a
}|äg‰j ã @ s4 d Z ddlZddlZddlZddlZddlmZ ddlZddlmZ ddl m
Z
ddl m Z ddl m
Z
ddlm mZ ddlmZ z ddlZddlZddlZd ZW n ey¼ d
ZY n0 d Zd Zd
ZejeddG dd„ deƒƒZG dd„ deƒZ G dd„ deƒZ ejeddG dd„ deƒƒZ G dd„ dejƒZ ejeddG dd „ d ejƒƒZ G d d „ d ejƒZ!G d d „ d ejƒZ"G d!d"„ d"ejƒZ#G d#d$„ d$ejƒZ$G d%d&„ d&ejƒZ%G d'd(„ d(ejƒZ&G d)d*„ d*ej'ƒZ(ej)d+d,„ ƒZ*d-d.„ Z+d/d0„ Z,d1d2„ Z-d8d4d5„Z.e/d6kr0e 0e 1ej2d7d… e3g ¡¡ dS )9z#Tests for certbot.compat.filesystemé N)Úmock)Úutil)Úlock)Ú
filesystem)Úos)ÚTempDirTestCaseFTzS-1-1-0zS-1-5-18z S-1-5-32-544z"Tests specific to Windows security©Úreasonc sp e Zd ZdZ‡ fdd„Zdd„ Zdd„ Zdd „ Zd
d „ Zd d
„ Z dd„ Z
dd„ Z dd„ Z dd„ Z
dd„ Z‡ ZS )ÚWindowsChmodTestsz:Unit tests for Windows chmod function in filesystem modulec s t ƒ ¡ t| jƒ| _d S ©N©ÚsuperÚsetUpÚ
_create_probeÚtempdirÚ
probe_path©Úself©Ú __class__© úR/usr/lib/python3.9/site-packages/certbot/_internal/tests/compat/filesystem_test.pyr # s
zWindowsChmodTests.setUpc C sb t j | jd¡}t | j|¡ t| jƒ ¡ }t|ƒ ¡ }t |d¡ t| jƒ ¡ }t|ƒ ¡ }d S )NÚlinkéÀ )
r ÚpathÚjoinr Úsymlinkr Ú_get_security_daclÚGetSecurityDescriptorDaclr Úchmod)r Ú link_pathÚref_dacl_probeZ
ref_dacl_linkÚcur_dacl_probeZ
cur_dacl_linkr r r Útest_symlink_resolution' s z)WindowsChmodTests.test_symlink_resolutionc sF t t¡‰t | jd¡ t| jƒ ¡ ‰ t | jd¡ t| jƒ ¡ ‰ d S )Nr iÄ )Ú
win32securityÚConvertStringSidToSidÚ
EVERYBODY_SIDr r r r r r r ©ÚdaclZ everybodyr Útest_world_permission6 s
z'WindowsChmodTests.test_world_permissionc C s< t | jd¡ t| jƒ ¡ }t | jd¡ t| jƒ ¡ }d S )Nr ià )r r r r r )r r! r" r r r Útest_group_permissions_noopE s
z-WindowsChmodTests.test_group_permissions_noopc sp t t¡‰t t¡‰ t | jd¡ t| jƒ ¡ ‰‡‡fdd„t dˆ
¡ ƒD ƒ}‡ ‡fdd„t dˆ
¡ ƒD ƒ}d S )Né c s( g | ] }ˆ |¡d ˆkrˆ |¡‘qS ©é ©ZGetAce©Ú.0Úindex)r( Úsystemr r Ú
U s ÿz.r c s( g | ] }ˆ |¡d ˆ krˆ |¡‘qS r, r. r/ )Úadminsr( r r r3 W s ÿ) r$ r% Ú
SYSTEM_SIDÚ
ADMINS_SIDr r r r r ÚrangeÚ GetAceCount)r Z system_acesZ
admin_acesr )r4 r( r2 r Útest_admin_permissionsN s
z(WindowsChmodTests.test_admin_permissionsc C s | dtj¡ d S )Né )Ú
_test_flagÚ
ntsecurityconÚFILE_GENERIC_READr r r r Útest_read_flag` s z WindowsChmodTests.test_read_flagc C s | dtj¡ d S ©Né )r; r< ÚFILE_GENERIC_EXECUTEr r r r Útest_execute_flagc s z#WindowsChmodTests.test_execute_flagc C s | dtjtjA tjA ¡ d S )Nr- )r; r< ÚFILE_ALL_ACCESSr= rA r r r r Útest_write_flagf s
ÿþz!WindowsChmodTests.test_write_flagc C s | dtj¡ d S )Né )r; r< rC r r r r Útest_full_flagk s z WindowsChmodTests.test_full_flagc sT t | jd|B ¡ t| jƒ ¡ ‰ t t¡‰‡ ‡fdd„tdˆ ¡ ƒD ƒ}|d }d S )Nr c s( g | ] }ˆ |¡d ˆkrˆ |¡‘qS r, r. r/ r' r r r3 v s ÿz0WindowsChmodTests._test_flag..r )
r r r r r r$ r% r& r7 r8 )r Z
everyone_modeZ windows_flagZacls_everybodyr r' r r; n s
z WindowsChmodTests._test_flagc C s„ t dt ¡ ¡\}}}t| jƒ}t| j||ƒ t | jd¡ t | jƒ}t
t ¡}t| jƒ}t| j||ƒ t | jd¡ t | jƒ}d S )NÚ r ) r$ ZLookupAccountNameÚwin32apiZ GetUserNameÚ_get_security_ownerr Ú
_set_ownerr r r r% r6 )r Zauthenticated_userÚ_Úsecurity_ownerZ
security_daclZ
admin_userr r r Ú test_user_admin_dacl_consistency s
z2WindowsChmodTests.test_user_admin_dacl_consistency)Ú__name__Ú
__module__Ú __qualname__Ú__doc__r r# r) r* r9 r> rB rD rF r; rM Ú
__classcell__r r r r r
s r
c @ s* e Zd Zdd„ Zdd„ Zed dd„ƒZdS )
Ú UmaskTestc C s† t d¡}zjtj | jd¡}t |¡ t d¡ tj | jd¡}t |¡ tj | jd¡}t j|dd W t |¡ n t |¡ 0 d S )Né Úprobe1é? Údir2Údir3éÿ )Úmode)r Úumaskr r r r Úmkdir)r Úprevious_umaskZdir1rW rX r r r Útest_umask_on_dir™ s
zUmaskTest.test_umask_on_dirc C s‚ t d¡}zftj | jd¡}t |¡ t d¡ tj | jd¡}t |¡ tj | jd¡}t |¡ W t |¡ n t |¡ 0 d S )NrT rU rV Zprobe2Zprobe3)r r[ r r r r rS Ú _create_file)r r] Zfile1Zfile2Zfile3r r r Útest_umask_on_file s
z UmaskTest.test_umask_on_filerY c C s> d }z$t j| tj|d}W |r:t |¡ n|r8t |¡ 0 d S )N)ÚflagsrZ )r Úopenr ÚO_CREATÚclose)r rZ Z file_descr r r r_ Á s ÿzUmaskTest._create_fileN)rY )rN rO rP r^ r` Ú staticmethodr_ r r r r rS ˜ s rS c s$ e Zd Z‡ fdd„Zdd„ Z‡ ZS )ÚComputePrivateKeyModeTestc s t ƒ ¡ t| jƒ| _d S r r r r r r r Ì s
z ComputePrivateKeyModeTest.setUpc C s& t | jd¡ t | jd¡}tr"n d S )NrY i€ )r r r Zcompute_private_key_modeÚ
POSIX_MODE)r Znew_moder r r Ú test_compute_private_key_modeÐ s
z7ComputePrivateKeyModeTest.test_compute_private_key_mode)rN rO rP r rh rR r r r r rf Ë s rf c @ s, e Zd Zdd„ Zdd„ Zdd„ Zdd„ Zd S )
ÚWindowsOpenTestc sP t j | jd¡}t |t jt jB t jB d¡}t |¡ t
|ƒ ¡ ‰ t
t¡‰d S )NÚfiler )r r r r r rb rc ÚO_EXCLÚO_RDWRrd r r r$ r% r& ©r r Zdescr r' r Ú!test_new_file_correct_permissionsß s
z1WindowsOpenTest.test_new_file_correct_permissionsc sX t j | jd¡}t|dƒ ¡ t |t jt jB d¡}t |¡ t |ƒ
¡ ‰ t t
¡‰d S )Nrj Úwr )r r r r rb rd r rk rl r r r$ r% r& rm r r' r Ú&test_existing_file_correct_permissionsë s
z6WindowsOpenTest.test_existing_file_correct_permissionsc C s< | j ddtjtjB d t t¡(}| j ddtjtjB d W d ƒ n1 sP0 Y | j ddtjd | j ddtjd tj | j d¡}t
|d ƒ ¡ t
|¡}zHt t¡"}| j d
dtjd W d ƒ n1 sÚ0 Y W | ¡ n
| ¡ 0 t t¡" | j d dtjd W d ƒ n1 s.0 Y d S ) Nr@ F)Ú
file_existra r- Té r: Ú5ro é é )Ú_test_one_creationr rc rk ÚpytestÚraisesÚOSErrorr r r rb rd r ZLockFileÚreleaseÚO_RDONLY)r Úexc_infor Zfilelockr r r Útest_create_file_on_openø s 6
0 z(WindowsOpenTest.test_create_file_on_openc C s† t j | jt|ƒ¡}|rNt j |¡sNt|dƒ W d ƒ n1 sD0 Y d }z t ||¡}W |r‚t |¡ n|r€t |¡ 0 d S )Nro ) r r r r ÚstrÚexistsrb r rd )r Znumrq ra Zone_fileZhandlerr r r rv s ÿz"WindowsOpenTest._test_one_creationN)rN rO rP rn rp r} rv r r r r ri Ý s
ri c @ s( e Zd ZdZdd„ Zdd„ Zdd„ ZdS ) ÚTempUmaskTestsz8Tests for using the TempUmask class in `with` statementsc C s t d¡}t |¡ |S )Nr )r r[ )r Z old_umaskr r r Ú _check_umask& s
zTempUmaskTests._check_umaskc C s8 t d¡ t d¡ W d ƒ n1 s*0 Y d S ©NrT rV )r r[ Ú
temp_umaskr r r r Útest_works_normally+ s
z"TempUmaskTests.test_works_normallyc C sP t d¡ z4t d¡ tƒ ‚W d ƒ n1 s20 Y W n Y n0 d S r‚ )r r[ rƒ Ú Exceptionr r r r Ú!test_resets_umask_after_exception2 s
(z0TempUmaskTests.test_resets_umask_after_exceptionN)rN rO rP rQ r r„ r† r r r r r€ $ s r€ ú!Test specific to Windows securityc @ s( e Zd ZdZdd„ Zdd„ Zdd„ ZdS ) ÚWindowsMkdirTestszFUnit tests for Windows mkdir + makedirs functions in filesystem modulec s6 t j | jd¡}t |d¡ t t¡‰t |ƒ
¡ ‰ d S )NÚdirr ) r r r r r r\ r$ r% r& r r )r r r r' r Ú test_mkdir_correct_permissions@ s
z0WindowsMkdirTests.test_mkdir_correct_permissionsc sD t j | jd¡}t j |d¡}t |d¡ t t¡‰t |ƒ
¡ ‰ d S )Nr‰ Úsubpathr ) r r r r r Úmakedirsr$ r% r& r r )r r r‹ r r' r Ú!test_makedirs_correct_permissionsK s
z3WindowsMkdirTests.test_makedirs_correct_permissionsc C sN t j | jd¡}dd l }|j}t |¡ zt |¡ W n tyH Y n0 d S )Nr‰ r )r r r r r\ r rŒ ry )r r Ústd_osZoriginal_mkdirr r r Ú test_makedirs_switch_os_mkdirW s
z/WindowsMkdirTests.test_makedirs_switch_os_mkdirN)rN rO rP rQ rŠ r r r r r r rˆ = s rˆ c @ s e Zd ZdZdd„ ZdS )Ú
MakedirsTestsz5Unit tests for makedirs function in filesystem modulec C sT t j | jd¡}t j |d¡}t d¡}zt |d¡ W t |¡ n t |¡ 0 d S )Nr‰ r‹ rT r )r r r r r r[ rŒ )r r r‹ r] r r r r h s
z/MakedirsTests.test_makedirs_correct_permissionsN)rN rO rP rQ r r r r r r f s r c sj e Zd ZdZ‡ fdd„Zejedddd„ ƒZej eddd d
„ ƒZ
d d „ Z ejeddd
d„ ƒZ ‡ Z
S )ÚCopyOwnershipAndModeTestzYTests about copy_ownership_and_apply_mode, copy_ownership_and_mode and has_same_ownershipc s t ƒ ¡ t| jƒ| _d S r r r r r r r y s
z CopyOwnershipAndModeTest.setUpr‡ r c sÒ t t¡}t ¡ j}| |d¡ t d¡V}t d¡,}||_t j
d| j dddd W d ƒ n1 sh0 Y W d ƒ n1 s†0 Y |j d }|d d }|j d
}|d d }|
¡ ‰ t t¡‰d S ) NFú win32security.GetFileSecurityz win32security.SetFileSecurityÚdummyr T©Z copy_userZ
copy_groupr r- r@ )r$ r% r5 ÚSECURITY_ATTRIBUTESÚSECURITY_DESCRIPTORÚSetSecurityDescriptorOwnerr ÚpatchÚ return_valuer Ú copy_ownership_and_apply_moder Zcall_args_listr r& )r r2 ÚsecurityÚmock_getZmock_setZ
first_callZ second_callr r' r Ú*test_copy_ownership_and_apply_mode_windows} s
ÿB
zCCopyOwnershipAndModeTest.test_copy_ownership_and_apply_mode_windowsú Test specific to Linux securityc
C sÆ t d¡Š}t d¡`}t d¡6}d|j_d|j_tjd| jdddd W d ƒ n1 s^0 Y W d ƒ n1 s|0 Y W d ƒ n1 sš0 Y | | jdd¡ | | jd¡ d S )
Nzos.chownzos.chmodzos.staté2 é3 r“ r Tr” ) r r˜ r™ Úst_uidÚst_gidr rš r Úassert_called_once_with)r Z
mock_chownZ
mock_chmodZ mock_statr r r Ú(test_copy_ownership_and_apply_mode_linux— s ÿ`zACopyOwnershipAndModeTest.test_copy_ownership_and_apply_mode_linuxc C sD t j | jd¡}t j | jd¡}t |d¡ ¡ t |d¡ ¡ d S )NZtest1Ztest2ro )r r r r r Ú safe_openrd )r Zpath1Zpath2r r r Útest_has_same_ownership¤ s
z0CopyOwnershipAndModeTest.test_has_same_ownershipc C sf | j }t| jdd}t |d¡ t d¡ }t ||¡ W d ƒ n1 sL0 Y | ||¡ d S )NÚdst)Únamer z-certbot.compat.filesystem._copy_win_ownership) r r r r r r r˜ Zcopy_ownership_and_moder£ )r Úsrcr§ Zmock_copy_ownerr r r Ú$test_copy_ownership_and_mode_windows s * z=CopyOwnershipAndModeTest.test_copy_ownership_and_mode_windows)rN rO rP rQ r ÚunittestÚskipIfrg r Ú
skipUnlessr¤ r¦ rª rR r r r r r‘ w s
r‘ c sl e Zd ZdZ‡ fdd„Zdd„ Zejedddd „ ƒZ ej
ed
dd d „ ƒZ d
d„ Z dd„ Z
dd„ Z‡ ZS )ÚCheckPermissionsTestz-Tests relative to functions that check modes.c s t ƒ ¡ t| jƒ| _d S r r r r r r r  s
zCheckPermissionsTest.setUpc C s t | jd¡ d S )Nr ©r r r r r r r Útest_check_modeÆ s z$CheckPermissionsTest.test_check_moder‡ r c C sT t t¡}t ¡ j}| |d¡ t d¡}||_W d ƒ n1 sF0 Y d S )NFr’ ) r$ r% r5 r• r– r— r r˜ r™ )r r2 r› rœ r r r Útest_check_owner_windowsÌ s
z-CheckPermissionsTest.test_check_owner_windowsrž c C sH dd l }| ¡ }t d¡}|d |_W d ƒ n1 s:0 Y d S )Nr z os.getuidr@ )r Úgetuidr r˜ r™ )r rŽ ÚuidZmock_uidr r r Útest_check_owner_linuxØ s
z+CheckPermissionsTest.test_check_owner_linuxc C sd t d¡}d|_W d ƒ n1 s&0 Y t d¡}d|_W d ƒ n1 sV0 Y d S )Nz$certbot.compat.filesystem.check_modeFz%certbot.compat.filesystem.check_owner)r r˜ r™ )r Z mock_modeZ
mock_ownerr r r Útest_check_permissionsæ s z+CheckPermissionsTest.test_check_permissionsc C s. t | jd¡ t | jd¡ t | jd¡ d S )Néä r iá r¯ r r r r Útest_check_min_permissionsñ s z/CheckPermissionsTest.test_check_min_permissionsc C s t | jd¡ t | jd¡ d S )Nr¶ r r¯ r r r r Útest_is_world_reachableû s z,CheckPermissionsTest.test_is_world_reachable)rN rO rP rQ r r° r« r¬ rg r± r r´ rµ r· r¸ rR r r r r r® À s
r® c @ s e Zd ZdZdd„ ZdS )Ú
OsReplaceTestz3Test to ensure consistent behavior of rename methodc C sL t j | jd¡}t j | jd¡}t|dƒ ¡ t|dƒ ¡ t ||¡ dS )zKEnsure that replace will effectively rename src into dst for all platforms.r© r§ ro N)r r r r rb rd r Úreplace)r r© r§ r r r Ú test_os_replace_to_existing_file s z.OsReplaceTest.test_os_replace_to_existing_fileN)rN rO rP rQ r» r r r r r¹ s r¹ c s0 e Zd ZdZ‡ fdd„Zdd„ Zdd„ Z‡ ZS )Ú RealpathTestzTests for realpath methodc s t ƒ ¡ t| jƒ| _d S r r r r r r r s
zRealpathTest.setUpc C s’ t | j¡| _tj | jd¡}t | j|¡ t ¡ }tj | jd¡}tj | j¡}z.t
tj | j¡¡ t ||¡ W t
|¡ n t
|¡ 0 d S )NZlink_absZlink_rel) r Úrealpathr r r r r r ÚgetcwdÚbasenameÚchdirÚdirname)r r ÚcurdirZ
probe_namer r r r# s z$RealpathTest.test_symlink_resolutionc C s t j | jd¡}t j | jd¡}t j | jd¡}t ||¡ t ||¡ t ||¡ tjtdd}t |¡ W d ƒ n1 s‚0 Y d S )NZlink1Zlink2Zlink3zlink1 is a loop!)Úmatch)
r r r r r rw rx Ú RuntimeErrorr r½ )r Z
link1_pathZ
link2_pathZ
link3_pathÚerrorr r r Ú test_symlink_loop_mitigation0 s z)RealpathTest.test_symlink_loop_mitigation)rN rO rP rQ r r# rÆ rR r r r r r¼ s r¼ c @ sl e Zd ZdZdd„ Ze d¡e d¡dd„ ƒƒZe d¡e d¡dd „ ƒƒZe d¡e d¡d
d „ ƒƒZ d S )
ÚIsExecutableTestz Tests for is_executable methodc sx t j | jd¡}ddlm‰ d ‡ fdd„ }tjd|d, t t
|t j t j B d¡¡ W d ƒ n1 sj0 Y d S )
NZfoor ©Ú_generate_daclc s. ˆ | ||ƒ}t d| ¡ ƒD ]}| d¡ q|S r? )r7 r8 Z DeleteAce)Zuser_sidrZ Úmaskr( rK rÈ r r Ú
_execute_mockK s z;IsExecutableTest.test_not_executable.._execute_mockz(certbot.compat.filesystem._generate_dacl)Z side_effecti¶ )N)
r r r r Zcertbot.compat.filesystemrÉ r r˜ rd r rb rc ÚO_WRONLY)r Z file_pathrË r rÈ r Útest_not_executable> s
:z$IsExecutableTest.test_not_executablez(certbot.compat.filesystem.os.path.isfilez#certbot.compat.filesystem.os.accessc C s6 t ƒ d|_d|_W d ƒ n1 s(0 Y d S ©NT©Ú_fix_windows_runtimer™ ©r Z mock_accessZ mock_isfiler r r Útest_full_pathW s z IsExecutableTest.test_full_pathc C s6 t ƒ d|_d|_W d ƒ n1 s(0 Y d S rÎ rÏ rÑ r r r Ú
test_rel_path_ s z IsExecutableTest.test_rel_pathc C s6 t ƒ d|_d|_W d ƒ n1 s(0 Y d S )NTFrÏ rÑ r r r Útest_not_foundg s z IsExecutableTest.test_not_foundN)
rN rO rP rQ rÍ r r˜ rÒ rÓ rÔ r r r r rÇ < s rÇ c @ sl e Zd Zejedde d¡dd„ ƒƒZej edde d¡dd„ ƒƒZ
ej edde d¡d d
„ ƒƒZ d S ) Ú ReadlinkTestzTests specific to Linuxr z%certbot.compat.filesystem.os.readlinkc C s
d|_ d S )Nz /normal/path©r™ ©r Z
mock_readlinkr r r Útest_path_posixq s z ReadlinkTest.test_path_posixzTests specific to Windowsc C s
d|_ d S )Nz\\?\C:\short\pathrÖ r× r r r Útest_normal_path_windowsw s z%ReadlinkTest.test_normal_path_windowsc C sF ddd |_ t t¡ t d¡ W d ƒ n1 s80 Y d S )Nz \\?\C:\longiè z\pathr“ )r™ rw rx Ú
ValueErrorr Úreadlinkr× r r r Útest_extended_path_windows~ s z'ReadlinkTest.test_extended_path_windowsN) rN rO rP r« r rg r r˜ rØ r¬ rÙ rÜ r r r r rÕ p s rÕ c c s^ t jdkrd V nHt d¡.} | jj}|jj}tj|_d V W d ƒ n1 sP0 Y d S )NÚntr’ ) r r¨ r r˜ r™ r ZGetEffectiveRightsFromAclr< rA )rœ Z dacl_mockZ mode_mockr r r rÐ † s
rÐ c C s t | t j¡S r )r$ ÚGetFileSecurityZDACL_SECURITY_INFORMATION©Útargetr r r r ’ s r c C s t | t j¡S r )r$ rÞ ÚOWNER_SECURITY_INFORMATIONrß r r r rI – s rI c C s | |d¡ t | tj|¡ d S )NF)r— r$ ZSetFileSecurityrá )rà rL Úuserr r r rJ š s ÿrJ Úprobec C s2 t | d¡ tj | |¡}tj|ddd ¡ |S )Nr¶ ro )r )r r r r r r r¥ rd )r r¨ r r r r r s r Ú__main__r@ )rã )4rQ Ú
contextlibÚerrnoÚsysr« r rw Zcertbotr Zcertbot._internalr Zcertbot.compatr r Zcertbot.tests.utilZtestsZ test_utilr r< rH r$ rg Ú ImportErrorr& r5 r6 r¬ r
rS rf ri r€ rˆ r r‘ r® r¹ r¼ rÇ ZTestCaserÕ ÚcontextmanagerrÐ r rI rJ r rN ÚexitÚmainÚargvÚ__file__r r r r Ú s\
w3 F (IC)4