Privatae
98 lines
3.9 KiB
Go
98 lines
3.9 KiB
Go
package main
|
|
|
|
import (
|
|
"os/user"
|
|
"runtime"
|
|
"strings"
|
|
"testing"
|
|
)
|
|
|
|
// What uninstalling removes, per platform and install: the thing that starts
|
|
// the bastion and the program in the installers' own places. Never the state
|
|
// (that is --delete-data's, in cmdUninstall), and never a path outside what
|
|
// the installers write.
|
|
func TestUninstallRemovesWhatTheInstallersPutInPlace(t *testing.T) {
|
|
const home = "/home/sam"
|
|
cases := []struct {
|
|
goos string
|
|
whole bool
|
|
want []string
|
|
}{
|
|
{"linux", true, []string{"systemctl disable --now privatae-bastion", "rm " + linuxSystemUnitPath, "systemctl daemon-reload", "rm /usr/local/bin/privatae-bastion"}},
|
|
{"linux", false, []string{"systemctl --user disable --now privatae-bastion", "rm " + home + "/.config/systemd/user/privatae-bastion.service", "rm " + home + "/.local/bin/privatae-bastion"}},
|
|
{"darwin", true, []string{"call system-service", "rm /Library/Application Support/privatae/bin/privatae-bastion", "rm /usr/local/bin/privatae-bastion"}},
|
|
{"darwin", false, []string{"/bin/launchctl bootout gui/501/ai.privatae.bastion.user", "rm " + home + "/Library/LaunchAgents/ai.privatae.bastion.user.plist"}},
|
|
{"windows", true, []string{"call system-service"}},
|
|
{"windows", false, []string{"schtasks /Delete /TN PrivataeBastion /F"}},
|
|
}
|
|
for _, c := range cases {
|
|
t.Setenv("XDG_CONFIG_HOME", "")
|
|
var got []string
|
|
for _, st := range uninstallSteps(c.goos, c.whole, home, 501) {
|
|
switch {
|
|
case st.Call != "":
|
|
got = append(got, "call "+st.Call)
|
|
case len(st.Run) > 0:
|
|
got = append(got, strings.Join(st.Run, " "))
|
|
default:
|
|
got = append(got, "rm "+st.Remove)
|
|
}
|
|
}
|
|
all := strings.Join(got, "\n")
|
|
for _, w := range c.want {
|
|
if !strings.Contains(all, w) {
|
|
t.Errorf("%s whole=%v: no %q in\n%s", c.goos, c.whole, w, all)
|
|
}
|
|
}
|
|
if strings.Contains(all, "privatae-bastion/") && !strings.Contains(all, "privatae/bin/privatae-bastion") {
|
|
t.Errorf("%s whole=%v: a step reaches into the state directory:\n%s", c.goos, c.whole, all)
|
|
}
|
|
}
|
|
}
|
|
|
|
// On Linux a sudo without -H keeps the person's HOME, and the state uninstall
|
|
// names (and --delete-data deletes) would be theirs, not the machine's.
|
|
func TestUninstallAsRootRefusesTheCallersHome(t *testing.T) {
|
|
for _, dir := range []string{"/home/sam/.config/privatae-bastion", ""} {
|
|
if why := uninstallHomeRefusal("linux", true, dir, "/root"); !strings.Contains(why, "sudo -H") {
|
|
t.Errorf("root naming %q was not refused: %q", dir, why)
|
|
}
|
|
}
|
|
for _, c := range []struct {
|
|
goos string
|
|
root bool
|
|
home, root2 string
|
|
}{{"linux", true, "/root/.config/privatae-bastion", "/root"}, {"linux", true, "/root/.config/privatae-bastion/", "/root/"},
|
|
{"linux", false, "/home/sam/.config/privatae-bastion", "/root"}, {"darwin", true, "/Users/sam/Library/Application Support/privatae-bastion", "/var/root"}} {
|
|
if why := uninstallHomeRefusal(c.goos, c.root, c.home, c.root2); why != "" {
|
|
t.Errorf("%+v refused: %q", c, why)
|
|
}
|
|
}
|
|
}
|
|
|
|
// What uninstall names, and --delete-data deletes, is the config folder,
|
|
// which reads XDG_CONFIG_HOME before HOME. A sudo that keeps the person's
|
|
// XDG_CONFIG_HOME (sudo -E, or env_keep) names their state even with
|
|
// HOME set to root's.
|
|
func TestUninstallAsRootRefusesTheCallersConfigFolder(t *testing.T) {
|
|
if runtime.GOOS != "linux" {
|
|
t.Skip("root's state is found through its HOME on Linux only")
|
|
}
|
|
u, err := user.LookupId("0")
|
|
if err != nil {
|
|
t.Skip(err)
|
|
}
|
|
prev := machineAuthorityHeld
|
|
t.Cleanup(func() { machineAuthorityHeld = prev })
|
|
machineAuthorityHeld = func() bool { return true }
|
|
t.Setenv("HOME", u.HomeDir)
|
|
t.Setenv("XDG_CONFIG_HOME", t.TempDir())
|
|
if why := uninstallRootStateRefusal(); !strings.Contains(why, "sudo -H") {
|
|
t.Errorf("root with the caller's XDG_CONFIG_HOME was not refused: %q", why)
|
|
}
|
|
t.Setenv("XDG_CONFIG_HOME", "")
|
|
if why := uninstallRootStateRefusal(); why != "" {
|
|
t.Errorf("root with its own HOME was refused: %q", why)
|
|
}
|
|
}
|