[Buildroot] [PATCH v4 6/6] polkit-rules-test-initd: new test
aduskett at gmail.com
aduskett at gmail.com
Thu Nov 28 01:26:09 UTC 2019
From: Adam Duskett <Aduskett at gmail.com>
This test is a simple integration test of the polkit package on systems
not running systemd.
It consists of the following:
- A simple hello world c application that outputs "Hello polkit!" is compiled
and installed to $(TARGET_DIR)/usr/bin/
- The brtest user attempts to run "pkexec hello-polkit" and is denied.
- A hello-polkit.rules file provided by polkit-rules-test-initd
is copied from /root/ to /etc/polkit-1/rules.d
- The brtest user attempts to run "pkexec hello-polkit" and should not succeed
with the output "Hello polkit!"
Signed-off-by: Adam Duskett <Aduskett at gmail.com>
---
DEVELOPERS | 1 +
.../package/polkit-rules-test-initd/Config.in | 6 +++
.../polkit-rules-test-initd/hello-polkit.c | 6 +++
.../hello-polkit.policy | 14 +++++
.../hello-polkit.rules | 6 +++
.../polkit-rules-test-initd.mk | 31 +++++++++++
.../tests/package/test_polkit_initd.py | 53 +++++++++++++++++++
7 files changed, 117 insertions(+)
create mode 100644 support/testing/tests/package/br2-external/polkit/package/polkit-rules-test-initd/Config.in
create mode 100644 support/testing/tests/package/br2-external/polkit/package/polkit-rules-test-initd/hello-polkit.c
create mode 100644 support/testing/tests/package/br2-external/polkit/package/polkit-rules-test-initd/hello-polkit.policy
create mode 100644 support/testing/tests/package/br2-external/polkit/package/polkit-rules-test-initd/hello-polkit.rules
create mode 100644 support/testing/tests/package/br2-external/polkit/package/polkit-rules-test-initd/polkit-rules-test-initd.mk
create mode 100644 support/testing/tests/package/test_polkit_initd.py
diff --git a/DEVELOPERS b/DEVELOPERS
index 2c99ace54f..deeef53a2d 100644
--- a/DEVELOPERS
+++ b/DEVELOPERS
@@ -77,6 +77,7 @@ F: package/sngrep/
F: package/spidermonkey/
F: package/systemd/
F: support/testing/tests/package/br2-external/polkit/
+F: support/testing/tests/package/test_polkit_initd.py
F: support/testing/tests/package/test_polkit_systemd.py
N: Adam Heinrich <adam at adamh.cz>
diff --git a/support/testing/tests/package/br2-external/polkit/package/polkit-rules-test-initd/Config.in b/support/testing/tests/package/br2-external/polkit/package/polkit-rules-test-initd/Config.in
new file mode 100644
index 0000000000..f19fc2660d
--- /dev/null
+++ b/support/testing/tests/package/br2-external/polkit/package/polkit-rules-test-initd/Config.in
@@ -0,0 +1,6 @@
+config BR2_PACKAGE_POLKIT_RULES_TEST_INITD
+ bool "polkit rules test for initd"
+ depends on BR2_PACKAGE_POLKIT
+ help
+ Simple test to ensure polkit is loading and enforcing rules
+ correctly using initd.
diff --git a/support/testing/tests/package/br2-external/polkit/package/polkit-rules-test-initd/hello-polkit.c b/support/testing/tests/package/br2-external/polkit/package/polkit-rules-test-initd/hello-polkit.c
new file mode 100644
index 0000000000..cf5343cd75
--- /dev/null
+++ b/support/testing/tests/package/br2-external/polkit/package/polkit-rules-test-initd/hello-polkit.c
@@ -0,0 +1,6 @@
+#include <stdio.h>
+
+int main(void){
+ printf("Hello polkit!\n");
+ return 0;
+}
diff --git a/support/testing/tests/package/br2-external/polkit/package/polkit-rules-test-initd/hello-polkit.policy b/support/testing/tests/package/br2-external/polkit/package/polkit-rules-test-initd/hello-polkit.policy
new file mode 100644
index 0000000000..8220293175
--- /dev/null
+++ b/support/testing/tests/package/br2-external/polkit/package/polkit-rules-test-initd/hello-polkit.policy
@@ -0,0 +1,14 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE policyconfig PUBLIC
+ "-//freedesktop//DTD PolicyKit Policy Configuration 1.0//EN"
+ "http://www.freedesktop.org/software/polkit/policyconfig-1.dtd">
+<policyconfig>
+ <action id="org.freedesktop.policykit.pkexec.hello-polkit">
+ <message>Authentication is required to run the hello world test program</message>
+ <defaults>
+ <allow_inactive>no</allow_inactive>
+ <allow_active>no</allow_active>
+ </defaults>
+ <annotate key="org.freedesktop.policykit.exec.path">/usr/bin/hello-polkit</annotate>
+ </action>
+</policyconfig>
diff --git a/support/testing/tests/package/br2-external/polkit/package/polkit-rules-test-initd/hello-polkit.rules b/support/testing/tests/package/br2-external/polkit/package/polkit-rules-test-initd/hello-polkit.rules
new file mode 100644
index 0000000000..a0a66f644d
--- /dev/null
+++ b/support/testing/tests/package/br2-external/polkit/package/polkit-rules-test-initd/hello-polkit.rules
@@ -0,0 +1,6 @@
+polkit.addRule(function(action, subject) {
+ if (action.id == "org.freedesktop.policykit.pkexec.hello-polkit" &&
+ subject.user == "brtest") {
+ return polkit.Result.YES;
+ }
+});
diff --git a/support/testing/tests/package/br2-external/polkit/package/polkit-rules-test-initd/polkit-rules-test-initd.mk b/support/testing/tests/package/br2-external/polkit/package/polkit-rules-test-initd/polkit-rules-test-initd.mk
new file mode 100644
index 0000000000..394c3e4405
--- /dev/null
+++ b/support/testing/tests/package/br2-external/polkit/package/polkit-rules-test-initd/polkit-rules-test-initd.mk
@@ -0,0 +1,31 @@
+################################################################################
+#
+# polkit-rules-test-initd
+#
+################################################################################
+
+POLKIT_RULES_TEST_INITD_DEPENDENCIES = polkit
+
+define POLKIT_RULES_TEST_INITD_USERS
+ brtest -1 brtest -1 =password /home/brtest /bin/sh brtest
+endef
+
+define POLKIT_RULES_TEST_INITD_BUILD_CMDS
+ $(INSTALL) -D $(POLKIT_RULES_TEST_INITD_PKGDIR)/hello-polkit.c $(@D)/hello-polkit.c
+ $(TARGET_CC) $(@D)/hello-polkit.c -o $(@D)/hello-polkit
+endef
+
+
+define POLKIT_RULES_TEST_INITD_INSTALL_TARGET_CMDS
+ mkdir -p $(TARGET_DIR)/usr/share/polkit-1/actions/
+ $(INSTALL) -D $(@D)/hello-polkit $(TARGET_DIR)/usr/bin/hello-polkit
+
+ $(INSTALL) -D $(POLKIT_RULES_TEST_INITD_PKGDIR)/hello-polkit.policy \
+ $(TARGET_DIR)/usr/share/polkit-1/actions/hello-polkit.policy
+
+ $(INSTALL) -D $(POLKIT_RULES_TEST_INITD_PKGDIR)/hello-polkit.rules \
+ $(TARGET_DIR)/root/hello-polkit.rules
+
+endef
+
+$(eval $(generic-package))
diff --git a/support/testing/tests/package/test_polkit_initd.py b/support/testing/tests/package/test_polkit_initd.py
new file mode 100644
index 0000000000..fe5acb23b5
--- /dev/null
+++ b/support/testing/tests/package/test_polkit_initd.py
@@ -0,0 +1,53 @@
+import os
+
+import infra.basetest
+
+
+class TestPolkitInitd(infra.basetest.BRTest):
+ br2_external = [infra.filepath("tests/package/br2-external/polkit")]
+ config = \
+ """
+ BR2_aarch64=y
+ BR2_TOOLCHAIN_EXTERNAL=y
+ BR2_JLEVEL=10
+ BR2_TARGET_GENERIC_GETTY_PORT="ttyAMA0"
+ BR2_LINUX_KERNEL=y
+ BR2_LINUX_KERNEL_CUSTOM_VERSION=y
+ BR2_LINUX_KERNEL_CUSTOM_VERSION_VALUE="4.19.86"
+ BR2_LINUX_KERNEL_USE_CUSTOM_CONFIG=y
+ BR2_LINUX_KERNEL_CUSTOM_CONFIG_FILE="board/qemu/aarch64-virt/linux.config"
+ BR2_LINUX_KERNEL_NEEDS_HOST_OPENSSL=y
+ BR2_PACKAGE_DBUS=y
+ BR2_PACKAGE_POLKIT=y
+ BR2_TARGET_ROOTFS_CPIO=y
+ BR2_TARGET_ROOTFS_CPIO_GZIP=y
+ BR2_PACKAGE_POLKIT_RULES_TEST_INITD=y
+ """
+
+ def login(self):
+ img = os.path.join(self.builddir, "images", "rootfs.cpio.gz")
+ kern = os.path.join(self.builddir, "images", "Image")
+ self.emulator.boot(arch="aarch64",
+ kernel=kern,
+ kernel_cmdline=["console=ttyAMA0"],
+ options=["-M", "virt", "-cpu", "cortex-a57", "-m", "512M", "-initrd", img])
+ self.emulator.login()
+
+ def test_run(self):
+ self.login()
+
+ cmd = "su brtest -c 'pkexec hello-polkit'"
+ output, exit_code = self.emulator.run(cmd, 10)
+ print(output)
+ self.assertEqual(exit_code, 127)
+ self.assertEqual(output[0], "Error executing command as another user: Not authorized")
+
+ cmd = "mv /root/hello-polkit.rules /etc/polkit-1/rules.d/hello-polkit.rules"
+ _, exit_code = self.emulator.run(cmd, 10)
+ self.assertEqual(exit_code, 0)
+
+ cmd = "su brtest -c 'pkexec hello-polkit'"
+ output, exit_code = self.emulator.run(cmd, 10)
+ print(output)
+ self.assertEqual(exit_code, 0)
+ self.assertEqual(output[0], "Hello polkit!")
--
2.23.0
More information about the buildroot
mailing list