aboutsummaryrefslogtreecommitdiffstats
path: root/tests/report_tests/encryption_tests.py
blob: c18398a8d45e4d85093c95cc1c041734e9a6b433 (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
# This file is part of the sos project: https://github.com/sosreport/sos
#
# This copyrighted material is made available to anyone wishing to use,
# modify, copy, or redistribute it subject to the terms and conditions of
# version 2 of the GNU General Public License.
#
# See the LICENSE file in the source distribution for further information.


from avocado.utils import process
from sos_tests import StageOneReportTest


class EncryptedReportTest(StageOneReportTest):
    """Tests the use of --encrypt-pass to ensure that the archive is
    successfully encrypted.

    :avocado: tags=stageone
    """

    encrypt_pass = 'sostest'
    sos_cmd = f"-o kernel --encrypt-pass {encrypt_pass}"

    def test_archive_gpg_encrypted(self):
        self.assertOutputContains(r'/.*sosreport-.*tar.*\.gpg')
        _cmd = f"file {self.encrypted_path}"
        res = process.run(_cmd)
        self.assertTrue(
            ("GPG symmetrically encrypted data" in res.stdout.decode())
            or ("PGP symmetric key encrypted data" in res.stdout.decode()))

    def test_tarball_named_secure(self):
        self.assertTrue('secured-' in self.encrypted_path)


class EncryptedCleanedReportTest(EncryptedReportTest):
    """Ensure that we can successfully both encrypt and clean a report in a
    single execution

    :avocado: tags=stageone
    """

    encrypt_pass = 'sostest'
    sos_cmd = f"-o host,networking --clean --encrypt-pass {encrypt_pass}"

    def test_hostname_obfuscated(self):
        self.assertFileHasContent('hostname', 'host0')

    def test_tarball_named_obfuscated(self):
        self.assertTrue('obfuscated' in self.archive)

    def test_ip_address_was_obfuscated(self):
        self.assertFileNotHasContent(
            'ip_addr',
            self.sysinfo['pre']['networking']['ip_addr']
        )