1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
|
// Copyright (c) 2012 The Chromium Authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#include "base/win/windows_version.h"
#include "sandbox/win/src/app_container.h"
#include "testing/gtest/include/gtest/gtest.h"
namespace sandbox {
// Tests the low level AppContainer interface.
TEST(AppContainerTest, CreateAppContainer) {
if (base::win::OSInfo::GetInstance()->version() < base::win::VERSION_WIN8)
return;
const wchar_t kName[] = L"Test";
const wchar_t kValidSid[] = L"S-1-15-2-12345-234-567-890-123-456-789";
EXPECT_TRUE(LookupAppContainer(kValidSid).empty());
EXPECT_EQ(SBOX_ERROR_GENERIC, DeleteAppContainer(kValidSid));
EXPECT_EQ(SBOX_ALL_OK, CreateAppContainer(kValidSid, kName));
EXPECT_EQ(SBOX_ERROR_GENERIC, CreateAppContainer(kValidSid, kName));
EXPECT_EQ(kName, LookupAppContainer(kValidSid));
EXPECT_EQ(SBOX_ALL_OK, DeleteAppContainer(kValidSid));
EXPECT_TRUE(LookupAppContainer(kValidSid).empty());
EXPECT_EQ(SBOX_ERROR_GENERIC, DeleteAppContainer(kValidSid));
EXPECT_EQ(SBOX_ERROR_INVALID_APP_CONTAINER,
CreateAppContainer(L"Foo", kName));
}
// Tests handling of security capabilities on the attribute list.
TEST(AppContainerTest, SecurityCapabilities) {
if (base::win::OSInfo::GetInstance()->version() < base::win::VERSION_WIN8)
return;
scoped_ptr<AppContainerAttributes> attributes(new AppContainerAttributes);
std::vector<string16> capabilities;
EXPECT_EQ(SBOX_ERROR_INVALID_APP_CONTAINER,
attributes->SetAppContainer(L"S-1-foo", capabilities));
EXPECT_EQ(SBOX_ALL_OK,
attributes->SetAppContainer(L"S-1-15-2-12345-234", capabilities));
EXPECT_TRUE(attributes->HasAppContainer());
attributes.reset(new AppContainerAttributes);
capabilities.push_back(L"S-1-15-3-12345678-87654321");
capabilities.push_back(L"S-1-15-3-1");
capabilities.push_back(L"S-1-15-3-2");
capabilities.push_back(L"S-1-15-3-3");
EXPECT_EQ(SBOX_ALL_OK,
attributes->SetAppContainer(L"S-1-15-2-1-2", capabilities));
EXPECT_TRUE(attributes->HasAppContainer());
}
} // namespace sandbox
|
