initial commit of file from CVS for e-smith-base on Thu 26 Oct 11:24:52 BST 2023
This commit is contained in:
225
root/etc/e-smith/tests/10e-smith-base/00sanity-accounts.t
Normal file
225
root/etc/e-smith/tests/10e-smith-base/00sanity-accounts.t
Normal file
@@ -0,0 +1,225 @@
|
||||
#!/usr/bin/perl -w
|
||||
# vim: se ft=perl:
|
||||
|
||||
use strict;
|
||||
|
||||
use Test::More 'no_plan';
|
||||
use User::pwent;
|
||||
use User::grent;
|
||||
use File::stat;
|
||||
use esmith::AccountsDB;
|
||||
my $adb = esmith::AccountsDB->open;
|
||||
|
||||
|
||||
### Check the admin account is in order.
|
||||
my $admin = getpwnam('admin');
|
||||
ok( $admin, 'admin user exists' );
|
||||
is( $admin->shell, '/sbin/e-smith/console', 'shell' );
|
||||
|
||||
# Check for the existence of these groups.
|
||||
my @groups = qw(shared www slocate ntp);
|
||||
foreach my $group_name (@groups)
|
||||
{
|
||||
ok( getgrnam($group_name), "$group_name group exists" );
|
||||
}
|
||||
|
||||
# Check the groups that the admin user should be a member of.
|
||||
foreach my $group_name (qw(root shared www)) {
|
||||
my $group = getgrnam($group_name);
|
||||
ok( grep($_ eq 'admin', @{ $group->members }),
|
||||
"admin is in group $group_name" );
|
||||
}
|
||||
|
||||
# Check that all users in the AccountsDB are in the passwd file.
|
||||
foreach my $user ($adb->users)
|
||||
{
|
||||
my $name = $user->{key};
|
||||
ok( getpwnam($name), "$name from accounts db exists in passwd file" );
|
||||
}
|
||||
|
||||
# Check that all groups in the AccountsDB are in the group file.
|
||||
foreach my $group ($adb->groups)
|
||||
{
|
||||
my $name = $group->{key};
|
||||
ok( getgrnam($name), "$name from accounts db exists in group file" );
|
||||
}
|
||||
|
||||
# Check for the existence of these users.
|
||||
my @users = qw(public www root admin public);
|
||||
foreach my $user_name (@users)
|
||||
{
|
||||
ok( getpwnam($user_name), "$user_name user exists" );
|
||||
}
|
||||
|
||||
# Make sure that user www belongs to admin and shared groups.
|
||||
foreach my $group_name (qw(admin shared))
|
||||
{
|
||||
my $group = getgrnam($group_name);
|
||||
ok( grep($_ eq 'www', @{ $group->members }),
|
||||
"www is in group $group_name" );
|
||||
}
|
||||
|
||||
# Check that unwanted accounts don't exist.
|
||||
foreach my $user (qw(halt shutdown sync)) {
|
||||
ok( !getpwnam($user), "unwanted $user account" );
|
||||
}
|
||||
|
||||
# Check the shells of the root and admin users.
|
||||
ok( (getpwnam('admin')->shell eq '/sbin/e-smith/console'), 'admin shell is /sbin/e-smith/console' );
|
||||
ok( (getpwnam('root')->shell eq '/bin/bash'), 'root shell is /bin/bash' );
|
||||
|
||||
# Check ownership and permissions of important files.
|
||||
# These files may not exist, thanks to the breakup of the base. Make the tests
|
||||
# conditional on their existence.
|
||||
my %dirs = (
|
||||
'/home/e-smith' => { user => 'admin',
|
||||
group => 'admin',
|
||||
mode => 040755
|
||||
},
|
||||
'/home/e-smith/files' => {
|
||||
user => 'root',
|
||||
group => 'root',
|
||||
mode => 040755,
|
||||
},
|
||||
'/home/e-smith/files/users/admin' => {
|
||||
user => 'admin',
|
||||
group => 'admin',
|
||||
mode => 040500,
|
||||
},
|
||||
'/home/e-smith/Maildir' => {
|
||||
user => 'admin',
|
||||
group => 'admin',
|
||||
mode => 040700,
|
||||
},
|
||||
'/etc/e-smith/web' => {
|
||||
user => 'root',
|
||||
group => 'root',
|
||||
mode => 0755,
|
||||
},
|
||||
'/etc/e-smith/web/functions' => {
|
||||
user => 'root',
|
||||
group => 'admin',
|
||||
mode => 0550,
|
||||
},
|
||||
'/etc/e-smith/web/panels' => {
|
||||
user => 'root',
|
||||
group => 'admin',
|
||||
mode => 0550,
|
||||
},
|
||||
'/etc/e-smith/web/common' => {
|
||||
user => 'www',
|
||||
group => 'admin',
|
||||
mode => 0550,
|
||||
},
|
||||
'/etc/e-smith/web/panels/password/cgi-bin/userpassword' =>
|
||||
{
|
||||
user => 'root',
|
||||
group => 'admin',
|
||||
mode => 06550,
|
||||
},
|
||||
'/usr/bin/pwauth' => {
|
||||
user => 'root',
|
||||
group => 'www',
|
||||
mode => 04750,
|
||||
},
|
||||
);
|
||||
|
||||
while(my($dir, $setup) = each %dirs) {
|
||||
my $stat = stat($dir);
|
||||
SKIP: {
|
||||
skip "$dir does not exist", 3 unless defined $stat;
|
||||
is( $stat->uid, getpwnam($setup->{user})->uid, "owner of $dir" );
|
||||
is( $stat->gid, getgrnam($setup->{group})->gid, "group of $dir" );
|
||||
SKIP: {
|
||||
skip "No mode expectations for $dir", 1 unless $setup->{mode};
|
||||
cmp_ok( $stat->mode & $setup->{mode}, '==', $setup->{mode},
|
||||
"perms for $dir" );
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
my %files = (
|
||||
'/home/e-smith/files/' => {
|
||||
user => 'root',
|
||||
group => 'root',
|
||||
mode => 0755
|
||||
},
|
||||
'/home/e-smith/files/ibays/Primary' => {
|
||||
user => 'admin',
|
||||
group => 'shared',
|
||||
mode => 02750,
|
||||
},
|
||||
'/etc/e-smith/web/functions' => {
|
||||
user => 'root',
|
||||
group => 'admin',
|
||||
mode => 04750,
|
||||
},
|
||||
'/etc/e-smith/web/panels' => {
|
||||
user => 'root',
|
||||
group => 'root',
|
||||
mode => 0755,
|
||||
},
|
||||
);
|
||||
|
||||
while( my($dir, $setup) = each %files ) {
|
||||
opendir DIR, $dir || die $!;
|
||||
foreach my $file (readdir DIR) {
|
||||
next if $file =~ /^\.{1,2}$/;
|
||||
$file = "$dir/$file";
|
||||
next if -l $file;
|
||||
my $stat = stat($file);
|
||||
is( $stat->uid, getpwnam($setup->{user})->uid, "owner of $file" );
|
||||
is( $stat->gid, getgrnam($setup->{group})->gid, "group of $file" );
|
||||
cmp_ok( $stat->mode & $setup->{mode}, '==', $setup->{mode},
|
||||
"perms for $file" );
|
||||
}
|
||||
close DIR;
|
||||
}
|
||||
|
||||
my %name2type =
|
||||
(
|
||||
admin => 'system',
|
||||
mysql => 'system',
|
||||
shared => 'system',
|
||||
everyone => 'pseudonym',
|
||||
'mailer-daemon' => 'pseudonym',
|
||||
postmaster => 'pseudonym',
|
||||
|
||||
'cgi-bin' => 'url',
|
||||
'e-smith-manager' => 'url',
|
||||
'e-smith-password' => 'url',
|
||||
'server-manager' => 'url',
|
||||
'server-manual' => 'url',
|
||||
'user-password' => 'url',
|
||||
'common' => 'url',
|
||||
'files' => 'url',
|
||||
'icons' => 'url',
|
||||
webmail => 'url',
|
||||
'Primary' => 'ibay',
|
||||
);
|
||||
|
||||
my $account;
|
||||
while( my($name, $type) = each %name2type ) {
|
||||
SKIP: {
|
||||
skip "$name is not defined", 2 unless $adb->get($name);
|
||||
isa_ok( $account = $adb->get($name), 'esmith::DB::Record', "$name" );
|
||||
is( $account->prop('type'), $type, ' type' );
|
||||
}
|
||||
}
|
||||
|
||||
my %Expected_Props =
|
||||
(
|
||||
shared => { Visible => 'internal' },
|
||||
everyone => { Account => 'shared',
|
||||
Visible => 'internal'
|
||||
},
|
||||
'mailer-daemon' => { Account => 'admin' },
|
||||
postmaster => { Account => 'admin' }
|
||||
);
|
||||
|
||||
while( my($name, $exp_props) = each %Expected_Props ) {
|
||||
my $account = $adb->get($name);
|
||||
my %props = $account->props;
|
||||
is_deeply( [@props{keys %$exp_props}], [@{$exp_props}{keys %$exp_props}],
|
||||
"$name props");
|
||||
}
|
||||
Reference in New Issue
Block a user