From 4fa5881562a06c1fefa0302defbc878bb9c8131b Mon Sep 17 00:00:00 2001 From: Jameson Graef Rollins Date: Sat, 11 Jul 2009 21:49:03 -0400 Subject: update test to test for cases when authorized_user_ids is a symlink --- tests/basic | 52 ++++++++++++++++++++++++++++++++++++++++++++++++++-- 1 file changed, 50 insertions(+), 2 deletions(-) (limited to 'tests/basic') diff --git a/tests/basic b/tests/basic index 3386f76..82edf43 100755 --- a/tests/basic +++ b/tests/basic @@ -37,7 +37,7 @@ On debian-derived systems, you can set this up with: perl -MDigest::SHA -e 1 2>/dev/null || { echo "You must have the perl module Digest::SHA installed to run this test. On debian-derived systems, you can set this up with: - apt-get install libdigest-sha1-perl" ; exit 1; } + apt-get install libdigest-sha-perl" ; exit 1; } ## FIXME: other checks? @@ -328,20 +328,68 @@ ssh_test 255 chmod o-w "$TESTHOME"/.monkeysphere/authorized_user_ids monkeysphere-authentication update-users $(whoami) +# test symlinks +echo +echo "##################################################" +echo "### make authorized_user_ids a symlink and updating..." +mkdir "$TESTHOME"/.monkeysphere.linktest +mv "$TESTHOME"/.monkeysphere{,.linktest}/authorized_user_ids +ln -s "$TESTHOME"/.monkeysphere{.linktest,}/authorized_user_ids +monkeysphere-authentication update-users $(whoami) +echo +echo "##################################################" +echo "### ssh connection test for server authentication success..." +ssh_test +echo +echo "##################################################" +echo "### create bad permissions on link dir and updating..." +chmod o+w "$TESTHOME"/.monkeysphere.linktest +monkeysphere-authentication update-users $(whoami) +echo +echo "##################################################" +echo "### ssh connection test for server authentication denial..." +ssh_test 255 +chmod o-w "$TESTHOME"/.monkeysphere.linktest +# FIXME: implement check of link path, and uncomment this test +# echo +# echo "##################################################" +# echo "### create bad permissions on link dir and updating..." +# chmod o+w "$TESTHOME"/.monkeysphere +# monkeysphere-authentication update-users $(whoami) +# echo +# echo "##################################################" +# echo "### ssh connection test for server authentication denial..." +# ssh_test 255 +# chmod o-w "$TESTHOME"/.monkeysphere +mv "$TESTHOME"/.monkeysphere{.linktest,}/authorized_user_ids +rmdir "$TESTHOME"/.monkeysphere.linktest + # FIXME: addtest: remove admin as id-certifier and check ssh failure # FIXME: addtest: add hostname on host key # FIXME: addtest: revoke hostname on host key and check ssh failure # addtest: revoke the host key and check ssh failure + # test to make sure things are OK after the previous tests: +echo +echo "##################################################" +echo "### settings reset, updating users..." +monkeysphere-authentication update-users $(whoami) +echo +echo "##################################################" +echo "### ssh connection test for success..." ssh_test + echo echo "##################################################" -echo "### ssh connection test for server with revoked key..." +echo "### revoking host key..." # generate the revocation certificate and feed it directly to the test # user's keyring (we're not publishing to the keyservers) monkeysphere-host revoke-key | gpg --import +echo +echo "##################################################" +echo "### ssh connection test for server with revoked key..." ssh_test 255 -- cgit v1.2.3 From 2b922e5ac4950e1260e2ac8e62e73a6aca1b3dca Mon Sep 17 00:00:00 2001 From: Jameson Graef Rollins Date: Sun, 12 Jul 2009 12:03:08 -0400 Subject: add more tests for various cases of critical files under symlinked paths --- tests/basic | 93 +++++++++++++++++++++++++++++++++++++++++++++++++++---------- 1 file changed, 79 insertions(+), 14 deletions(-) (limited to 'tests/basic') diff --git a/tests/basic b/tests/basic index 82edf43..b4ad064 100755 --- a/tests/basic +++ b/tests/basic @@ -66,7 +66,7 @@ ssh_test() { # wait until the socket is created before continuing while [ ! -S "$SOCKET" ] ; do - sleep 1 + sleep 2 done # make a client connection to the socket @@ -300,7 +300,7 @@ mv "$TESTHOME"/.monkeysphere/authorized_user_ids{,.bak} monkeysphere-authentication update-users $(whoami) echo echo "##################################################" -echo "### ssh connection test for server authentication denial..." +echo "### ssh connection test for failure..." ssh_test 255 mv "$TESTHOME"/.monkeysphere/authorized_user_ids{.bak,} @@ -313,7 +313,7 @@ chmod g+w "$TESTHOME"/.monkeysphere/authorized_user_ids monkeysphere-authentication update-users $(whoami) echo echo "##################################################" -echo "### ssh connection test for server authentication denial..." +echo "### ssh connection test for failure..." ssh_test 255 chmod g-w "$TESTHOME"/.monkeysphere/authorized_user_ids echo @@ -323,7 +323,7 @@ chmod o+w "$TESTHOME"/.monkeysphere/authorized_user_ids monkeysphere-authentication update-users $(whoami) echo echo "##################################################" -echo "### ssh connection test for server authentication denial..." +echo "### ssh connection test for failure..." ssh_test 255 chmod o-w "$TESTHOME"/.monkeysphere/authorized_user_ids monkeysphere-authentication update-users $(whoami) @@ -331,14 +331,18 @@ monkeysphere-authentication update-users $(whoami) # test symlinks echo echo "##################################################" -echo "### make authorized_user_ids a symlink and updating..." -mkdir "$TESTHOME"/.monkeysphere.linktest -mv "$TESTHOME"/.monkeysphere{,.linktest}/authorized_user_ids +echo "### setup for symlink tests..." +cp -a "$TESTHOME"/.monkeysphere{,.linktest} + +echo +echo "##################################################" +echo "### make authorized_user_ids an absolute symlink and updating..." +mv "$TESTHOME"/.monkeysphere/authorized_user_ids{,.bak} ln -s "$TESTHOME"/.monkeysphere{.linktest,}/authorized_user_ids monkeysphere-authentication update-users $(whoami) echo echo "##################################################" -echo "### ssh connection test for server authentication success..." +echo "### ssh connection test for success..." ssh_test echo echo "##################################################" @@ -347,7 +351,26 @@ chmod o+w "$TESTHOME"/.monkeysphere.linktest monkeysphere-authentication update-users $(whoami) echo echo "##################################################" -echo "### ssh connection test for server authentication denial..." +echo "### ssh connection test for failure..." +ssh_test 255 +chmod o-w "$TESTHOME"/.monkeysphere.linktest +echo +echo "##################################################" +echo "### make authorized_user_ids a relative symlink and updating..." +ln -sf ../.monkeysphere.linktest/authorized_user_ids "$TESTHOME"/.monkeysphere/authorized_user_ids +monkeysphere-authentication update-users $(whoami) +echo +echo "##################################################" +echo "### ssh connection test for success..." +ssh_test +echo +echo "##################################################" +echo "### create bad permissions on link dir updating..." +chmod o+w "$TESTHOME"/.monkeysphere.linktest +monkeysphere-authentication update-users $(whoami) +echo +echo "##################################################" +echo "### ssh connection test for failure..." ssh_test 255 chmod o-w "$TESTHOME"/.monkeysphere.linktest # FIXME: implement check of link path, and uncomment this test @@ -358,11 +381,53 @@ chmod o-w "$TESTHOME"/.monkeysphere.linktest # monkeysphere-authentication update-users $(whoami) # echo # echo "##################################################" -# echo "### ssh connection test for server authentication denial..." +# echo "### ssh connection test for failure..." # ssh_test 255 # chmod o-w "$TESTHOME"/.monkeysphere -mv "$TESTHOME"/.monkeysphere{.linktest,}/authorized_user_ids -rmdir "$TESTHOME"/.monkeysphere.linktest +rm "$TESTHOME"/.monkeysphere/authorized_user_ids +mv "$TESTHOME"/.monkeysphere/authorized_user_ids{.bak,} + +echo +echo "##################################################" +echo "### make .monkeysphere directory an absolute symlink and updating..." +mv "$TESTHOME"/.monkeysphere{,.bak} +ln -s "$TESTHOME"/.monkeysphere{.linktest,} +monkeysphere-authentication update-users $(whoami) +echo +echo "##################################################" +echo "### ssh connection test for success..." +ssh_test +echo +echo "##################################################" +echo "### create bad permissions on link dir and updating..." +chmod o+w "$TESTHOME"/.monkeysphere.linktest +monkeysphere-authentication update-users $(whoami) +echo +echo "##################################################" +echo "### ssh connection test for failure..." +ssh_test 255 +chmod o-w "$TESTHOME"/.monkeysphere.linktest +echo +echo "##################################################" +echo "### make .monkeysphere directory a relative symlink and updating..." +ln -sfn .monkeysphere{.linktest,} +monkeysphere-authentication update-users $(whoami) +echo +echo "##################################################" +echo "### ssh connection test for success..." +ssh_test +echo +echo "##################################################" +echo "### create bad permissions on link dir updating..." +chmod o+w "$TESTHOME"/.monkeysphere.linktest +monkeysphere-authentication update-users $(whoami) +echo +echo "##################################################" +echo "### ssh connection test for failure..." +ssh_test 255 +chmod o-w "$TESTHOME"/.monkeysphere.linktest +rm "$TESTHOME"/.monkeysphere +mv "$TESTHOME"/.monkeysphere{.bak,} # FIXME: addtest: remove admin as id-certifier and check ssh failure @@ -374,7 +439,7 @@ rmdir "$TESTHOME"/.monkeysphere.linktest # test to make sure things are OK after the previous tests: echo echo "##################################################" -echo "### settings reset, updating users..." +echo "### settings reset, updating..." monkeysphere-authentication update-users $(whoami) echo echo "##################################################" @@ -389,7 +454,7 @@ echo "### revoking host key..." monkeysphere-host revoke-key | gpg --import echo echo "##################################################" -echo "### ssh connection test for server with revoked key..." +echo "### ssh connection test for failure..." ssh_test 255 -- cgit v1.2.3