mirror of
https://github.com/pi-hole/pi-hole
synced 2024-11-15 20:49:01 +00:00
66 lines
1.9 KiB
Python
66 lines
1.9 KiB
Python
from .conftest import (
|
|
tick_box,
|
|
cross_box,
|
|
mock_command,
|
|
)
|
|
|
|
|
|
def mock_selinux_config(state, Pihole):
|
|
'''
|
|
Creates a mock SELinux config file with expected content
|
|
'''
|
|
# validate state string
|
|
valid_states = ['enforcing', 'permissive', 'disabled']
|
|
assert state in valid_states
|
|
# getenforce returns the running state of SELinux
|
|
mock_command('getenforce', {'*': (state.capitalize(), '0')}, Pihole)
|
|
# create mock configuration with desired content
|
|
Pihole.run('''
|
|
mkdir /etc/selinux
|
|
echo "SELINUX={state}" > /etc/selinux/config
|
|
'''.format(state=state.lower()))
|
|
|
|
|
|
def test_selinux_enforcing_exit(Pihole):
|
|
'''
|
|
confirms installer prompts to exit when SELinux is Enforcing by default
|
|
'''
|
|
mock_selinux_config("enforcing", Pihole)
|
|
check_selinux = Pihole.run('''
|
|
source /opt/pihole/basic-install.sh
|
|
checkSelinux
|
|
''')
|
|
expected_stdout = cross_box + ' Current SELinux: Enforcing'
|
|
assert expected_stdout in check_selinux.stdout
|
|
expected_stdout = 'SELinux Enforcing detected, exiting installer'
|
|
assert expected_stdout in check_selinux.stdout
|
|
assert check_selinux.rc == 1
|
|
|
|
|
|
def test_selinux_permissive(Pihole):
|
|
'''
|
|
confirms installer continues when SELinux is Permissive
|
|
'''
|
|
mock_selinux_config("permissive", Pihole)
|
|
check_selinux = Pihole.run('''
|
|
source /opt/pihole/basic-install.sh
|
|
checkSelinux
|
|
''')
|
|
expected_stdout = tick_box + ' Current SELinux: Permissive'
|
|
assert expected_stdout in check_selinux.stdout
|
|
assert check_selinux.rc == 0
|
|
|
|
|
|
def test_selinux_disabled(Pihole):
|
|
'''
|
|
confirms installer continues when SELinux is Disabled
|
|
'''
|
|
mock_selinux_config("disabled", Pihole)
|
|
check_selinux = Pihole.run('''
|
|
source /opt/pihole/basic-install.sh
|
|
checkSelinux
|
|
''')
|
|
expected_stdout = tick_box + ' Current SELinux: Disabled'
|
|
assert expected_stdout in check_selinux.stdout
|
|
assert check_selinux.rc == 0
|