public
/
nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

nixosTests.sudo: port to python

This commit is contained in:
Oleksii Filonenko 2019-11-24 22:06:36 +02:00
parent a067458d65
commit 1043b55e4b
No known key found for this signature in database
GPG Key ID: F3510FE5691629A1
1 changed files with 21 additions and 31 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

52
nixos/tests/sudo.nix
View File

@ -4,7 +4,7 @@ let
password = "helloworld"; password = "helloworld";
in in
import ./make-test.nix ({ pkgs, ...} : { import ./make-test-python.nix ({ pkgs, ...} : {
name = "sudo"; name = "sudo";
meta = with pkgs.stdenv.lib.maintainers; { meta = with pkgs.stdenv.lib.maintainers; {
maintainers = [ lschuermann ]; maintainers = [ lschuermann ];
@ -50,44 +50,34 @@ in
testScript = testScript =
'' ''
subtest "users in wheel group should have passwordless sudo", sub { with subtest("users in wheel group should have passwordless sudo"):
$machine->succeed("su - test0 -c \"sudo -u root true\""); machine.succeed('su - test0 -c "sudo -u root true"')
};
subtest "test1 user should have sudo with password", sub { with subtest("test1 user should have sudo with password"):
$machine->succeed("su - test1 -c \"echo ${password} | sudo -S -u root true\""); machine.succeed('su - test1 -c "echo ${password} | sudo -S -u root true"')
};
subtest "test1 user should not be able to use sudo without password", sub { with subtest("test1 user should not be able to use sudo without password"):
$machine->fail("su - test1 -c \"sudo -n -u root true\""); machine.fail('su - test1 -c "sudo -n -u root true"')
};
subtest "users in group 'foobar' should be able to use sudo with password", sub { with subtest("users in group 'foobar' should be able to use sudo with password"):
$machine->succeed("sudo -u test2 echo ${password} | sudo -S -u root true"); machine.succeed("sudo -u test2 echo ${password} | sudo -S -u root true")
};
subtest "users in group 'barfoo' should be able to use sudo without password", sub { with subtest("users in group 'barfoo' should be able to use sudo without password"):
$machine->succeed("sudo -u test3 sudo -n -u root true"); machine.succeed("sudo -u test3 sudo -n -u root true")
};
subtest "users in group 'baz' (GID 1337) should be able to use sudo without password", sub { with subtest("users in group 'baz' (GID 1337)"):
$machine->succeed("sudo -u test4 sudo -n -u root echo true"); machine.succeed("sudo -u test4 sudo -n -u root echo true")
};
subtest "test5 user should be able to run commands under test1", sub { with subtest("test5 user should be able to run commands under test1"):
$machine->succeed("sudo -u test5 sudo -n -u test1 true"); machine.succeed("sudo -u test5 sudo -n -u test1 true")
};
subtest "test5 user should not be able to run commands under root", sub { with subtest("test5 user should not be able to run commands under root"):
$machine->fail("sudo -u test5 sudo -n -u root true"); machine.fail("sudo -u test5 sudo -n -u root true")
};
subtest "test5 user should be able to keep his environment", sub { with subtest("test5 user should be able to keep his environment"):
$machine->succeed("sudo -u test5 sudo -n -E -u test1 true"); machine.succeed("sudo -u test5 sudo -n -E -u test1 true")
};
subtest "users in group 'barfoo' should not be able to keep their environment", sub { with subtest("users in group 'barfoo' should not be able to keep their environment"):
$machine->fail("sudo -u test3 sudo -n -E -u root true"); machine.fail("sudo -u test3 sudo -n -E -u root true")
};
''; '';
}) })