?? 03_security-acm_dom_conflict.py
字號:
#!/usr/bin/python# Copyright (C) International Business Machines Corp., 2006# Author: Stefan Berger <stefanb@us.ibm.com>## A test that exercises the conflict set of the chinese wall policy.# Start a first domain and then a second one. The second one is# expected NOT to be starteable.from XmTestLib import *from acm_utils import *import commandsimport ostestlabel1 = "blue"testlabel2 = "red"config = {"access_control":"policy=%s,label=%s" % (testpolicy,testlabel1)}domain1 = XmTestDomain(name="domain-%s" % testlabel1, extraConfig=config)try: domain1.start(noConsole=True)except DomainError, e: if verbose: print e.extra FAIL("Unable to start 1st labeled test domain")# Verify with xm dry-runstatus, output = traceCommand("xm dry-run /tmp/xm-test.conf | " "grep -v \"Dry Run\"")if status != 0: FAIL("'xm dry-run' failed")if not re.search("PERMITTED", output): FAIL("'xm dry-run' did not succeed.")config = {"access_control":"policy=%s,label=%s" % (testpolicy,testlabel2)}domain2 = XmTestDomain(name="domain-%s" % testlabel2, extraConfig=config)try: domain2.start(noConsole=True) # Should never get here! FAIL("Could start a domain in a conflict set - " "this should not be possible")except DomainError, e: #This is exactly what we want in this case status = 0# Verify with xm dry-runstatus, output = traceCommand("xm dry-run /tmp/xm-test.conf | " "grep -v \"Dry Run\"")if status != 0: FAIL("'xm dry-run' failed.")if not re.search("PERMITTED", output): FAIL("'xm dry-run' did not show that operation was permitted.")domain1.destroy()
?? 快捷鍵說明
復制代碼
Ctrl + C
搜索代碼
Ctrl + F
全屏模式
F11
切換主題
Ctrl + Shift + D
顯示快捷鍵
?
增大字號
Ctrl + =
減小字號
Ctrl + -