aboutsummaryrefslogblamecommitdiffstats
path: root/tests/report_tests/encryption_tests.py
blob: c18398a8d45e4d85093c95cc1c041734e9a6b433 (plain) (tree)




















                                                                          
                                                        

                                         
                                                               
                                            
                               


                                                                           












                                                                           
                                                                         

                                       
                                                      




                                                     



                                                        
# This file is part of the sos project: https://github.com/sosreport/sos
#
# This copyrighted material is made available to anyone wishing to use,
# modify, copy, or redistribute it subject to the terms and conditions of
# version 2 of the GNU General Public License.
#
# See the LICENSE file in the source distribution for further information.


from avocado.utils import process
from sos_tests import StageOneReportTest


class EncryptedReportTest(StageOneReportTest):
    """Tests the use of --encrypt-pass to ensure that the archive is
    successfully encrypted.

    :avocado: tags=stageone
    """

    encrypt_pass = 'sostest'
    sos_cmd = f"-o kernel --encrypt-pass {encrypt_pass}"

    def test_archive_gpg_encrypted(self):
        self.assertOutputContains(r'/.*sosreport-.*tar.*\.gpg')
        _cmd = f"file {self.encrypted_path}"
        res = process.run(_cmd)
        self.assertTrue(
            ("GPG symmetrically encrypted data" in res.stdout.decode())
            or ("PGP symmetric key encrypted data" in res.stdout.decode()))

    def test_tarball_named_secure(self):
        self.assertTrue('secured-' in self.encrypted_path)


class EncryptedCleanedReportTest(EncryptedReportTest):
    """Ensure that we can successfully both encrypt and clean a report in a
    single execution

    :avocado: tags=stageone
    """

    encrypt_pass = 'sostest'
    sos_cmd = f"-o host,networking --clean --encrypt-pass {encrypt_pass}"

    def test_hostname_obfuscated(self):
        self.assertFileHasContent('hostname', 'host0')

    def test_tarball_named_obfuscated(self):
        self.assertTrue('obfuscated' in self.archive)

    def test_ip_address_was_obfuscated(self):
        self.assertFileNotHasContent(
            'ip_addr',
            self.sysinfo['pre']['networking']['ip_addr']
        )