Privatae
51 lines
2.0 KiB
Go
51 lines
2.0 KiB
Go
package main
|
|
|
|
import "testing"
|
|
|
|
// --listapps as macOS prints it before 15 (the state on the entry's line, or
|
|
// on the next) and from 15 (names alone, "(state: 1)" allowed, 4 blocked),
|
|
// as shown in developer.apple.com/forums/thread/757909.
|
|
func TestTheMacListOfAppsIsReadEntryByEntry(t *testing.T) {
|
|
const before15 = "ALF: total number of apps = 4 \n\n" +
|
|
"1 : /Applications/Google Chrome.app ( Block incoming connections )\n" +
|
|
"2 : /usr/local/bin/privatae-bastion.old ( Allow incoming connections )\n" +
|
|
"3 : /usr/local/bin/privatae-bastion \n \t ( Allow incoming connections ) \n\n" +
|
|
"4 : /opt/example/privatae-bastion ( Block incoming connections )\n"
|
|
apps := parseMacListApps(before15)
|
|
if len(apps) != 4 {
|
|
t.Fatalf("entries: %+v", apps)
|
|
}
|
|
for _, c := range []struct {
|
|
prog string
|
|
listed, allowed bool
|
|
}{
|
|
{"/usr/local/bin/privatae-bastion", true, true},
|
|
{"/opt/example/privatae-bastion", true, false},
|
|
{"/usr/local/bin/privatae", false, false},
|
|
{"/Applications/Google Chrome.app", true, false},
|
|
{"/usr/local/bin/privatae-bastion.old", true, true},
|
|
} {
|
|
if l, a := macAppState(apps, c.prog); l != c.listed || a != c.allowed {
|
|
t.Fatalf("%s: listed %v allowed %v", c.prog, l, a)
|
|
}
|
|
}
|
|
|
|
const from15 = "2024-06-24 16:21:15.599 socketfilterfw[2988:52866] ApplicationFirewall::AFGetAllApplications() processing response dictionary\n\n" +
|
|
"Total number of apps = 3 \n\n" +
|
|
"privatae-bastion.old (state: 1)\n" +
|
|
"privatae-bastion (state: 4)\n" +
|
|
"cupsd (state: 1)\n"
|
|
apps = parseMacListApps(from15)
|
|
if len(apps) != 3 {
|
|
t.Fatalf("entries: %+v", apps)
|
|
}
|
|
if l, a := macAppState(apps, "/usr/local/bin/privatae-bastion"); !l || a {
|
|
t.Fatalf("blocked by name: listed %v allowed %v", l, a)
|
|
}
|
|
if l, a := macAppState(apps, "/usr/sbin/cupsd"); !l || !a {
|
|
t.Fatalf("allowed by name: listed %v allowed %v", l, a)
|
|
}
|
|
// MUTATION: the next line's state ignored. RESULT: red, /usr/local/bin/privatae-bastion not allowed.
|
|
// MUTATION: any state counts as allowed. RESULT: red, blocked read as allowed.
|
|
}
|