mirror of
https://github.com/pi-hole/pi-hole.git
synced 2024-11-27 00:23:24 +00:00
cdd4d9ea9e
* unpin the requirements and update all to latest available - needs more work still. see notes in `def host()` Signed-off-by: Adam Warner <me@adamwarner.co.uk> * fix py3 monkey patch of testinfra docker using bash Signed-off-by: Adam Hill <adam@diginc.us> * update the other test files to use `host` instead of `Pihole` Address some sticklr and codefactor update python version from 3.7 to 3.8 preload `git` onto the centos/fedora test images, and switch which with command -v in the passthrough mock testinfra is deprecated, use pytest-testinfra Signed-off-by: Adam Warner <me@adamwarner.co.uk> Co-authored-by: Adam Hill <adam@diginc.us>
65 lines
1.9 KiB
Python
65 lines
1.9 KiB
Python
from .conftest import (
|
|
tick_box,
|
|
cross_box,
|
|
mock_command,
|
|
)
|
|
|
|
|
|
def mock_selinux_config(state, host):
|
|
'''
|
|
Creates a mock SELinux config file with expected content
|
|
'''
|
|
# validate state string
|
|
valid_states = ['enforcing', 'permissive', 'disabled']
|
|
assert state in valid_states
|
|
# getenforce returns the running state of SELinux
|
|
mock_command('getenforce', {'*': (state.capitalize(), '0')}, host)
|
|
# create mock configuration with desired content
|
|
host.run('''
|
|
mkdir /etc/selinux
|
|
echo "SELINUX={state}" > /etc/selinux/config
|
|
'''.format(state=state.lower()))
|
|
|
|
|
|
def test_selinux_enforcing_exit(host):
|
|
'''
|
|
confirms installer prompts to exit when SELinux is Enforcing by default
|
|
'''
|
|
mock_selinux_config("enforcing", host)
|
|
check_selinux = host.run('''
|
|
source /opt/pihole/basic-install.sh
|
|
checkSelinux
|
|
''')
|
|
expected_stdout = cross_box + ' Current SELinux: Enforcing'
|
|
assert expected_stdout in check_selinux.stdout
|
|
expected_stdout = 'SELinux Enforcing detected, exiting installer'
|
|
assert expected_stdout in check_selinux.stdout
|
|
assert check_selinux.rc == 1
|
|
|
|
|
|
def test_selinux_permissive(host):
|
|
'''
|
|
confirms installer continues when SELinux is Permissive
|
|
'''
|
|
mock_selinux_config("permissive", host)
|
|
check_selinux = host.run('''
|
|
source /opt/pihole/basic-install.sh
|
|
checkSelinux
|
|
''')
|
|
expected_stdout = tick_box + ' Current SELinux: Permissive'
|
|
assert expected_stdout in check_selinux.stdout
|
|
assert check_selinux.rc == 0
|
|
|
|
|
|
def test_selinux_disabled(host):
|
|
'''
|
|
confirms installer continues when SELinux is Disabled
|
|
'''
|
|
mock_selinux_config("disabled", host)
|
|
check_selinux = host.run('''
|
|
source /opt/pihole/basic-install.sh
|
|
checkSelinux
|
|
''')
|
|
expected_stdout = tick_box + ' Current SELinux: Disabled'
|
|
assert expected_stdout in check_selinux.stdout
|
|
assert check_selinux.rc == 0
|