apparmor-bluez-setup manual

high

Image Types:
target-armhf-internal / target-armhf / target-amd64
Image Deployment:
APT, OSTree
Type:
functional

Description

Test AppArmor profiles for setting up of Bluetooth stack by running basic tests using hciconfig. Check if the interface can be brought up/down, can be changed of mode and can discover devices.

Resources

  • A Bluetooth adapter.
  • A Bluetooth device.

Pre Conditions

  1. From a PC, download and unpack the test data tarball from the gitlab test repository:
    2. $ wget https://gitlab.apertis.org/tests/apparmor-bluez-setup/-/archive/apertis/v2020/apparmor-bluez-setup.tar.gz
    $ tar -xvf apparmor-bluez-setup.tar.gz
  2. Copy the apparmor-bluez-setup-* folder to the target device:
    3. $ DUT_IP=<device-ip>
    $ scp -r apparmor-bluez-setup-* user@$DUT_IP:
  3. Log into the target device:
    4. $ ssh user@$DUT_IP
  4. After log into the DUT, enter the test directory
    5. $ cd apparmor-bluez-setup-*
  5. Note that the tarball may change depending on the release/branch being tested, please make sure to download the correct tarball for the release in question.
  6. From a PC, download and unpack the test data tarball from the gitlab test repository:
    7. $ wget https://gitlab.apertis.org/tests/bluez-setup/-/archive/apertis/v2020/bluez-setup.tar.gz
    $ tar -xvf bluez-setup.tar.gz
  7. Copy the bluez-setup-* folder to the target device:
    8. $ DUT_IP=<device-ip>
    $ scp -r bluez-setup-* user@$DUT_IP:
  8. Log into the target device:
    9. $ ssh user@$DUT_IP
  9. After log into the DUT, enter the test directory
    10. $ cd bluez-setup-*
  10. Note that the tarball may change depending on the release/branch being tested, please make sure to download the correct tarball for the release in question.
  11. Please note that connman disables bluetooth by default on a fresh image. If it's already enabled, connmanctl will give an "In progress" error that may be ignored. To enable the device:
    12. $ connmanctl enable bluetooth

Execution Steps

  1. First ensure that the bluez-setup test case is passing before executing the apparmor-bluez-setup test one (otherwise false-negative might occur):
    2. $ cd $HOME/bluez-setup-* ; ./check-setup.sh
  2. After verifying that the bluez-setup test is passing, open a new terminal and run the following. Do not yet answer to the question.
    3. $ cd $HOME/apparmor-bluez-setup-* ; ./aa_get_complaints.sh
  3. Now, run the bluez-setup test case again in the previous terminal.
    4. $ cd $HOME/bluez-setup-* ; ./check-setup.sh
  4. After the bluez-setup test ended, answer y to check for complaints.

Expected

The output of check-setup.sh should be similar to that:

hci0:   Type: BR/EDR  Bus: USB

BD Address: 00:1B:DC:06:05:D4  ACL MTU: 310:10  SCO MTU: 64:8

UP RUNNING PSCAN

RX bytes:16617 acl:0 sco:0 events:630 errors:0

TX bytes:7102 acl:0 sco:0 commands:629 errors:8

Features: 0xff 0xff 0x8f 0x7e 0xd8 0x1f 0x5b 0x87

Packet type: DM1 DM3 DM5 DH1 DH3 DH5 HV1 HV2 HV3

Link policy: RSWITCH HOLD SNIFF PARK

Link mode: SLAVE ACCEPT

Name: 'sac-target-0'

Class: 0x620100

Service Classes: Networking, Audio, Telephony

Device Class: Computer, Uncategorized

HCI Version: 4.0 (0x6)  Revision: 0x2031

LMP Version: 4.0 (0x6)  Subversion: 0x2031

Manufacturer: Cambridge Silicon Radio (10)

Put some devices around in discoverable mode and press ENTER

Scanning ...

       78:47:1D:B3:6E:80       jasmin-0

Check if the devices you enabled are in the list above

When the TC has been run, once the log collection script finishes check its output.

On Success, aa_get_complaints.sh will find no complaints:

[...snip useless output...]

>>> Checking for apparmor complaints ...

>>> No complaints found!

If something goes wrong, the output will be similar to:

[...snip useless output...]

>>> Complaints found, creating report ...

aa-dump_20180710-100931/

aa-dump_20180710-100931/complaint_tokens.log

aa-dump_20180710-100931/audit.log

aa-dump_20180710-100931/ps_aux.log

aa-dump_20180710-100931/uname.log

aa-dump_20180710-100931/journalctl.log

aa-dump_20180710-100931/image_version

aa-dump_20180710-100931/os-release

>>> Report created as /home/chaiwala/aa-dump_20180710-100931.tar.bz2

In this case file a bug report against AppArmor attaching the tar.bz2 file created.