age
f4bf1c7a34
@[l] please also check the webserver if you change the config +moved language checkers +changed input sanitizing
127 lines
4.6 KiB
Python
Executable file
127 lines
4.6 KiB
Python
Executable file
#!/usr/bin/env python2.4
|
|
|
|
import unittest
|
|
import sys
|
|
from CryptoBox import *
|
|
|
|
class CryptoBoxPropsDeviceTests(unittest.TestCase):
|
|
import CryptoBox
|
|
cb = CryptoBox.CryptoBoxProps()
|
|
|
|
def testAllowedDevices(self):
|
|
'''isDeviceAllowed should accept permitted devices'''
|
|
self.assertTrue(self.cb.isDeviceAllowed("/dev/loop"))
|
|
self.assertTrue(self.cb.isDeviceAllowed("/dev/loop1"))
|
|
self.assertTrue(self.cb.isDeviceAllowed("/dev/loop/urgd"))
|
|
self.assertTrue(self.cb.isDeviceAllowed("/dev/usb/../loop1"))
|
|
|
|
def testDeniedDevices(self):
|
|
'''isDeviceAllowed should fail with not explicitly allowed devices'''
|
|
self.assertFalse(self.cb.isDeviceAllowed("/dev/hda"))
|
|
self.assertFalse(self.cb.isDeviceAllowed("/dev/loopa/../hda"))
|
|
self.assertFalse(self.cb.isDeviceAllowed("/"))
|
|
|
|
|
|
class CryptoBoxPropsConfigTests(unittest.TestCase):
|
|
'''test here if everything with the config turns right'''
|
|
import os
|
|
import CryptoBox
|
|
|
|
files = {
|
|
"configFileOK" : "cbox-test_ok.conf",
|
|
"configFileBroken" : "cbox-test_broken.conf",
|
|
"nameDBFile" : "cryptobox_names.db",
|
|
"logFile" : "cryptobox.log",
|
|
"tmpdir" : "cryptobox-mnt" }
|
|
tmpdirname = ""
|
|
filenames = {}
|
|
configContentOK = """
|
|
[Main]
|
|
AllowedDevices = /dev/loop
|
|
DefaultVolumePrefix = "Data "
|
|
DefaultCipher = aes-cbc-essiv:sha256
|
|
[Locations]
|
|
NameDatabase = %s/cryptobox_names.db
|
|
MountParentDir = %s
|
|
TemplateDir = ../templates
|
|
LangDir = ../lang
|
|
DocDir = ../doc/html
|
|
[Log]
|
|
Level = debug
|
|
Destination = file
|
|
Details = %s/cryptobox.log
|
|
[Programs]
|
|
blkid = /sbin/blkid
|
|
cryptsetup = /sbin/cryptsetup
|
|
super = /usr/bin/super
|
|
CryptoBoxRootActions = CryptoBoxRootActions
|
|
"""
|
|
|
|
|
|
def setUp(self):
|
|
'''generate all files in tmp and remember the names'''
|
|
import tempfile
|
|
os = self.os
|
|
self.tmpdirname = tempfile.mkdtemp(prefix="cbox-")
|
|
for file in self.files.keys():
|
|
self.filenames[file] = os.path.join(self.tmpdirname, self.files[file])
|
|
self.writeConfig()
|
|
|
|
|
|
def tearDown(self):
|
|
'''remove the created tmpfiles'''
|
|
os = self.os
|
|
os.chdir(self.tmpdirname)
|
|
# remove temp files
|
|
for file in self.filenames.values():
|
|
if os.path.exists(file):
|
|
os.remove(file)
|
|
# remove temp dir
|
|
os.rmdir(self.tmpdirname)
|
|
|
|
|
|
def testConfigInit(self):
|
|
'''Check various branches of config file loading'''
|
|
import os
|
|
self.assertRaises(CBConfigUnavailableError, self.CryptoBox.CryptoBoxProps,"/invalid/path/to/config/file")
|
|
self.assertRaises(CBConfigUnavailableError, self.CryptoBox.CryptoBoxProps,"/etc/shadow")
|
|
for a in self.CryptoBox.CONF_LOCATIONS:
|
|
if os.path.exists(a):
|
|
self.CryptoBox.CryptoBoxProps()
|
|
self.CryptoBox.CryptoBoxProps(self.filenames["configFileOK"])
|
|
else:
|
|
self.assertRaises(CBConfigUnavailableError, self.CryptoBox.CryptoBoxProps)
|
|
self.assertRaises(CBConfigUnavailableError, self.CryptoBox.CryptoBoxProps,[])
|
|
|
|
def testBrokenConfigs(self):
|
|
"""Check various broken configurations"""
|
|
self.writeConfig("NameDatabase", "#out", filename=self.filenames["configFileBroken"])
|
|
self.assertRaises(CBConfigUndefinedError, self.CryptoBox.CryptoBoxProps,self.filenames["configFileBroken"])
|
|
self.writeConfig("Level", "#out", filename=self.filenames["configFileBroken"])
|
|
self.assertRaises(CBConfigUndefinedError, self.CryptoBox.CryptoBoxProps,self.filenames["configFileBroken"])
|
|
self.writeConfig("Details", "#out", filename=self.filenames["configFileBroken"])
|
|
self.assertRaises(CBConfigUndefinedError, self.CryptoBox.CryptoBoxProps,self.filenames["configFileBroken"])
|
|
self.writeConfig("super", "super=/bin/invalid/no", filename=self.filenames["configFileBroken"])
|
|
self.assertRaises(CBEnvironmentError, self.CryptoBox.CryptoBoxProps,self.filenames["configFileBroken"])
|
|
self.writeConfig("CryptoBoxRootActions", "#not here", filename=self.filenames["configFileBroken"])
|
|
self.assertRaises(CBConfigUndefinedError, self.CryptoBox.CryptoBoxProps,self.filenames["configFileBroken"])
|
|
self.writeConfig("CryptoBoxRootActions", "CryptoBoxRootActions = /bin/false", filename=self.filenames["configFileBroken"])
|
|
self.assertRaises(CBEnvironmentError, self.CryptoBox.CryptoBoxProps,self.filenames["configFileBroken"])
|
|
|
|
|
|
def writeConfig(self, replace=None, newline=None, filename=None):
|
|
"""write a config file and (optional) replace a line in it"""
|
|
import re
|
|
if not filename: filename = self.filenames["configFileOK"]
|
|
content = self.configContentOK % (self.tmpdirname, self.tmpdirname, self.tmpdirname)
|
|
if replace:
|
|
pattern = re.compile('^' + replace + '\\s*=.*$', flags=re.M)
|
|
content = re.sub(pattern, newline, content)
|
|
cf = open(filename, "w")
|
|
cf.write(content)
|
|
cf.close()
|
|
|
|
|
|
if __name__ == "__main__":
|
|
unittest.main()
|