| #!/usr/bin/env python |
| # |
| # Copyright (C) 2018 The Android Open Source Project |
| # |
| # Licensed under the Apache License, Version 2.0 (the "License"); |
| # you may not use this file except in compliance with the License. |
| # You may obtain a copy of the License at |
| # |
| # http://www.apache.org/licenses/LICENSE-2.0 |
| # |
| # Unless required by applicable law or agreed to in writing, software |
| # distributed under the License is distributed on an "AS IS" BASIS, |
| # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| # See the License for the specific language governing permissions and |
| # limitations under the License. |
| # |
| |
| import logging |
| import os |
| import shutil |
| import tempfile |
| |
| from vts.runners.host import asserts |
| from vts.runners.host import base_test |
| from vts.runners.host import const |
| from vts.runners.host import keys |
| from vts.runners.host import test_runner |
| from vts.utils.python.android import api |
| from vts.utils.python.file import target_file_utils |
| |
| |
| class VtsTrebleSysPropTest(base_test.BaseTestClass): |
| """Test case which check compatibility of system property. |
| |
| Attributes: |
| _temp_dir: The temporary directory to which necessary files are copied. |
| _PUBLIC_PROPERTY_CONTEXTS_FILE_PATH: The path of public property |
| contexts file. |
| _SYSTEM_PROPERTY_CONTEXTS_FILE_PATH: The path of system property |
| contexts file. |
| _VENDOR_PROPERTY_CONTEXTS_FILE_PATH: The path of vendor property |
| contexts file. |
| _ODM_PROPERTY_CONTEXTS_FILE_PATH: The path of odm property |
| contexts file. |
| _VENDOR_OR_ODM_NAMESPACES: The namepsaces allowed for vendor/odm |
| properties. |
| """ |
| |
| _PUBLIC_PROPERTY_CONTEXTS_FILE_PATH = ("vts/testcases/security/" |
| "system_property/data/" |
| "property_contexts") |
| _SYSTEM_PROPERTY_CONTEXTS_FILE_PATH = ("/system/etc/selinux/" |
| "plat_property_contexts") |
| _VENDOR_PROPERTY_CONTEXTS_FILE_PATH = ("/vendor/etc/selinux/" |
| "vendor_property_contexts") |
| _ODM_PROPERTY_CONTEXTS_FILE_PATH = ("/odm/etc/selinux/" |
| "odm_property_contexts") |
| _VENDOR_OR_ODM_NAMESPACES = [ |
| "ctl.odm.", |
| "ctl.vendor.", |
| "ctl.start$odm.", |
| "ctl.start$vendor.", |
| "ctl.stop$odm.", |
| "ctl.stop$vendor.", |
| "ro.boot.", |
| "ro.hardware.", |
| "ro.odm.", |
| "ro.vendor.", |
| "odm.", |
| "persist.odm.", |
| "persist.vendor.", |
| "vendor." |
| ] |
| |
| def setUpClass(self): |
| """Initializes tests. |
| |
| Data file path, device, remote shell instance and temporary directory |
| are initialized. |
| """ |
| required_params = [keys.ConfigKeys.IKEY_DATA_FILE_PATH] |
| self.getUserParams(required_params) |
| self.dut = self.android_devices[0] |
| self.shell = self.dut.shell |
| self._temp_dir = tempfile.mkdtemp() |
| |
| def tearDownClass(self): |
| """Deletes the temporary directory.""" |
| logging.info("Delete %s", self._temp_dir) |
| shutil.rmtree(self._temp_dir) |
| |
| def _ParsePropertyDictFromPropertyContextsFile(self, |
| property_contexts_file, |
| exact_only=False): |
| """Parse property contexts file to a dictionary. |
| |
| Args: |
| property_contexts_file: file object of property contexts file |
| exact_only: whether parsing only properties which require exact |
| matching |
| |
| Returns: |
| dict: {property_name: property_tokens} |
| """ |
| property_dict = dict() |
| for line in property_contexts_file.readlines(): |
| tokens = line.strip().rstrip("\n").split() |
| if len(tokens) > 0 and not tokens[0].startswith("#"): |
| if not exact_only: |
| property_dict[tokens[0]] = tokens |
| elif len(tokens) >= 4 and tokens[2] == "exact": |
| property_dict[tokens[0]] = tokens |
| |
| return property_dict |
| |
| def testActionableCompatiblePropertyEnabled(self): |
| """Ensures the feature of actionable compatible property is enforced. |
| |
| ro.actionable_compatible_property.enabled must be true to enforce the |
| feature of actionable compatible property. |
| """ |
| asserts.assertEqual( |
| self.dut.getProp("ro.actionable_compatible_property.enabled"), |
| "true", "ro.actionable_compatible_property.enabled must be true") |
| |
| def _TestVendorOrOdmPropertyNamespace(self, partition, contexts_path): |
| logging.info("Checking existence of %s", contexts_path) |
| target_file_utils.assertPermissionsAndExistence( |
| self.shell, contexts_path, target_file_utils.IsReadable) |
| |
| # Pull property contexts file from device. |
| self.dut.adb.pull(contexts_path, self._temp_dir) |
| logging.info("Adb pull %s to %s", contexts_path, self._temp_dir) |
| |
| with open( |
| os.path.join(self._temp_dir, |
| "%s_property_contexts" % partition), |
| "r") as property_contexts_file: |
| property_dict = self._ParsePropertyDictFromPropertyContextsFile( |
| property_contexts_file) |
| logging.info("Found %d property names in %s property contexts", |
| len(property_dict), partition) |
| violation_list = filter( |
| lambda x: not any( |
| x.startswith(prefix) |
| for prefix in self._VENDOR_OR_ODM_NAMESPACES), |
| property_dict.keys()) |
| asserts.assertEqual( |
| len(violation_list), 0, |
| ("%s propertes (%s) have wrong namespace" % |
| (partition, " ".join(sorted(violation_list))))) |
| |
| def testVendorPropertyNamespace(self): |
| """Ensures vendor properties have proper namespace. |
| |
| Vendor or ODM properties must have their own prefix. |
| """ |
| asserts.skipIf( |
| self.dut.getLaunchApiLevel() <= api.PLATFORM_API_LEVEL_P, |
| "Skip test for a device which launched first before Android Q.") |
| |
| self._TestVendorOrOdmPropertyNamespace( |
| "vendor", self._VENDOR_PROPERTY_CONTEXTS_FILE_PATH) |
| |
| |
| def testOdmPropertyNamespace(self): |
| """Ensures odm properties have proper namespace. |
| |
| Vendor or ODM properties must have their own prefix. |
| """ |
| asserts.skipIf( |
| self.dut.getLaunchApiLevel() <= api.PLATFORM_API_LEVEL_P, |
| "Skip test for a device which launched first before Android Q.") |
| |
| asserts.skipIf( |
| not target_file_utils.Exists(self._ODM_PROPERTY_CONTEXTS_FILE_PATH, |
| self.shell), |
| "Skip test for a device which doesn't have an odm property " |
| "contexts.") |
| |
| self._TestVendorOrOdmPropertyNamespace( |
| "odm", self._ODM_PROPERTY_CONTEXTS_FILE_PATH) |
| |
| def testExportedPlatformPropertyIntegrity(self): |
| """Ensures public property contexts isn't modified at all. |
| |
| Public property contexts must not be modified. |
| """ |
| logging.info("Checking existence of %s", |
| self._SYSTEM_PROPERTY_CONTEXTS_FILE_PATH) |
| target_file_utils.assertPermissionsAndExistence( |
| self.shell, self._SYSTEM_PROPERTY_CONTEXTS_FILE_PATH, |
| target_file_utils.IsReadable) |
| |
| # Pull system property contexts file from device. |
| self.dut.adb.pull(self._SYSTEM_PROPERTY_CONTEXTS_FILE_PATH, |
| self._temp_dir) |
| logging.info("Adb pull %s to %s", |
| self._SYSTEM_PROPERTY_CONTEXTS_FILE_PATH, self._temp_dir) |
| |
| with open(os.path.join(self._temp_dir, "plat_property_contexts"), |
| "r") as property_contexts_file: |
| sys_property_dict = self._ParsePropertyDictFromPropertyContextsFile( |
| property_contexts_file, True) |
| logging.info( |
| "Found %d exact-matching properties " |
| "in system property contexts", len(sys_property_dict)) |
| |
| pub_property_contexts_file_path = os.path.join( |
| self.data_file_path, self._PUBLIC_PROPERTY_CONTEXTS_FILE_PATH) |
| with open(pub_property_contexts_file_path, |
| "r") as property_contexts_file: |
| pub_property_dict = self._ParsePropertyDictFromPropertyContextsFile( |
| property_contexts_file, True) |
| |
| for name in pub_property_dict: |
| public_tokens = pub_property_dict[name] |
| asserts.assertTrue(name in sys_property_dict, |
| "Exported property (%s) doesn't exist" % name) |
| system_tokens = sys_property_dict[name] |
| asserts.assertEqual(public_tokens, system_tokens, |
| "Exported property (%s) is modified" % name) |
| |
| |
| if __name__ == "__main__": |
| test_runner.main() |