示例#1
0
    def test_scan_worldwritable_files_owned_by_root(self, mock_os):
        # Prepare data and mocks
        test_subject = WorldWritable(None)
        mock_os.walk.return_value = [
            ('/dir1', ('/dir1/subdir1',), ('world_writable_owned_by_root', 'not_world_writable_owned_by_root')),
            ('/dir2', (), ()),
            ('/dir3', ('/dir3/subdir3',), ('world_writable_not_owned_by_root',)),
        ]
        test_subject.is_world_writable = MagicMock(side_effect=[True, False, True])
        test_subject.is_owned_by_root = MagicMock(side_effect=[True, False])

        # Run test scenario
        result = test_subject.scan_worldwritable_files_owned_by_root()

        # Assertions
        self.assertEqual(result, ['world_writable_owned_by_root'])
        mock_os.walk.assert_called_once_with('/')
        test_subject.is_world_writable.assert_has_calls(
            [
                call('world_writable_owned_by_root'),
                call('not_world_writable_owned_by_root'),
                call('world_writable_not_owned_by_root'),
            ]
        )
        test_subject.is_owned_by_root.assert_has_calls(
            [
                call('world_writable_owned_by_root'),
                call('world_writable_not_owned_by_root'),
            ]
        )
示例#2
0
    def test_scan_when_two_failures(self):
        # Prepare data and mocks
        test_subject = WorldWritable(None)
        test_subject.scan_worldwritable_files_starting_with_dot = MagicMock(
            return_value=[])
        test_subject.scan_worldwritable_directories_with_no_sticky_bit_set = MagicMock(
            return_value=['/some/failure'])
        test_subject.scan_worldwritable_files_owned_by_root = MagicMock(
            return_value=['/other/failure'])
        test_subject.get_scan_text = MagicMock(
            side_effect=['Test2 Failed', 'Test3 Failed'])

        # Run test scenario
        result = test_subject.scan()

        # Assertions
        test_subject.get_scan_text.assert_has_calls([
            call('World writable directories with no sticky bit set',
                 ['/some/failure']),
            call('World writable files owned by root', ['/other/failure']),
        ])
        test_subject.scan_worldwritable_files_starting_with_dot.assert_called_once_with(
        )
        test_subject.scan_worldwritable_directories_with_no_sticky_bit_set.assert_called_once_with(
        )
        test_subject.scan_worldwritable_files_owned_by_root.assert_called_once_with(
        )
        self.assertEqual(result[0], ScanStatus.fail)
        self.assertEqual(result[1], 'Test2 Failed\nTest3 Failed')
示例#3
0
    def test_scan_worldwritable_files_owned_by_root(self, mock_os):
        # Prepare data and mocks
        test_subject = WorldWritable(None)
        mock_os.walk.return_value = [
            ('/dir1', ('/dir1/subdir1', ),
             ('world_writable_owned_by_root',
              'not_world_writable_owned_by_root')),
            ('/dir2', (), ()),
            ('/dir3', ('/dir3/subdir3', ),
             ('world_writable_not_owned_by_root', )),
        ]
        test_subject.is_world_writable = MagicMock(
            side_effect=[True, False, True])
        test_subject.is_owned_by_root = MagicMock(side_effect=[True, False])

        # Run test scenario
        result = test_subject.scan_worldwritable_files_owned_by_root()

        # Assertions
        self.assertEqual(result, ['world_writable_owned_by_root'])
        mock_os.walk.assert_called_once_with('/')
        test_subject.is_world_writable.assert_has_calls([
            call('world_writable_owned_by_root'),
            call('not_world_writable_owned_by_root'),
            call('world_writable_not_owned_by_root'),
        ])
        test_subject.is_owned_by_root.assert_has_calls([
            call('world_writable_owned_by_root'),
            call('world_writable_not_owned_by_root'),
        ])
示例#4
0
    def test_scan_when_success(self):
        # Prepare data and mocks
        test_subject = WorldWritable(None)
        test_subject.scan_worldwritable_files_starting_with_dot = MagicMock(return_value=[])
        test_subject.scan_worldwritable_directories_with_no_sticky_bit_set = MagicMock(return_value=[])
        test_subject.scan_worldwritable_files_owned_by_root = MagicMock(return_value=[])

        # Run test scenario
        result = test_subject.scan()

        # Assertions
        test_subject.scan_worldwritable_files_starting_with_dot.assert_called_once_with()
        test_subject.scan_worldwritable_directories_with_no_sticky_bit_set.assert_called_once_with()
        test_subject.scan_worldwritable_files_owned_by_root.assert_called_once_with()
        self.assertEqual(result[0], ScanStatus.success)
        self.assertEqual(result[1], '')
示例#5
0
    def test_scan_when_success(self):
        # Prepare data and mocks
        test_subject = WorldWritable(None)
        test_subject.scan_worldwritable_files_starting_with_dot = MagicMock(
            return_value=[])
        test_subject.scan_worldwritable_directories_with_no_sticky_bit_set = MagicMock(
            return_value=[])
        test_subject.scan_worldwritable_files_owned_by_root = MagicMock(
            return_value=[])

        # Run test scenario
        result = test_subject.scan()

        # Assertions
        test_subject.scan_worldwritable_files_starting_with_dot.assert_called_once_with(
        )
        test_subject.scan_worldwritable_directories_with_no_sticky_bit_set.assert_called_once_with(
        )
        test_subject.scan_worldwritable_files_owned_by_root.assert_called_once_with(
        )
        self.assertEqual(result[0], ScanStatus.success)
        self.assertEqual(result[1], '')
示例#6
0
    def test_scan_when_two_failures(self):
        # Prepare data and mocks
        test_subject = WorldWritable(None)
        test_subject.scan_worldwritable_files_starting_with_dot = MagicMock(return_value=[])
        test_subject.scan_worldwritable_directories_with_no_sticky_bit_set = MagicMock(return_value=['/some/failure'])
        test_subject.scan_worldwritable_files_owned_by_root = MagicMock(return_value=['/other/failure'])
        test_subject.get_scan_text = MagicMock(side_effect=['Test2 Failed', 'Test3 Failed'])

        # Run test scenario
        result = test_subject.scan()

        # Assertions
        test_subject.get_scan_text.assert_has_calls(
            [
                call('World writable directories with no sticky bit set', ['/some/failure']),
                call('World writable files owned by root', ['/other/failure']),
            ]
        )
        test_subject.scan_worldwritable_files_starting_with_dot.assert_called_once_with()
        test_subject.scan_worldwritable_directories_with_no_sticky_bit_set.assert_called_once_with()
        test_subject.scan_worldwritable_files_owned_by_root.assert_called_once_with()
        self.assertEqual(result[0], ScanStatus.fail)
        self.assertEqual(result[1], 'Test2 Failed\nTest3 Failed')