Grimmauld b27f064b54
nixos/tests/apparmor: move to folder, refactor, improve coverage
- nixfmt on apparmor test
- move apparmor test to nixos/tests/apparmor directory
- expected profile contents are now generated in its own file to make the test file less confusing and hard to maintain
- enforce/complain is now being tested via diff of expected against aa-status
- path is now tested against diff+file checking symlink target of /etc/static/apparmor.d/<name>
- profile is now checked by diff of /etc/static/apparmor.d/<name> against original string added in nix config
- test still successfully passes
- added test for confined hello to succeed
- added test for confined hexdump on denied path to fail
2024-12-16 15:32:48 +01:00

6 lines
94 B
Plaintext

abi <abi/4.0>,
include <tunables/global>
profile sl /bin/sl {
include <abstractions/base>
}