def test_sip(self): def create_status_report(filename, message): content = """#!/usr/bin/env sh echo 'sa-la-la-la' echo 'la-la-la' echo '{0}' echo 'sa-la-la-la' echo 'la-la-la' """.format(message) lines = [line.strip() for line in content.split('\n')] with open(filename, 'w') as handle: handle.write('\n'.join(lines)) handle.close() os.chmod(filename, 0x1ff) def create_csrutil(dest_dir, status): filename = os.path.join(dest_dir, 'csrutil') message = 'System Integrity Protection status: {0}'.format(status) return create_status_report(filename, message) def create_sestatus(dest_dir, status): filename = os.path.join(dest_dir, 'sestatus') message = 'SELinux status:\t{0}'.format(status) return create_status_report(filename, message) ENABLED = 'enabled' DISABLED = 'disabled' OSX = 'darwin' with libear.TemporaryDirectory() as tmpdir: saved = os.environ['PATH'] try: os.environ['PATH'] = tmpdir + ':' + saved create_csrutil(tmpdir, ENABLED) self.assertTrue(sut.is_preload_disabled(OSX)) create_csrutil(tmpdir, DISABLED) self.assertFalse(sut.is_preload_disabled(OSX)) finally: os.environ['PATH'] = saved saved = os.environ['PATH'] try: os.environ['PATH'] = '' # shall be false when it's not in the path self.assertFalse(sut.is_preload_disabled(OSX)) self.assertFalse(sut.is_preload_disabled('unix')) finally: os.environ['PATH'] = saved
def test_sip(self): def create_status_report(filename, message): content = """#!/usr/bin/env sh echo 'sa-la-la-la' echo 'la-la-la' echo '{0}' echo 'sa-la-la-la' echo 'la-la-la' """.format(message) lines = [line.strip() for line in content.split(os.linesep)] with open(filename, 'w') as handle: handle.write(os.linesep.join(lines)) handle.close() os.chmod(filename, 0x1ff) def create_csrutil(dest_dir, status): filename = os.path.join(dest_dir, 'csrutil') message = 'System Integrity Protection status: {0}'.format(status) return create_status_report(filename, message) enabled = 'enabled' disabled = 'disabled' osx = 'darwin' saved = os.environ['PATH'] with libear.temporary_directory() as tmp_dir: try: os.environ['PATH'] = os.pathsep.join([tmp_dir, saved]) create_csrutil(tmp_dir, enabled) self.assertTrue(sut.is_preload_disabled(osx)) create_csrutil(tmp_dir, disabled) self.assertFalse(sut.is_preload_disabled(osx)) finally: os.environ['PATH'] = saved try: os.environ['PATH'] = '' # shall be false when it's not in the path self.assertFalse(sut.is_preload_disabled(osx)) self.assertFalse(sut.is_preload_disabled('unix')) finally: os.environ['PATH'] = saved