nixos/tests/apparmor.nix: Format

nixos/tests/apparmor.nix

@@ -1,15 +1,24 @@
-import ./make-test-python.nix ({ pkgs, lib, ... } : {
-  name = "apparmor";
-  meta.maintainers = with lib.maintainers; [ julm grimmauld ];
+import ./make-test-python.nix (
+  { pkgs, lib, ... }:
+  {
+    name = "apparmor";
+    meta.maintainers = with lib.maintainers; [
+      julm
+      grimmauld
+    ];
 
-  nodes.machine =
-    { lib, pkgs, config, ... }:
-    {
-      security.apparmor.enable = lib.mkDefault true;
-    };
+    nodes.machine =
+      {
+        lib,
+        pkgs,
+        config,
+        ...
+      }:
+      {
+        security.apparmor.enable = lib.mkDefault true;
+      };
 
-  testScript =
-    ''
+    testScript = ''
       machine.wait_for_unit("multi-user.target")
 
       with subtest("AppArmor profiles are loaded"):
@@ -28,58 +37,61 @@ import ./make-test-python.nix ({ pkgs, lib, ... } : {
       with subtest("apparmorRulesFromClosure"):
           machine.succeed(
               "${pkgs.diffutils}/bin/diff -u ${pkgs.writeText "expected.rules" ''
-                  mr ${pkgs.bash}/lib/**.so*,
-                  r ${pkgs.bash},
-                  r ${pkgs.bash}/etc/**,
-                  r ${pkgs.bash}/lib/**,
-                  r ${pkgs.bash}/share/**,
-                  x ${pkgs.bash}/foo/**,
-                  mr ${pkgs.glibc}/lib/**.so*,
-                  r ${pkgs.glibc},
-                  r ${pkgs.glibc}/etc/**,
-                  r ${pkgs.glibc}/lib/**,
-                  r ${pkgs.glibc}/share/**,
-                  x ${pkgs.glibc}/foo/**,
-                  mr ${pkgs.libcap}/lib/**.so*,
-                  r ${pkgs.libcap},
-                  r ${pkgs.libcap}/etc/**,
-                  r ${pkgs.libcap}/lib/**,
-                  r ${pkgs.libcap}/share/**,
-                  x ${pkgs.libcap}/foo/**,
-                  mr ${pkgs.libcap.lib}/lib/**.so*,
-                  r ${pkgs.libcap.lib},
-                  r ${pkgs.libcap.lib}/etc/**,
-                  r ${pkgs.libcap.lib}/lib/**,
-                  r ${pkgs.libcap.lib}/share/**,
-                  x ${pkgs.libcap.lib}/foo/**,
-                  mr ${pkgs.libidn2.out}/lib/**.so*,
-                  r ${pkgs.libidn2.out},
-                  r ${pkgs.libidn2.out}/etc/**,
-                  r ${pkgs.libidn2.out}/lib/**,
-                  r ${pkgs.libidn2.out}/share/**,
-                  x ${pkgs.libidn2.out}/foo/**,
-                  mr ${pkgs.libunistring}/lib/**.so*,
-                  r ${pkgs.libunistring},
-                  r ${pkgs.libunistring}/etc/**,
-                  r ${pkgs.libunistring}/lib/**,
-                  r ${pkgs.libunistring}/share/**,
-                  x ${pkgs.libunistring}/foo/**,
-                  mr ${pkgs.glibc.libgcc}/lib/**.so*,
-                  r ${pkgs.glibc.libgcc},
-                  r ${pkgs.glibc.libgcc}/etc/**,
-                  r ${pkgs.glibc.libgcc}/lib/**,
-                  r ${pkgs.glibc.libgcc}/share/**,
-                  x ${pkgs.glibc.libgcc}/foo/**,
-              ''} ${pkgs.runCommand "actual.rules" { preferLocalBuild = true; } ''
+                mr ${pkgs.bash}/lib/**.so*,
+                r ${pkgs.bash},
+                r ${pkgs.bash}/etc/**,
+                r ${pkgs.bash}/lib/**,
+                r ${pkgs.bash}/share/**,
+                x ${pkgs.bash}/foo/**,
+                mr ${pkgs.glibc}/lib/**.so*,
+                r ${pkgs.glibc},
+                r ${pkgs.glibc}/etc/**,
+                r ${pkgs.glibc}/lib/**,
+                r ${pkgs.glibc}/share/**,
+                x ${pkgs.glibc}/foo/**,
+                mr ${pkgs.libcap}/lib/**.so*,
+                r ${pkgs.libcap},
+                r ${pkgs.libcap}/etc/**,
+                r ${pkgs.libcap}/lib/**,
+                r ${pkgs.libcap}/share/**,
+                x ${pkgs.libcap}/foo/**,
+                mr ${pkgs.libcap.lib}/lib/**.so*,
+                r ${pkgs.libcap.lib},
+                r ${pkgs.libcap.lib}/etc/**,
+                r ${pkgs.libcap.lib}/lib/**,
+                r ${pkgs.libcap.lib}/share/**,
+                x ${pkgs.libcap.lib}/foo/**,
+                mr ${pkgs.libidn2.out}/lib/**.so*,
+                r ${pkgs.libidn2.out},
+                r ${pkgs.libidn2.out}/etc/**,
+                r ${pkgs.libidn2.out}/lib/**,
+                r ${pkgs.libidn2.out}/share/**,
+                x ${pkgs.libidn2.out}/foo/**,
+                mr ${pkgs.libunistring}/lib/**.so*,
+                r ${pkgs.libunistring},
+                r ${pkgs.libunistring}/etc/**,
+                r ${pkgs.libunistring}/lib/**,
+                r ${pkgs.libunistring}/share/**,
+                x ${pkgs.libunistring}/foo/**,
+                mr ${pkgs.glibc.libgcc}/lib/**.so*,
+                r ${pkgs.glibc.libgcc},
+                r ${pkgs.glibc.libgcc}/etc/**,
+                r ${pkgs.glibc.libgcc}/lib/**,
+                r ${pkgs.glibc.libgcc}/share/**,
+                x ${pkgs.glibc.libgcc}/foo/**,
+              ''} ${
+                pkgs.runCommand "actual.rules" { preferLocalBuild = true; } ''
                   ${pkgs.gnused}/bin/sed -e 's:^[^ ]* ${builtins.storeDir}/[^,/-]*-\([^/,]*\):\1 \0:' ${
-                      pkgs.apparmorRulesFromClosure {
-                        name = "ping";
-                        additionalRules = ["x $path/foo/**"];
-                      } [ pkgs.libcap ]
+                    pkgs.apparmorRulesFromClosure {
+                      name = "ping";
+                      additionalRules = [ "x $path/foo/**" ];
+                    } [ pkgs.libcap ]
                   } |
                   ${pkgs.coreutils}/bin/sort -n -k1 |
                   ${pkgs.gnused}/bin/sed -e 's:^[^ ]* ::' >$out
-              ''}"
+                ''
+              }"
           )
     '';
-})
+  }
+)