#!/bin/sh
# Author: Jamie Strandboge <jamie@ubuntu.com>
# Copyright (C) 2013-2015 Canonical Ltd.
#
# This script is distributed under the terms and conditions of the GNU General
# Public License, Version 3 or later. See http://www.gnu.org/copyleft/gpl.html
# for details.
set -e

# Note, we don't need to run apparmor_parser because aa-easyprof will do that
# for us if apparmor_parser is found

rc="0"

expected_policy_groups_1504="networking network-admin network-client network-firewall network-service network-status snapd"
expected_policy_groups_1510="$expected_policy_groups_1504"
# compatibility
expected_policy_groups_13="$expected_policy_groups_1504"

for v in 15.04 1.3 15.10 ; do
    expected_groups="$expected_policy_groups_1504"
    vendor="ubuntu-core"
    if [ "$v" = "1.3" ]; then
        expected_groups="$expected_policy_groups_13"
        vendor="ubuntu-snappy"
    elif [ "$v" = "15.10" ]; then
        expected_groups="$expected_policy_groups_1510"
    fi
    tmp=`aa-easyprof --list-policy-groups --policy-vendor=$vendor --policy-version=$v`
    for p in $expected_groups ; do
        found=""
        for i in $tmp ; do
            if [ "$p" = "$i" ]; then
                found="yes"
                continue
            fi
        done
        if [ -z "$found" ]; then
            echo "Could not find '$p'" >&2
            rc="1"
        fi
    done

    unexpected=""
    for p in $tmp ; do
        found=""
        for i in $expected_groups ; do
            if [ "$p" = "$i" ]; then
                found="yes"
                continue
            fi
        done
        if [ -z "$found" ]; then
            echo "Found unexpected '$p'" >&2
            rc="1"
        fi
    done
done

if [ "$rc" = "0" ]; then
    echo "PASS"
else
    echo "FAIL"
fi
exit "$rc"
