1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
|
#!/usr/bin/python
# Copyright (C) International Business Machines Corp., 2006
# Author: Stefan Berger <stefanb@us.ibm.com>
#
# A couple of simple tests that test ACM security extensions
# for the xm tool. The following xm subcommands are tested:
#
# - makepolicy
# - labels
# - rmlabel
# - addlabel
# - getlabel
# - resources
from XmTestLib import *
import xen.util.xsm.xsm as security
from xen.util import xsconstants
import commands
import os
import re
testpolicy = "xm-test"
testlabel = "blue"
vmconfigfile = "/tmp/xm-test.conf"
testresource = "phy:ram0"
if not isACMEnabled():
SKIP("Not running this test since ACM not enabled.")
status, output = traceCommand("xm makepolicy %s" % (testpolicy))
if status != 0:
FAIL("'xm makepolicy' failed with status %d and output\n%s" %
(status,output));
status, output = traceCommand("xm labels %s" % (testpolicy))
if status != 0:
FAIL("'xm labels' failed with status %d.\n" % status)
#Need to get a vm config file - just have it written to a file
domain = XmTestDomain()
domain.config.write(vmconfigfile)
#Whatever label it might have - remove it
status, output = traceCommand("xm rmlabel dom %s" %
(vmconfigfile))
status, output = traceCommand("xm addlabel %s dom %s %s" %
(testlabel, vmconfigfile, testpolicy))
if status != 0:
FAIL("(1) 'xm addlabel' failed with status %d.\n" % status)
status, output = traceCommand("xm getlabel dom %s" %
(vmconfigfile))
if status != 0:
FAIL("'xm getlabel' failed with status %d, output:\n%s" %
(status, output))
if output != "policytype=%s,policy=%s,label=%s" % \
(xsconstants.ACM_POLICY_ID, testpolicy, testlabel):
FAIL("(1) Received unexpected output from 'xm getlabel dom': \n%s" %
(output))
status, output = traceCommand("xm rmlabel dom %s" %
(vmconfigfile))
if status != 0:
FAIL("'xm rmlabel' failed with status %d, output: \n%s" %
(status,output))
if output != "":
FAIL("Received unexpected output from 'xm rmlabel': \n%s" %
(output))
status, output = traceCommand("xm getlabel dom %s" %
(vmconfigfile))
if output != "Error: 'Domain not labeled'":
FAIL("(2) Received unexpected output from 'xm getlabel dom': \n%s" %
(output))
#Whatever label the resource might have, remove it
status, output = traceCommand("xm rmlabel res %s" %
(testresource))
if status != 0:
FAIL("'xm rmlabel' on resource failed with status %d.\n" % status)
status, output = traceCommand("xm addlabel %s res %s %s" %
(testlabel, testresource, testpolicy))
if status != 0:
FAIL("(2) 'xm addlabel' on resource failed with status %d.\n" % status)
status, output = traceCommand("xm getlabel res %s" % (testresource))
if status != 0:
FAIL("'xm getlabel' on resource failed with status %d, output:\n%s" %
(status, output))
if output != "%s:%s:%s" % (xsconstants.ACM_POLICY_ID,\
testpolicy,testlabel):
FAIL("Received unexpected output from 'xm getlabel res': \n%s" %
(output))
status, output = traceCommand("xm resources")
if status != 0:
print "status = %s" % str(status)
FAIL("'xm resources' did not run properly")
if not re.search(security.unify_resname(testresource), output):
FAIL("'xm resources' did not show the tested resource '%s'." %
testresource)
status, output = traceCommand("xm rmlabel res %s" %
(testresource))
if status != 0:
FAIL("'xm rmlabel' on resource failed with status %d, output: \n%s" %
(status,output))
if output != "":
FAIL("Received unexpected output from 'xm rmlabel': \n%s" %
(output))
status, output = traceCommand("xm getlabel res %s" %
(testresource))
if output != "Error: 'Resource not labeled'":
FAIL("Received unexpected output from 'xm getlabel res': \n%s" %
(output))
|
