[apparmor] [PATCH 4/4] tests: Update code to correctly use the terms context and label

Tyler Hicks tyhicks at canonical.com
Mon Feb 9 22:37:59 UTC 2015


Signed-off-by: Tyler Hicks <tyhicks at canonical.com>
---
 tests/regression/apparmor/pivot_root.c | 30 +++++++++++++++---------------
 tests/regression/apparmor/socketpair.c | 26 +++++++++++++-------------
 2 files changed, 28 insertions(+), 28 deletions(-)

diff --git a/tests/regression/apparmor/pivot_root.c b/tests/regression/apparmor/pivot_root.c
index 1b6ac94..6a1d4eb 100644
--- a/tests/regression/apparmor/pivot_root.c
+++ b/tests/regression/apparmor/pivot_root.c
@@ -31,7 +31,7 @@
 struct clone_arg {
 	const char *put_old;
 	const char *new_root;
-	const char *expected_con;
+	const char *expected_label;
 };
 
 static int _pivot_root(const char *new_root, const char *put_old)
@@ -44,12 +44,12 @@ static int _pivot_root(const char *new_root, const char *put_old)
 #endif
 }
 
-static int pivot_and_verify_con(void *arg)
+static int pivot_and_verify_label(void *arg)
 {
 	const char *put_old = ((struct clone_arg *)arg)->put_old;
 	const char *new_root = ((struct clone_arg *)arg)->new_root;
-	const char *expected_con = ((struct clone_arg *)arg)->expected_con;
-	char *con;
+	const char *expected_label = ((struct clone_arg *)arg)->expected_label;
+	char *label;
 	int rc;
 
 	rc = chdir(new_root);
@@ -64,19 +64,19 @@ static int pivot_and_verify_con(void *arg)
 		exit(101);
 	}
 
-	rc = aa_getcon(&con, NULL);
+	rc = aa_getcon(&label, NULL);
 	if (rc < 0) {
 		perror("FAIL - aa_getcon");
 		exit(102);
 	}
 
-	if (strcmp(expected_con, con)) {
-		fprintf(stderr, "FAIL - expected_con (%s) != con (%s)\n",
-			expected_con, con);
+	if (strcmp(expected_label, label)) {
+		fprintf(stderr, "FAIL - expected_label (%s) != label (%s)\n",
+			expected_label, label);
 		exit(103);
 	}
 
-	free(con);
+	free(label);
 	exit(0);
 }
 
@@ -86,10 +86,10 @@ static pid_t _clone(int (*fn)(void *), void *arg)
         void *stack = alloca(stack_size);
 
 #ifdef __ia64__
-        return __clone2(pivot_and_verify_con, stack,  stack_size,
+        return __clone2(pivot_and_verify_label, stack,  stack_size,
 			CLONE_NEWNS | SIGCHLD, arg);
 #else
-        return    clone(pivot_and_verify_con, stack + stack_size,
+        return    clone(pivot_and_verify_label, stack + stack_size,
 			CLONE_NEWNS | SIGCHLD, arg);
 #endif
 }
@@ -105,19 +105,19 @@ int main(int argc, char **argv)
 			"FAIL - usage: %s <PUT_OLD> <NEW_ROOT> <PROFILE>\n\n"
 			"  <PUT_OLD>\t\tThe put_old param of pivot_root()\n"
 			"  <NEW_ROOT>\t\tThe new_root param of pivot_root()\n"
-			"  <PROFILE>\t\tThe expected AA context after pivoting\n\n"
+			"  <LABEL>\t\tThe expected AA label after pivoting\n\n"
 			"This program clones itself in a new mount namespace, \n"
 			"does a pivot and then calls aa_getcon(). The test fails \n"
-			"if <PROFILE> does not match the context returned by \n"
+			"if <PROFILE> does not match the label returned by \n"
 			"aa_getcon().\n", argv[0]);
 		exit(1);
 	}
 
 	arg.put_old      = argv[1];
 	arg.new_root     = argv[2];
-	arg.expected_con = argv[3];
+	arg.expected_label = argv[3];
 
-	child = _clone(pivot_and_verify_con, &arg);
+	child = _clone(pivot_and_verify_label, &arg);
 	if (child < 0) {
 		perror("FAIL - clone");
 		exit(2);
diff --git a/tests/regression/apparmor/socketpair.c b/tests/regression/apparmor/socketpair.c
index 9a64ba7..06125d5 100644
--- a/tests/regression/apparmor/socketpair.c
+++ b/tests/regression/apparmor/socketpair.c
@@ -51,13 +51,13 @@ static int get_socketpair(int pair[2])
 }
 
 static int verify_confinement_context(int fd, const char *fd_name,
-				      const char *expected_con,
+				      const char *expected_label,
 				      const char *expected_mode)
 {
-	char *con, *mode;
+	char *label, *mode;
 	int rc;
 
-	rc = aa_getpeercon(fd, &con, &mode);
+	rc = aa_getpeercon(fd, &label, &mode);
 	if (rc < 0) {
 		fprintf(stderr, "FAIL - %s: aa_getpeercon(%d, , ): %m",
 			fd_name, fd);
@@ -67,10 +67,10 @@ static int verify_confinement_context(int fd, const char *fd_name,
 	if (!mode)
 		mode = NO_MODE;
 
-	if (strcmp(con, expected_con)) {
+	if (strcmp(label, expected_label)) {
 		fprintf(stderr,
-			"FAIL - %s: con \"%s\" != expected_con \"%s\"\n",
-			fd_name, con, expected_con);
+			"FAIL - %s: label \"%s\" != expected_label \"%s\"\n",
+			fd_name, label, expected_label);
 		rc = 2;
 		goto out;
 	}
@@ -85,7 +85,7 @@ static int verify_confinement_context(int fd, const char *fd_name,
 
 	rc = 0;
 out:
-	free(con);
+	free(label);
 	return rc;
 }
 
@@ -133,17 +133,17 @@ static int reexec(int pair[2], int argc, char **argv)
 
 int main(int argc, char **argv)
 {
-	char *expected_con, *expected_mode;
+	char *expected_label, *expected_mode;
 	int pair[2], rc;
 
 	if (argc < 3) {
 		fprintf(stderr,
 			"FAIL - usage: %s <CON> <MODE> [<CHANGE_ONEXEC> ...]\n\n"
-			"  <CON>\t\tThe expected confinement context\n"
+			"  <LABEL>\t\tThe expected confinement label\n"
 			"  <MODE>\tThe expected confinement mode\n"
 			"  <CHANGE_ONEXEC>\tThe profile to change to on exec\n\n"
 			"This program gets a socket pair and then verifies \n"
-			"the confinement context and mode of each file \n"
+			"the confinement label and mode of each file \n"
 			"descriptor. If there is no expected mode string, \n"
 			"<MODE> should be \"%s\".\n\n"
 			"Multiple <CHANGE_ONEXEC> profiles can be specified \n"
@@ -162,17 +162,17 @@ int main(int argc, char **argv)
 	if (get_socketpair(pair))
 		exit(2);
 
-	expected_con = argv[1];
+	expected_label = argv[1];
 	expected_mode = argv[2];
 
 	if (verify_confinement_context(pair[0], "pair[0]",
-				       expected_con, expected_mode)) {
+				       expected_label, expected_mode)) {
 		rc = 3;
 		goto out;
 	}
 
 	if (verify_confinement_context(pair[1], "pair[1]",
-				       expected_con, expected_mode)) {
+				       expected_label, expected_mode)) {
 		rc = 4;
 		goto out;
 	}
-- 
2.1.0




More information about the AppArmor mailing list