1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
|
# This file is part of the sos project: https://github.com/sosreport/sos
#
# This copyrighted material is made available to anyone wishing to use,
# modify, copy, or redistribute it subject to the terms and conditions of
# version 2 of the GNU General Public License.
#
# See the LICENSE file in the source distribution for further information.
from sos_tests import StageOneReportTest, StageTwoReportTest
import re
class ReportWithMask(StageOneReportTest):
"""Testing around basic --clean/--mask usage and expectations
:avocado: tags=stageone
"""
sos_cmd = '--mask -o host,networking'
def test_mask_was_run(self):
self.assertOutputContains('Beginning obfuscation')
self.assertOutputContains('Obfuscation completed')
def test_private_map_was_generated(self):
self.assertOutputContains('A mapping of obfuscated elements is available at')
map_file = re.findall('/.*sosreport-.*-private_map', self.cmd_output.stdout)[-1]
self.assertFileExists(map_file)
def test_tarball_named_obfuscated(self):
self.assertTrue('obfuscated' in self.archive)
def test_localhost_was_obfuscated(self):
self.assertFileHasContent('/etc/hostname', 'host0')
def test_ip_address_was_obfuscated(self):
# Note: do not test for starting with the 100.* block here, as test
# machines may have /32 addresses. Instead, test that the actual
# IP address is not present
self.assertFileNotHasContent('ip_addr', self.sysinfo['pre']['networking']['ip_addr'])
def test_loopback_was_not_obfuscated(self):
self.assertFileHasContent('ip_addr', '127.0.0.1/8')
def test_mac_addrs_were_obfuscated(self):
content = self.get_file_content('sos_commands/networking/ip_maddr_show')
for line in content.splitlines():
if line.strip().startswith('link'):
mac = line.strip().split()[1]
assert mac.startswith('53:4f:53'), "Found unobfuscated mac addr %s" % mac
class ReportWithCleanedKeywords(StageOneReportTest):
"""Testing for obfuscated keywords provided by the user
:avocado: tags=stageone
"""
sos_cmd = '--clean -o filesys,kernel --keywords=fstab,Linux'
# Ok, sort of cheesy here but this does actually test filename changes on
# a file common to all distros
def test_filename_obfuscated(self):
self.assertFileNotCollected('/etc/fstab')
self.assertFileGlobInArchive('/etc/obfuscatedword*')
def test_keyword_obfuscated_in_file(self):
self.assertFileNotHasContent('sos_commands/kernel/uname_-a', 'Linux')
class DefaultRemoveBinaryFilesTest(StageTwoReportTest):
"""Testing that binary files are removed by default
:avocado: tags=stagetwo
"""
files = ['/var/log/binary_test.tar.xz']
install_plugins = ['binary_test']
sos_cmd = '--clean -o binary_test,kernel,host'
def test_binary_removed(self):
self.assertFileNotCollected('var/log/binary_test.tar.xz')
def test_binaries_removed_reported(self):
self.assertOutputContains('\[removed .* unprocessable files\]')
class KeepBinaryFilesTest(StageTwoReportTest):
"""Testing that --keep-binary-files will function as expected
:avocado: tags=stagetwo
"""
files = ['/var/log/binary_test.tar.xz']
install_plugins = ['binary_test']
sos_cmd = '--clean --keep-binary-files -o binary_test,kernel,host'
def test_warning_message_shown(self):
self.assertOutputContains(
'WARNING: binary files that potentially contain sensitive information '
'will NOT be removed from the final archive'
)
def test_binary_is_in_archive(self):
self.assertFileCollected('var/log/binary_test.tar.xz')
def test_no_binaries_reported_removed(self):
self.assertOutputNotContains('\[removed .* unprocessable files\]')
|
