Your IP : 216.73.216.172
U
�]�W � @ s� d Z ddlZddlZddlZddlZz ddlZddlZddlZdZW n e k
r\ dZY nX ddl
m m Z
ddlmZ ddlm Z ddlmZ ddlmZ dd l
mZ d
Zd Zd Zejed
d�G dd� de��ZG dd� de�Zejed
d�G dd� de��Zejedd�G dd� de
j��ZG dd� de
j�Z G dd� de
j�Z G d d � d e
j�Z G d d � d e
j�Z G d d!� d!e
j�Z ej!d"d#� �Z"d$d%� Z#d&d'� Z$d(d)� Z%d*d+� Z&e'd,k�r�e�(� dS )-z#Tests for certbot.compat.filesystem� NFT)�lock)�util)�os)�
filesystem)�TempDirTestCasezS-1-1-0zS-1-5-18z S-1-5-32-544z"Tests specific to Windows security��reasonc sp e Zd ZdZ� fdd�Zdd� Zdd� Zdd � Zd
d � Zd d
� Z dd� Z
dd� Z dd� Z dd� Z
dd� Z� ZS )�WindowsChmodTestsz:Unit tests for Windows chmod function in filesystem modulec s t t| ��� t| j�| _d S �N)�superr �setUp�
_create_probe�tempdir�
probe_path��self�� __class__� �F/usr/lib/python3/dist-packages/certbot/tests/compat/filesystem_test.pyr " s zWindowsChmodTests.setUpc C s� t j�| jd�}t �| j|� t| j��� }t|��� }t� |d� t| j��� }t|��� }| �
t� ||�� | � t� ||�� d S )N�link� )
r �path�joinr �symlinkr �_get_security_dacl�GetSecurityDescriptorDaclr �chmod� assertFalse�_compare_dacls�
assertTrue)r � link_path�ref_dacl_probeZ
ref_dacl_link�cur_dacl_probeZ
cur_dacl_linkr r r �test_symlink_resolution& s z)WindowsChmodTests.test_symlink_resolutionc s� t �t��t�| jd� t| j��� � | �� �fdd�t d� �
� �D �� t�| jd� t| j��� � | � � �fdd�t d� �
� �D �� d S )Nr c s( g | ] }� � |�d �kr� � |��qS �� �ZGetAce��.0�index��daclZ everybodyr r �
<listcomp>; s �z;WindowsChmodTests.test_world_permission.<locals>.<listcomp>r i� c s( g | ] }� � |�d �kr� � |��qS r% r' r( r+ r r r- A s �) �
win32security�ConvertStringSidToSid�
EVERYBODY_SIDr r r r r r �range� GetAceCountr r r r+ r �test_world_permission5 s
$z'WindowsChmodTests.test_world_permissionc C sN t �| jd� t| j��� }t �| jd� t| j��� }| �t �||�� d S )Nr i� )r r r r r r r )r r" r# r r r �test_group_permissions_noopD s
z-WindowsChmodTests.test_group_permissions_noopc s� t �t��t �t�� t�| jd� t| j��� ���fdd�t d��
� �D �}� �fdd�t d��
� �D �}| � t |�d� | � t |�d� | � |d d t
j� | � |d d t
j� d S )N� c s( g | ] }� � |�d �kr� � |��qS r% r' r( )r, �systemr r r- T s �z<WindowsChmodTests.test_admin_permissions.<locals>.<listcomp>r c s( g | ] }�� |�d � kr�� |��qS r% r' r( )�adminsr, r r r- V s �� )r. r/ �
SYSTEM_SID�
ADMINS_SIDr r r r r r1 r2 � assertEqual�len�
ntsecuritycon�FILE_ALL_ACCESS)r Z system_acesZ
admin_acesr )r7 r, r6 r �test_admin_permissionsM s
z(WindowsChmodTests.test_admin_permissionsc C s | � dtj� d S )N� )�
_test_flagr= �FILE_GENERIC_READr r r r �test_read_flag_ s z WindowsChmodTests.test_read_flagc C s | � dtj� d S �Nr8 )rA r= �FILE_GENERIC_EXECUTEr r r r �test_execute_flagb s z#WindowsChmodTests.test_execute_flagc C s | � dtjtjA tjA � d S )Nr& )rA r= r> rB rE r r r r �test_write_flage s
��z!WindowsChmodTests.test_write_flagc C s | � dtj� d S )N� )rA r= r> r r r r �test_full_flagj s z WindowsChmodTests.test_full_flagc st t �| jd|B � t| j��� � t�t��� �fdd�td� � � �D �}| �
t |�d� |d }| �
|d |� d S )Nr c s( g | ] }� � |�d �kr� � |��qS r% r' r( r+ r r r- u s �z0WindowsChmodTests._test_flag.<locals>.<listcomp>r r8 ) r r r r r r. r/ r0 r1 r2 r; r< )r Z
everyone_modeZ windows_flagZacls_everybodyr r+ r rA m s
z WindowsChmodTests._test_flagc C s� t �dt�� �\}}}t| j�}t| j||� t�| jd� t | j�}| �
|� � � � d� t �
t�}t| j�}t| j||� t�| jd� t | j�}| �
|� � � � d� d S )N� r � r& )r. ZLookupAccountName�win32apiZ GetUserName�_get_security_ownerr �
_set_ownerr r r r; r r2 r/ r: )r Zauthenticated_user�_�security_ownerZ
security_daclZ
admin_userr r r � test_user_admin_dacl_consistency~ s
z2WindowsChmodTests.test_user_admin_dacl_consistency)�__name__�
__module__� __qualname__�__doc__r r$ r3 r4 r? rC rF rG rI rA rQ �
__classcell__r r r r r s r c s$ e Zd Z� fdd�Zdd� Z� ZS )�ComputePrivateKeyModeTestc s t t| ��� t| j�| _d S r
)r rW r r
r r r r r r r � s z ComputePrivateKeyModeTest.setUpc C s> t �| jd� t �| jd�}tr.| �|d� n | �|d� d S )Ni� i� i� )r r r Zcompute_private_key_mode�
POSIX_MODEr; )r Znew_moder r r � test_compute_private_key_mode� s
z7ComputePrivateKeyModeTest.test_compute_private_key_mode)rR rS rT r rY rV r r r r rW � s rW c @ s, e Zd Zdd� Zdd� Zdd� Zdd� Zd S )
�WindowsOpenTestc st t j�| jd�}t�|t jt jB t jB d�}t � |� t
|�� � � t �
t��| �� �fdd�td� �� �D �� d S )N�filer c s( g | ] }� � |�d �kr� � |��qS r% r' r( r+ r r r- � s �zEWindowsOpenTest.test_new_file_correct_permissions.<locals>.<listcomp>r )r r r r r �open�O_CREAT�O_EXCL�O_RDWR�closer r r. r/ r0 r r1 r2 �r r Zdescr r+ r �!test_new_file_correct_permissions� s
z1WindowsOpenTest.test_new_file_correct_permissionsc s| t j�| jd�}t|d��� t�|t jt jB d�}t �|� t |��
� � t � t
��| �� �fdd�td� �� �D �� d S )Nr[ �wr c s( g | ] }� � |�d �kr� � |��qS r% r' r( r+ r r r- � s �zJWindowsOpenTest.test_existing_file_correct_permissions.<locals>.<listcomp>r )r r r r r\ r` r r^ r_ r r r. r/ r0 r r1 r2 ra r r+ r �&test_existing_file_correct_permissions� s
z6WindowsOpenTest.test_existing_file_correct_permissionsc C s | j ddtjtjB d� | �t�� }| j ddtjtjB d� W 5 Q R X | �|jjtj � | j ddtjd� | j ddtjd� tj
� | j d�}t
|d ��� t�|�}z>| �t��}| j d
dtjd� W 5 Q R X | �|jjtj� W 5 |�� X | �t�� | j d dtjd� W 5 Q R X d S ) Nr8 F)�
file_exist�flagsr& TrK r@ �5rc � � )�_test_one_creationr r] r^ � assertRaises�OSErrorr; � exception�errnoZEEXISTr r r r\ r` r ZLockFile�releaseZEACCES�O_RDONLY)r Zraisedr Zfilelockr r r �test_create_file_on_open� s "
z(WindowsOpenTest.test_create_file_on_openc C sd t j�| jt|��}|r:t j�|�s:t|d�� W 5 Q R X d }zt�||�}W 5 |r^t �|� X d S )Nrc ) r r r r �str�existsr\ r` r )r Znumre rf Zone_fileZhandlerr r r rj � s
z"WindowsOpenTest._test_one_creationN)rR rS rT rb rd rq rj r r r r rZ � s
rZ �!Test specific to Windows securityc @ s( e Zd ZdZdd� Zdd� Zdd� ZdS ) �WindowsMkdirTestszFUnit tests for Windows mkdir + makedirs functions in filesystem modulec sZ t j�| jd�}t�|d� t�t��t |��
� � | � � �fdd�t d� �
� �D �� d S )N�dirr c s( g | ] }� � |�d �kr� � |��qS r% r' r( r+ r r r- � s �zDWindowsMkdirTests.test_mkdir_correct_permissions.<locals>.<listcomp>r )r r r r r �mkdirr. r/ r0 r r r r1 r2 )r r r r+ r � test_mkdir_correct_permissions� s
z0WindowsMkdirTests.test_mkdir_correct_permissionsc sh t j�| jd�}t j�|d�}t�|d� t�t��t |��
� � | � � �fdd�t d� �
� �D �� d S )Nrv �subpathr c s( g | ] }� � |�d �kr� � |��qS r% r' r( r+ r r r- s �zGWindowsMkdirTests.test_makedirs_correct_permissions.<locals>.<listcomp>r )r r r r r �makedirsr. r/ r0 r r r r1 r2 )r r ry r r+ r �!test_makedirs_correct_permissions� s
z3WindowsMkdirTests.test_makedirs_correct_permissionsc C sl t j�| jd�}dd l }|j}t�|� | �||j� zt�|� W n tk
rX Y nX | �||j� d S )Nrv r ) r r r r rw r rz r; rl )r r �std_osZoriginal_mkdirr r r � test_makedirs_switch_os_mkdir
s
z/WindowsMkdirTests.test_makedirs_switch_os_mkdirN)rR rS rT rU rx r{ r} r r r r ru � s ru c sT e Zd ZdZ� fdd�Zejedd�dd� �Zej edd�d d
� �Z
d d � Z � Z S )
�
OwnershipTestz@Tests about copy_ownership_and_apply_mode and has_same_ownershipc s t t| ��� t| j�| _d S r
)r r~ r r
r r r r r r r s zOwnershipTest.setUprt r c
s� t �t�}t �� j}|�|d� t�d��8}t�d��"}||_t j
d| j dddd� W 5 Q R X W 5 Q R X | � |j
d� |jd }|d d }| � ||�� � |jd
}|d d }|�� � t �t��| �� �� � | �� �fd d �td � �� �D �� d S )
NF� win32security.GetFileSecurityz win32security.SetFileSecurity�dummyr T�Z copy_userZ
copy_groupr& r r8 c s( g | ] }� � |�d �kr� � |��qS r% r' r( r+ r r r- 6 s �z=OwnershipTest.test_copy_ownership_windows.<locals>.<listcomp>)r. r/ r9 �SECURITY_ATTRIBUTES�SECURITY_DESCRIPTOR�SetSecurityDescriptorOwner�mock�patch� return_valuer � copy_ownership_and_apply_moder r; Z
call_countZcall_args_listZGetSecurityDescriptorOwnerr r0 r r2 r r1 )r r6 �security�mock_getZmock_setZ
first_callZ second_callr r+ r �test_copy_ownership_windows s.
�
z)OwnershipTest.test_copy_ownership_windows� Test specific to Linux securityc C s� t �d��X}t �d��B}t �d��,}d|j_d|j_tjd| jdddd � W 5 Q R X W 5 Q R X W 5 Q R X |�| jdd� |�| jd� d S )
Nzos.chownzos.chmodzos.stat�2 �3 r� r Tr� ) r� r� r� �st_uid�st_gidr r� r Zassert_called_once_with)r Z
mock_chownZ
mock_chmodZ mock_statr r r �test_copy_ownership_linux9 s �$z'OwnershipTest.test_copy_ownership_linuxc C sV t j�| jd�}t j�| jd�}t�|d��� t�|d��� | �t� ||�� d S )NZtest1Ztest2rc )
r r r r r � safe_openr` r r Zhas_same_ownership)r Zpath1Zpath2r r r �test_has_same_ownershipF s
z%OwnershipTest.test_has_same_ownership)
rR rS rT rU r �unittest�skipIfrX r� �
skipUnlessr� r� rV r r r r r~ s
r~ c sl e Zd ZdZ� fdd�Zdd� Zejedd�dd � �Z ej
ed
d�d d � �Z d
d� Z dd� Z
dd� Z� ZS )�CheckPermissionsTestz-Tests relative to functions that check modes.c s t t| ��� t| j�| _d S r
)r r� r r
r r r r r r r R s zCheckPermissionsTest.setUpc C s: | � t�| jd�� t�| jd� | �t�| jd�� d S �N�� r )r r Z
check_moder r r r r r r �test_check_modeV s z$CheckPermissionsTest.test_check_modert r c C sd | � t�| j�� t�t�}t�� j}|� |d� t
� d�� }||_ | �
t�| j�� W 5 Q R X d S )NFr )r r � check_ownerr r. r/ r9 r� r� r� r� r� r� r )r r6 r� r� r r r �test_check_owner_windows\ s
z-CheckPermissionsTest.test_check_owner_windowsr� c C sX | � t�| j�� dd l}|�� }t�d��"}|d |_| � t�| j�� W 5 Q R X d S )Nr z os.getuidr8 )
r r r� r r �getuidr� r� r� r )r r| ZuidZmock_uidr r r �test_check_owner_linuxh s
z+CheckPermissionsTest.test_check_owner_linuxc C sx | � t�| jd�� t�d�� }d|_| �t�| jd�� W 5 Q R X t�d�� }d|_| �t�| jd�� W 5 Q R X d S )Nr� z$certbot.compat.filesystem.check_modeFz%certbot.compat.filesystem.check_owner)r r Zcheck_permissionsr r� r� r� r )r Z mock_modeZ
mock_ownerr r r �test_check_permissionss s z+CheckPermissionsTest.test_check_permissionsc C sj t �| jd� | �t �| jd�� t �| jd� | �t �| jd�� t �| jd� | �t �| jd�� d S )Nr� r i� )r r r r Zhas_min_permissionsr r r r r �test_check_min_permissions~ s z/CheckPermissionsTest.test_check_min_permissionsc C sD t �| jd� | �t �| j�� t �| jd� | �t �| j�� d S r� )r r r r Zhas_world_permissionsr r r r r �test_is_world_reachable� s z,CheckPermissionsTest.test_is_world_reachable)rR rS rT rU r r� r� r� rX r� r� r� r� r� r� rV r r r r r� P s
r� c @ s e Zd ZdZdd� ZdS )�
OsReplaceTestz3Test to ensure consistent behavior of rename methodc C sp t j�| jd�}t j�| jd�}t|d��� t|d��� t�||� | �t j� |�� | �
t j� |�� dS )zKEnsure that replace will effectively rename src into dst for all platforms.�src�dstrc N) r r r r r\ r` r �replacer rs r )r r� r� r r r � test_os_replace_to_existing_file� s z.OsReplaceTest.test_os_replace_to_existing_fileN)rR rS rT rU r� r r r r r� � s r� c s0 e Zd ZdZ� fdd�Zdd� Zdd� Z� ZS )� RealpathTestzTests for realpath methodc s t t| ��� t| j�| _d S r
)r r� r r
r r r r r r r � s zRealpathTest.setUpc C s� t �| j�| _tj�| jd�}t�| j|� | �| jt �| j�� | �| jt �|�� t� � }tj�| jd�}tj�
| j�}zLt� tj� | j�� t�||� | �| jt �|�� | �| jt �|�� W 5 t� |� X d S )NZlink_absZlink_rel)
r �realpathr r r r r r r; �getcwd�basename�chdir�dirname)r r! �curdirZ
probe_namer r r r$ � s z$RealpathTest.test_symlink_resolutionc C s� t j�| jd�}t j�| jd�}t j�| jd�}t �||� t �||� t �||� | �t��}t�|� W 5 Q R X | � dt
|j �k� d S )NZlink1Zlink2Zlink3zlink1 is a loop!) r r r r r rk � RuntimeErrorr r� r rr rm )r Z
link1_pathZ
link2_pathZ
link3_path�errorr r r � test_symlink_loop_mitigation� s z)RealpathTest.test_symlink_loop_mitigation)rR rS rT rU r r$ r� rV r r r r r� � s r� c @ sl e Zd ZdZdd� Ze�d�e�d�dd� ��Ze�d�e�d�dd � ��Ze�d�e�d�d
d � ��Z d S )
�IsExecutableTestz Tests for is_executable methodc sr t j�| jd�}ddlm� � fdd�}tjd|d��" t �t �
|t j t j B d�� W 5 Q R X | �
t �|�� d S ) NZfoor ��_generate_daclc s, � | |�}t d|�� �D ]}|�d� q|S rD )r1 r2 Z DeleteAce)Zuser_sid�moder, rO r� r r �
_execute_mock� s
z;IsExecutableTest.test_not_executable.<locals>._execute_mockz(certbot.compat.filesystem._generate_dacl)Z side_effecti� )r r r r Zcertbot.compat.filesystemr� r� r� r` r r\ r] �O_WRONLYr �
is_executable)r Z file_pathr� r r� r �test_not_executable� s
&z$IsExecutableTest.test_not_executablez(certbot.compat.filesystem.os.path.isfilez#certbot.compat.filesystem.os.accessc C s2 t � �" d|_d|_| �t�d�� W 5 Q R X d S )NTz /path/to/exe��_fix_windows_runtimer� r r r� �r Z mock_accessZ mock_isfiler r r �test_full_path� s z IsExecutableTest.test_full_pathc C s2 t � �" d|_d|_| �t�d�� W 5 Q R X d S )NT�exer� r� r r r �
test_rel_path� s z IsExecutableTest.test_rel_pathc C s2 t � �" d|_d|_| �t�d�� W 5 Q R X d S )NTFr� )r� r� r r r� r� r r r �test_not_found� s z IsExecutableTest.test_not_foundN)
rR rS rT rU r� r� r� r� r� r� r r r r r� � s r� c c sJ t jdkrd V n4t�d��$} | jj}|jj}tj|_d V W 5 Q R X d S )N�ntr ) r �namer� r� r� r ZGetEffectiveRightsFromAclr= rE )r� Z dacl_mockZ mode_mockr r r r� � s
r� c C s t �| t j�S r
)r. �GetFileSecurityZDACL_SECURITY_INFORMATION��targetr r r r
s r c C s t �| t j�S r
)r. r� �OWNER_SECURITY_INFORMATIONr� r r r rM s rM c C s |� |d� t�| tj|� d S )NF)r� r. ZSetFileSecurityr� )r� rP �userr r r rN s �rN c C s2 t �| d� tj�| d�}tj|ddd��� |S )Nr� Zproberc )r )r r r r r r r� r` )r r r r r r
s r
�__main__))rU �
contextlibrn r� r� rL r. r= rX � ImportErrorZcertbot.tests.utilZtestsr Z test_utilZcertbotr Zcertbot.compatr r r r0 r9 r: r� r rW rZ ru r~ r� r� r� r� �contextmanagerr� r rM rN r
rR �mainr r r r �<module> sP
w F (7@*4