugs/2015538

Fixes LP: #2044267

Signed-off-by: Georgia Garcia <georgia.garcia@canonical.com>

Author: Georgia Garcia
Author Date: 2023-03-27 19:45:27 UTC

test-apparmor.py: add patch that forces dbus-daemon to use abstract sockets

Due to a change in the behavior of dbus-daemon, we have to force the
usage of abstract sockets.

Signed-off-by: Georgia Garcia <georgia.garcia@canonical.com>

Author: Georgia Garcia
Author Date: 2023-01-03 19:27:53 UTC

test-apparmor.py: add patch that fixes posix_ipc tests for non-x86 archs.

On non-x86 systems the posix_ipc tests fail with "Unrecognized option", so
the upstream patch that fixes the test is being added.
Closes LP: #2000359

Signed-off-by: Georgia Garcia <georgia.garcia@canonical.com>

Author: Georgia Garcia
Author Date: 2022-11-23 20:29:48 UTC

test-apparmor.py: add abi regression test using mqueue

Add a regression test to make sure abi is working as expected.
The test added is using mqueue mediation to test abi.
Test added for LP: #1994146

Signed-off-by: Georgia Garcia <georgia.garcia@canonical.com>

Author: Georgia Garcia
Author Date: 2022-10-13 19:29:27 UTC

test-apparmor.py: chmod test dir to allow user tests

There are new regression tests for message queue that create a user
and run the tests as said user, therefore the test directory must have
other execution permission.

Signed-off-by: Georgia Garcia <georgia.garcia@canonical.com>

Author: Steve Beattie
Author Date: 2022-10-12 23:04:21 UTC

test-kernel-security.py: adjust test_520 arm exception

Arm kernels before 5.6 don't have CONFIG_ARCH_RANDOM, so check for that
when looking for CONFIG_RANDOM_TRUST_CPU

Signed-off-by: Steve Beattie <steve.beattie@canonical.com>
Bug: https://bugs.launchpad.net/qa-regression-testing/+bug/1990620
MR: https://code.launchpad.net/~cypressyew/qa-regression-testing/+git/qa-regression-testing/+merge/430372

Author: Georgia Garcia
Author Date: 2022-01-11 21:45:13 UTC

apparmor: fix service start failure due to StartLimitBurst

Since the setUp for each of the ApparmorTest tests tries to start
the apparmor service using systemctl, the StartLimitBurst and
StartLimitIntervalSec is quickly reached, leading to the following
failures:

Jan 11 21:05:42 ubuntu systemd[1]: apparmor.service: Start request repeated too quickly.
Jan 11 21:05:42 ubuntu systemd[1]: apparmor.service: Failed with result 'start-limit-hit'.
Jan 11 21:05:42 ubuntu systemd[1]: Failed to start Load AppArmor profiles.

This patch uses "reset-failed" to reset the start rate limit counter
to zero.

Signed-off-by: Georgia Garcia <georgia.garcia@canonical.com>

Author: Emilia Torino
Author Date: 2019-09-19 14:43:02 UTC

adding condition on how the encoded string should be depending on versions as tomcat7 and tomcat8 <= 16.04 are missing single quotes and backslash encoding

Author: Emilia Torino
Author Date: 2019-07-22 19:59:23 UTC

Merge branch 'master' of git+ssh://git.launchpad.net/qa-regression-testing into docker_test