[test suite] add access.conf %include recursion limit test

This commit is contained in:
Michael Rash 2015-12-10 15:31:18 -08:00
parent e27e92d827
commit 5b0cfb16a0
5 changed files with 40 additions and 0 deletions

View File

@ -157,6 +157,8 @@ EXTRA_DIST = \
test/conf/include1_hmac_access.conf \
test/conf/include2_hmac_access.conf \
test/conf/include3_hmac_access.conf \
test/conf/include_r1_hmac_access.conf \
test/conf/include_r2_hmac_access.conf \
test/conf/gpg_access.conf \
test/conf/gpg_hmac_access.conf \
test/conf/gpg_no_pw_access.conf \

View File

@ -0,0 +1,13 @@
%include conf/include_r2_hmac_access.conf
SOURCE ANY
KEY_BASE64 wzNP62oPPgEc+kXDPQLHPOayQBuNbYUTPP+QrErNDmg=
HMAC_KEY_BASE64 Yh+xizBnl6FotC5ec7FanVGClRMlsOAPh2u6eovnerfBVKwaVKzjGoblFMHMc593TNyi0dWn4opLoTIV9q/ttg==
FW_ACCESS_TIMEOUT 3
SOURCE 99.9.9.9
KEY_BASE64 wzNP62oPPgEc+kXDPQLHPOayQBuNbYUTPP+QrErNDmg=
HMAC_KEY_BASE64 Yh+xizBnl6FotC5ec7FanVGClRMlsOAPh2u6eovnerfBVKwaVKzjGoblFMHMc593TNyi0dWn4opLoTIV9q/ttg==
FW_ACCESS_TIMEOUT 3

View File

@ -0,0 +1,13 @@
%include conf/include_r1_hmac_access.conf
SOURCE ANY
KEY_BASE64 wzNP62oPPgEc+kXDPQLHPOayQBuNbYUTPP+QrErNDmg=
HMAC_KEY_BASE64 Yh+xizBnl6FotC5ec7FanVGClRMlsOAPh2u6eovnerfBVKwaVKzjGoblFMHMc593TNyi0dWn4opLoTIV9q/ttg==
FW_ACCESS_TIMEOUT 3
SOURCE 55.5.5.5
KEY_BASE64 wzNP62oPPgEc+kXDPQLHPOayQBuNbYUTPP+QrErNDmg=
HMAC_KEY_BASE64 Yh+xizBnl6FotC5ec7FanVGClRMlsOAPh2u6eovnerfBVKwaVKzjGoblFMHMc593TNyi0dWn4opLoTIV9q/ttg==
FW_ACCESS_TIMEOUT 3

View File

@ -412,6 +412,8 @@ our %cf = (
'hmac_access' => "$conf_dir/hmac_access.conf",
'include1_hmac_access' => "$conf_dir/include1_hmac_access.conf",
'include2_hmac_access' => "$conf_dir/include2_hmac_access.conf",
'include_r1_hmac_access' => "$conf_dir/include_r1_hmac_access.conf",
'include_r2_hmac_access' => "$conf_dir/include_r2_hmac_access.conf",
'hmac_cmd_access' => "$conf_dir/hmac_cmd_access.conf",
'hmac_cmd_setuid_access' => "$conf_dir/hmac_cmd_setuid_access.conf",
'hmac_cmd_giduid_access' => "$conf_dir/hmac_cmd_giduid_access.conf",

View File

@ -465,6 +465,16 @@
'exec_err' => $YES,
'cmdline' => "$fwknopdCmd $default_server_conf_args --sudo-exe /etc/hosts"
},
{
'category' => 'basic operations',
'subcategory' => 'server',
'detail' => 'access.conf recursion limit',
'function' => \&generic_exec,
'exec_err' => $YES,
'cmdline' => "$fwknopdCmd --exit-parse-config -a $cf{'include_r1_hmac_access'} " .
"-c $cf{'def'} -d $default_digest_file -p $default_pid_file",
'positive_output_matches' => [qr/Refusing to go deeper than/],
},
{
'category' => 'basic operations',
'subcategory' => 'server',