Since test-apparmor.py from QRT is pretty comprehensive, I am going to display its tests results here (both i386 and amd64 passed):
$ sudo ./test-apparmor.py -v --with-parser-stress Skipping private tests Test enforce to complain and back with aa-complain/aa-enforce ... ok Test aa-status ... ok Test aa-unconfined ... ok Test add/remove profile ... ok Test complain profile ... ok Test enforce profile ... ok Test moving from enforce to complain and back ... ok Test initscript ... stop teardown status (unloaded: LP: #654841) start restart reload force-reload status (loaded) ok Test kernel ... ok Test aa-logprof LP: #652674 ... ok Test /etc/apparmor.d/disable ... ok Test /etc/apparmor.d/force-complain ... ok Test required apport hooks ... ok Test apport LP: #655529 ... ok Test pam (order=default,user,group) ... adm_group can access default_user's file adm_group cannot access adm_group's file adm_group cannot access confined_user's file adm_group cannot access confined_group's file adm_group cannot access unconfined_user's file adm_group cannot access unconfined_group's file confined_group can access default_user's file confined_group cannot access adm_group's file confined_group cannot access confined_user's file confined_group cannot access confined_group's file confined_group cannot access unconfined_user's file confined_group cannot access unconfined_group's file confined_user can access default_user's file confined_user cannot access adm_group's file confined_user cannot access confined_user's file confined_user cannot access confined_group's file confined_user cannot access unconfined_user's file confined_user cannot access unconfined_group's file default_user can access default_user's file default_user cannot access adm_group's file default_user cannot access confined_user's file default_user cannot access confined_group's file default_user cannot access unconfined_user's file default_user cannot access unconfined_group's file unconfined_group can access default_user's file unconfined_group cannot access adm_group's file unconfined_group cannot access confined_user's file unconfined_group cannot access confined_group's file unconfined_group cannot access unconfined_user's file unconfined_group cannot access unconfined_group's file unconfined_user can access default_user's file unconfined_user cannot access adm_group's file unconfined_user cannot access confined_user's file unconfined_user cannot access confined_group's file unconfined_user cannot access unconfined_user's file unconfined_user cannot access unconfined_group's file ok Test pam (order=group,default,user) ... adm_group can access adm_group's file adm_group cannot access confined_user's file adm_group cannot access default_user's file confined_user can access confined_user's file confined_user cannot access unconfined_user's file default_user can access default_user's file default_user cannot access unconfined_user's file unconfined_user can access adm_group's file unconfined_user can access confined_user's file unconfined_user can access confined_group's file unconfined_user can access default_user's file unconfined_user can access unconfined_user's file unconfined_user can access unconfined_group's file unconfined_group can access adm_group's file unconfined_group can access confined_user's file unconfined_group can access confined_group's file unconfined_group can access default_user's file unconfined_group can access unconfined_user's file unconfined_group can access unconfined_group's file ok Test pam (order=group,user,default) ... adm_group can access adm_group's file adm_group cannot access confined_group's file adm_group cannot access confined_user's file adm_group cannot access default_user's file adm_group cannot access unconfined_group's file adm_group cannot access unconfined_user's file confined_group can access confined_group's file confined_group cannot access adm_group's file confined_group cannot access confined_user's file confined_group cannot access default_user's file confined_group cannot access unconfined_group's file confined_group cannot access unconfined_user's file confined_user can access confined_user's file confined_user cannot access adm_group's file confined_user cannot access confined_group's file confined_user cannot access default_user's file confined_user cannot access unconfined_group's file confined_user cannot access unconfined_user's file default_user can access default_user's file default_user cannot access adm_group's file default_user cannot access confined_group's file default_user cannot access confined_user's file default_user cannot access unconfined_group's file default_user cannot access unconfined_user's file unconfined_group can access unconfined_group's file unconfined_group can access adm_group's file unconfined_group can access confined_group's file unconfined_group can access confined_user's file unconfined_group can access default_user's file unconfined_group can access unconfined_user's file unconfined_user can access unconfined_user's file unconfined_user can access adm_group's file unconfined_user can access confined_group's file unconfined_user can access confined_user's file unconfined_user can access default_user's file unconfined_user can access unconfined_group's file ok Test pam (order=user,default,group) ... adm_group cannot access adm_group's file adm_group can access confined_user's file adm_group cannot access default_user's file confined_user can access confined_user's file confined_user cannot access unconfined_user's file default_user can access default_user's file default_user cannot access unconfined_user's file unconfined_user can access adm_group's file unconfined_user can access confined_user's file unconfined_user can access confined_group's file unconfined_user can access default_user's file unconfined_user can access unconfined_user's file unconfined_user can access unconfined_group's file unconfined_group can access adm_group's file unconfined_group can access confined_user's file unconfined_group can access confined_group's file unconfined_group can access default_user's file unconfined_group can access unconfined_user's file unconfined_group can access unconfined_group's file ok Test pam (order=user,group,default) ... adm_group can access confined_user's file adm_group cannot access confined_group's file adm_group cannot access default_user's file adm_group cannot access unconfined_group's file adm_group cannot access unconfined_user's file confined_group can access confined_group's file confined_group cannot access confined_user's file confined_group cannot access confined_user's file confined_group cannot access default_user's file confined_group cannot access unconfined_group's file confined_group cannot access unconfined_user's file confined_user can access confined_user's file confined_user can access confined_user's file confined_user cannot access confined_group's file confined_user cannot access default_user's file confined_user cannot access unconfined_group's file confined_user cannot access unconfined_user's file default_user can access default_user's file default_user cannot access confined_user's file default_user cannot access confined_group's file default_user cannot access confined_user's file default_user cannot access unconfined_group's file default_user cannot access unconfined_user's file unconfined_group can access unconfined_group's file unconfined_group can access confined_user's file unconfined_group can access confined_group's file unconfined_group can access confined_user's file unconfined_group can access default_user's file unconfined_group can access unconfined_user's file unconfined_user can access unconfined_user's file unconfined_user can access confined_user's file unconfined_user can access confined_group's file unconfined_user can access confined_user's file unconfined_user can access default_user's file unconfined_user can access unconfined_group's file ok Run libapparmor testsuite ... ok Run parser regression tests ... ok Run kernel regression tests ... ok Run parser stress test ... (skipped: use --with-parser-stress to enable) ok Run subdomain stress test ... (skipped: use --with-subdomain-stress to enable) ok Cleanup downloaded source ... ok
---------------------------------------------------------------------- Ran 25 tests in 346.894s
OK
Other QRT test results coming.
Since test-apparmor.py from QRT is pretty comprehensive, I am going to display its tests results here (both i386 and amd64 passed):
$ sudo ./test-apparmor.py -v --with- parser- stress aa-enforce ... ok d/disable ... ok d/force- complain ... ok default, user,group) ... group,default, user) ... group,user, default) ... user,default, group) ... user,group, default) ... parser- stress to enable) ok subdomain- stress to enable) ok
Skipping private tests
Test enforce to complain and back with aa-complain/
Test aa-status ... ok
Test aa-unconfined ... ok
Test add/remove profile ... ok
Test complain profile ... ok
Test enforce profile ... ok
Test moving from enforce to complain and back ... ok
Test initscript ...
stop
teardown
status (unloaded: LP: #654841)
start
restart
reload
force-reload
status (loaded)
ok
Test kernel ... ok
Test aa-logprof LP: #652674 ... ok
Test /etc/apparmor.
Test /etc/apparmor.
Test required apport hooks ... ok
Test apport LP: #655529 ... ok
Test pam (order=
adm_group can access default_user's file
adm_group cannot access adm_group's file
adm_group cannot access confined_user's file
adm_group cannot access confined_group's file
adm_group cannot access unconfined_user's file
adm_group cannot access unconfined_group's file
confined_group can access default_user's file
confined_group cannot access adm_group's file
confined_group cannot access confined_user's file
confined_group cannot access confined_group's file
confined_group cannot access unconfined_user's file
confined_group cannot access unconfined_group's file
confined_user can access default_user's file
confined_user cannot access adm_group's file
confined_user cannot access confined_user's file
confined_user cannot access confined_group's file
confined_user cannot access unconfined_user's file
confined_user cannot access unconfined_group's file
default_user can access default_user's file
default_user cannot access adm_group's file
default_user cannot access confined_user's file
default_user cannot access confined_group's file
default_user cannot access unconfined_user's file
default_user cannot access unconfined_group's file
unconfined_group can access default_user's file
unconfined_group cannot access adm_group's file
unconfined_group cannot access confined_user's file
unconfined_group cannot access confined_group's file
unconfined_group cannot access unconfined_user's file
unconfined_group cannot access unconfined_group's file
unconfined_user can access default_user's file
unconfined_user cannot access adm_group's file
unconfined_user cannot access confined_user's file
unconfined_user cannot access confined_group's file
unconfined_user cannot access unconfined_user's file
unconfined_user cannot access unconfined_group's file
ok
Test pam (order=
adm_group can access adm_group's file
adm_group cannot access confined_user's file
adm_group cannot access default_user's file
confined_user can access confined_user's file
confined_user cannot access unconfined_user's file
default_user can access default_user's file
default_user cannot access unconfined_user's file
unconfined_user can access adm_group's file
unconfined_user can access confined_user's file
unconfined_user can access confined_group's file
unconfined_user can access default_user's file
unconfined_user can access unconfined_user's file
unconfined_user can access unconfined_group's file
unconfined_group can access adm_group's file
unconfined_group can access confined_user's file
unconfined_group can access confined_group's file
unconfined_group can access default_user's file
unconfined_group can access unconfined_user's file
unconfined_group can access unconfined_group's file
ok
Test pam (order=
adm_group can access adm_group's file
adm_group cannot access confined_group's file
adm_group cannot access confined_user's file
adm_group cannot access default_user's file
adm_group cannot access unconfined_group's file
adm_group cannot access unconfined_user's file
confined_group can access confined_group's file
confined_group cannot access adm_group's file
confined_group cannot access confined_user's file
confined_group cannot access default_user's file
confined_group cannot access unconfined_group's file
confined_group cannot access unconfined_user's file
confined_user can access confined_user's file
confined_user cannot access adm_group's file
confined_user cannot access confined_group's file
confined_user cannot access default_user's file
confined_user cannot access unconfined_group's file
confined_user cannot access unconfined_user's file
default_user can access default_user's file
default_user cannot access adm_group's file
default_user cannot access confined_group's file
default_user cannot access confined_user's file
default_user cannot access unconfined_group's file
default_user cannot access unconfined_user's file
unconfined_group can access unconfined_group's file
unconfined_group can access adm_group's file
unconfined_group can access confined_group's file
unconfined_group can access confined_user's file
unconfined_group can access default_user's file
unconfined_group can access unconfined_user's file
unconfined_user can access unconfined_user's file
unconfined_user can access adm_group's file
unconfined_user can access confined_group's file
unconfined_user can access confined_user's file
unconfined_user can access default_user's file
unconfined_user can access unconfined_group's file
ok
Test pam (order=
adm_group cannot access adm_group's file
adm_group can access confined_user's file
adm_group cannot access default_user's file
confined_user can access confined_user's file
confined_user cannot access unconfined_user's file
default_user can access default_user's file
default_user cannot access unconfined_user's file
unconfined_user can access adm_group's file
unconfined_user can access confined_user's file
unconfined_user can access confined_group's file
unconfined_user can access default_user's file
unconfined_user can access unconfined_user's file
unconfined_user can access unconfined_group's file
unconfined_group can access adm_group's file
unconfined_group can access confined_user's file
unconfined_group can access confined_group's file
unconfined_group can access default_user's file
unconfined_group can access unconfined_user's file
unconfined_group can access unconfined_group's file
ok
Test pam (order=
adm_group can access confined_user's file
adm_group cannot access confined_group's file
adm_group cannot access default_user's file
adm_group cannot access unconfined_group's file
adm_group cannot access unconfined_user's file
confined_group can access confined_group's file
confined_group cannot access confined_user's file
confined_group cannot access confined_user's file
confined_group cannot access default_user's file
confined_group cannot access unconfined_group's file
confined_group cannot access unconfined_user's file
confined_user can access confined_user's file
confined_user can access confined_user's file
confined_user cannot access confined_group's file
confined_user cannot access default_user's file
confined_user cannot access unconfined_group's file
confined_user cannot access unconfined_user's file
default_user can access default_user's file
default_user cannot access confined_user's file
default_user cannot access confined_group's file
default_user cannot access confined_user's file
default_user cannot access unconfined_group's file
default_user cannot access unconfined_user's file
unconfined_group can access unconfined_group's file
unconfined_group can access confined_user's file
unconfined_group can access confined_group's file
unconfined_group can access confined_user's file
unconfined_group can access default_user's file
unconfined_group can access unconfined_user's file
unconfined_user can access unconfined_user's file
unconfined_user can access confined_user's file
unconfined_user can access confined_group's file
unconfined_user can access confined_user's file
unconfined_user can access default_user's file
unconfined_user can access unconfined_group's file
ok
Run libapparmor testsuite ... ok
Run parser regression tests ... ok
Run kernel regression tests ... ok
Run parser stress test ... (skipped: use --with-
Run subdomain stress test ... (skipped: use --with-
Cleanup downloaded source ... ok
------- ------- ------- ------- ------- ------- ------- ------- ------- -------
Ran 25 tests in 346.894s
OK
Other QRT test results coming.