def test_check_privileges_with_c_force_root_and_with_suspicious_group(
grp_module, os_module, accept_content, group_name):
os_module.environ = {'C_FORCE_ROOT': 'true'}
os_module.getuid.return_value = 60
os_module.getgid.return_value = 60
os_module.geteuid.return_value = 60
os_module.getegid.return_value = 60
grp_module.getgrgid.return_value = [group_name]
grp_module.getgrgid.return_value = [group_name]
expected_message = re.escape(
ROOT_DISCOURAGED.format(uid=60, euid=60, gid=60, egid=60))
with pytest.warns(SecurityWarning, match=expected_message):
check_privileges(accept_content)
def test_check_privileges_with_c_force_root_and_no_group_entry(
grp_module, os_module, accept_content, recwarn
):
os_module.environ = {'C_FORCE_ROOT': 'true'}
os_module.getuid.return_value = 60
os_module.getgid.return_value = 60
os_module.geteuid.return_value = 60
os_module.getegid.return_value = 60
grp_module.getgrgid.side_effect = KeyError
expected_message = ROOT_DISCOURAGED.format(uid=60, euid=60,
gid=60, egid=60)
check_privileges(accept_content)
assert len(recwarn) == 2
assert recwarn[0].message.args[0] == ASSUMING_ROOT
assert recwarn[1].message.args[0] == expected_message