···

       
37
       
 
       
      with subtest("apparmorRulesFromClosure"):

     

       
38
       
 
       
          machine.succeed(

     

       
39
       
 
       
              "${pkgs.diffutils}/bin/diff -u ${pkgs.writeText "expected.rules" ''

     

       
0
       
 
       

     

       
40
       
 
       
                mr ${pkgs.bash}/lib/**.so*,

     

       
0
       
 
       

     

       
0
       
 
       

     

       
41
       
 
       
                r ${pkgs.bash},

     

       
42
       
 
       
                r ${pkgs.bash}/etc/**,

     

       
43
       
 
       
                r ${pkgs.bash}/lib/**,

     

       
44
       
-
       
                r ${pkgs.bash}/share/**,

     

       
45
       
 
       
                x ${pkgs.bash}/foo/**,

     

       
0
       
 
       

     

       
46
       
 
       
                mr ${pkgs.glibc}/lib/**.so*,

     

       
0
       
 
       

     

       
0
       
 
       

     

       
47
       
 
       
                r ${pkgs.glibc},

     

       
48
       
 
       
                r ${pkgs.glibc}/etc/**,

     

       
49
       
 
       
                r ${pkgs.glibc}/lib/**,

     

       
50
       
-
       
                r ${pkgs.glibc}/share/**,

     

       
51
       
 
       
                x ${pkgs.glibc}/foo/**,

     

       
0
       
 
       

     

       
52
       
 
       
                mr ${pkgs.libcap}/lib/**.so*,

     

       
0
       
 
       

     

       
0
       
 
       

     

       
53
       
 
       
                r ${pkgs.libcap},

     

       
54
       
 
       
                r ${pkgs.libcap}/etc/**,

     

       
55
       
 
       
                r ${pkgs.libcap}/lib/**,

     

       
56
       
-
       
                r ${pkgs.libcap}/share/**,

     

       
57
       
 
       
                x ${pkgs.libcap}/foo/**,

     

       
0
       
 
       

     

       
58
       
 
       
                mr ${pkgs.libcap.lib}/lib/**.so*,

     

       
0
       
 
       

     

       
0
       
 
       

     

       
59
       
 
       
                r ${pkgs.libcap.lib},

     

       
60
       
 
       
                r ${pkgs.libcap.lib}/etc/**,

     

       
61
       
 
       
                r ${pkgs.libcap.lib}/lib/**,

     

       
62
       
-
       
                r ${pkgs.libcap.lib}/share/**,

     

       
63
       
 
       
                x ${pkgs.libcap.lib}/foo/**,

     

       
0
       
 
       

     

       
64
       
 
       
                mr ${pkgs.libidn2.out}/lib/**.so*,

     

       
0
       
 
       

     

       
0
       
 
       

     

       
65
       
 
       
                r ${pkgs.libidn2.out},

     

       
66
       
 
       
                r ${pkgs.libidn2.out}/etc/**,

     

       
67
       
 
       
                r ${pkgs.libidn2.out}/lib/**,

     

       
68
       
-
       
                r ${pkgs.libidn2.out}/share/**,

     

       
69
       
 
       
                x ${pkgs.libidn2.out}/foo/**,

     

       
0
       
 
       

     

       
70
       
 
       
                mr ${pkgs.libunistring}/lib/**.so*,

     

       
0
       
 
       

     

       
0
       
 
       

     

       
71
       
 
       
                r ${pkgs.libunistring},

     

       
72
       
 
       
                r ${pkgs.libunistring}/etc/**,

     

       
73
       
 
       
                r ${pkgs.libunistring}/lib/**,

     

       
74
       
-
       
                r ${pkgs.libunistring}/share/**,

     

       
75
       
 
       
                x ${pkgs.libunistring}/foo/**,

     

       
0
       
 
       

     

       
76
       
 
       
                mr ${pkgs.glibc.libgcc}/lib/**.so*,

     

       
0
       
 
       

     

       
0
       
 
       

     

       
77
       
 
       
                r ${pkgs.glibc.libgcc},

     

       
78
       
 
       
                r ${pkgs.glibc.libgcc}/etc/**,

     

       
79
       
 
       
                r ${pkgs.glibc.libgcc}/lib/**,

     

       
80
       
-
       
                r ${pkgs.glibc.libgcc}/share/**,

     

       
81
       
 
       
                x ${pkgs.glibc.libgcc}/foo/**,

     

       
82
       
 
       
              ''} ${

     

       
83
       
 
       
                pkgs.runCommand "actual.rules" { preferLocalBuild = true; } ''

     

···

       
37
       
 
       
      with subtest("apparmorRulesFromClosure"):

     

       
38
       
 
       
          machine.succeed(

     

       
39
       
 
       
              "${pkgs.diffutils}/bin/diff -u ${pkgs.writeText "expected.rules" ''

     

       
40
       
+
       
                ixr ${pkgs.bash}/libexec/**,

     

       
41
       
 
       
                mr ${pkgs.bash}/lib/**.so*,

     

       
42
       
+
       
                mr ${pkgs.bash}/lib64/**.so*,

     

       
43
       
+
       
                mr ${pkgs.bash}/share/**,

     

       
44
       
 
       
                r ${pkgs.bash},

     

       
45
       
 
       
                r ${pkgs.bash}/etc/**,

     

       
46
       
 
       
                r ${pkgs.bash}/lib/**,

     

       
47
       
+
       
                r ${pkgs.bash}/lib64/**,

     

       
48
       
 
       
                x ${pkgs.bash}/foo/**,

     

       
49
       
+
       
                ixr ${pkgs.glibc}/libexec/**,

     

       
50
       
 
       
                mr ${pkgs.glibc}/lib/**.so*,

     

       
51
       
+
       
                mr ${pkgs.glibc}/lib64/**.so*,

     

       
52
       
+
       
                mr ${pkgs.glibc}/share/**,

     

       
53
       
 
       
                r ${pkgs.glibc},

     

       
54
       
 
       
                r ${pkgs.glibc}/etc/**,

     

       
55
       
 
       
                r ${pkgs.glibc}/lib/**,

     

       
56
       
+
       
                r ${pkgs.glibc}/lib64/**,

     

       
57
       
 
       
                x ${pkgs.glibc}/foo/**,

     

       
58
       
+
       
                ixr ${pkgs.libcap}/libexec/**,

     

       
59
       
 
       
                mr ${pkgs.libcap}/lib/**.so*,

     

       
60
       
+
       
                mr ${pkgs.libcap}/lib64/**.so*,

     

       
61
       
+
       
                mr ${pkgs.libcap}/share/**,

     

       
62
       
 
       
                r ${pkgs.libcap},

     

       
63
       
 
       
                r ${pkgs.libcap}/etc/**,

     

       
64
       
 
       
                r ${pkgs.libcap}/lib/**,

     

       
65
       
+
       
                r ${pkgs.libcap}/lib64/**,

     

       
66
       
 
       
                x ${pkgs.libcap}/foo/**,

     

       
67
       
+
       
                ixr ${pkgs.libcap.lib}/libexec/**,

     

       
68
       
 
       
                mr ${pkgs.libcap.lib}/lib/**.so*,

     

       
69
       
+
       
                mr ${pkgs.libcap.lib}/lib64/**.so*,

     

       
70
       
+
       
                mr ${pkgs.libcap.lib}/share/**,

     

       
71
       
 
       
                r ${pkgs.libcap.lib},

     

       
72
       
 
       
                r ${pkgs.libcap.lib}/etc/**,

     

       
73
       
 
       
                r ${pkgs.libcap.lib}/lib/**,

     

       
74
       
+
       
                r ${pkgs.libcap.lib}/lib64/**,

     

       
75
       
 
       
                x ${pkgs.libcap.lib}/foo/**,

     

       
76
       
+
       
                ixr ${pkgs.libidn2.out}/libexec/**,

     

       
77
       
 
       
                mr ${pkgs.libidn2.out}/lib/**.so*,

     

       
78
       
+
       
                mr ${pkgs.libidn2.out}/lib64/**.so*,

     

       
79
       
+
       
                mr ${pkgs.libidn2.out}/share/**,

     

       
80
       
 
       
                r ${pkgs.libidn2.out},

     

       
81
       
 
       
                r ${pkgs.libidn2.out}/etc/**,

     

       
82
       
 
       
                r ${pkgs.libidn2.out}/lib/**,

     

       
83
       
+
       
                r ${pkgs.libidn2.out}/lib64/**,

     

       
84
       
 
       
                x ${pkgs.libidn2.out}/foo/**,

     

       
85
       
+
       
                ixr ${pkgs.libunistring}/libexec/**,

     

       
86
       
 
       
                mr ${pkgs.libunistring}/lib/**.so*,

     

       
87
       
+
       
                mr ${pkgs.libunistring}/lib64/**.so*,

     

       
88
       
+
       
                mr ${pkgs.libunistring}/share/**,

     

       
89
       
 
       
                r ${pkgs.libunistring},

     

       
90
       
 
       
                r ${pkgs.libunistring}/etc/**,

     

       
91
       
 
       
                r ${pkgs.libunistring}/lib/**,

     

       
92
       
+
       
                r ${pkgs.libunistring}/lib64/**,

     

       
93
       
 
       
                x ${pkgs.libunistring}/foo/**,

     

       
94
       
+
       
                ixr ${pkgs.glibc.libgcc}/libexec/**,

     

       
95
       
 
       
                mr ${pkgs.glibc.libgcc}/lib/**.so*,

     

       
96
       
+
       
                mr ${pkgs.glibc.libgcc}/lib64/**.so*,

     

       
97
       
+
       
                mr ${pkgs.glibc.libgcc}/share/**,

     

       
98
       
 
       
                r ${pkgs.glibc.libgcc},

     

       
99
       
 
       
                r ${pkgs.glibc.libgcc}/etc/**,

     

       
100
       
 
       
                r ${pkgs.glibc.libgcc}/lib/**,

     

       
101
       
+
       
                r ${pkgs.glibc.libgcc}/lib64/**,

     

       
102
       
 
       
                x ${pkgs.glibc.libgcc}/foo/**,

     

       
103
       
 
       
              ''} ${

     

       
104
       
 
       
                pkgs.runCommand "actual.rules" { preferLocalBuild = true; } ''