tests: check that rules have unique path patterns

Signed-off-by: Oliver Calder <[email protected]>
canonical · Jan 14, 2025 · 024d155 · 024d155
1 parent 8435c13
commit 024d155
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 0 deletions.
diff --git a/tests/main/apparmor-prompting-integration-tests/download_file_defaults.sh b/tests/main/apparmor-prompting-integration-tests/download_file_defaults.sh
@@ -38,6 +38,10 @@ if [ "$CLIENT_OUTPUT" != "success" ] ; then
 	echo "output='$CLIENT_OUTPUT'"
 	exit 1
 fi
+# Furthermore, rules with identical path patterns are merged, so we don't
+# expect any rules with duplicate path patterns.
+snap debug api /v2/interfaces/requests/rules | jq '."result".[]."constraints"."path-pattern"' | grep "${TEST_DIR}" | uniq -c | MATCH '^[[:space:]]*1'
+snap debug api /v2/interfaces/requests/rules | jq '."result".[]."constraints"."path-pattern"' | grep "${TEST_DIR}" | uniq -c | NOMATCH '^[[:space:]]*2'
 
 TEST_OUTPUT="$(cat "${TEST_DIR}/Downloads/test.txt")"
 

diff --git a/tests/main/apparmor-prompting-integration-tests/download_file_safer.sh b/tests/main/apparmor-prompting-integration-tests/download_file_safer.sh
@@ -37,6 +37,11 @@ if [ "$CLIENT_OUTPUT" != "success" ] ; then
 	exit 1
 fi
 
+# Rules with identical path patterns are merged, so we don't expect any rules
+# with duplicate path patterns.
+snap debug api /v2/interfaces/requests/rules | jq '."result".[]."constraints"."path-pattern"' | grep "${TEST_DIR}" | uniq -c | MATCH '^[[:space:]]*1'
+snap debug api /v2/interfaces/requests/rules | jq '."result".[]."constraints"."path-pattern"' | grep "${TEST_DIR}" | uniq -c | NOMATCH '^[[:space:]]*2'
+
 TEST_OUTPUT="$(cat "${TEST_DIR}/Downloads/test.txt")"
 
 if [ "$TEST_OUTPUT" != "it is written" ] ; then