2cad49de85
- Implement tests for BackupService to handle database extraction from backup archives with SHM and WAL entries. - Add tests for BackupService to validate behavior when creating backups for non-SQLite databases and handling oversized database entries. - Introduce tests for CrowdSec startup to ensure proper error handling during configuration creation. - Enhance LogService tests to cover scenarios for skipping dot and empty directories and handling read directory errors. - Add tests for SecurityHeadersService to ensure proper error handling during preset creation and updates. - Update ProxyHostForm tests to include HSTS subdomains toggle and validation for port input handling. - Enhance DNSProviders tests to validate manual challenge completion and error handling when no providers are available. - Extend UsersPage tests to ensure fallback mechanisms for clipboard operations when the clipboard API fails.
58 lines
1.5 KiB
Go
58 lines
1.5 KiB
Go
package handlers
|
|
|
|
import (
|
|
"bytes"
|
|
"encoding/json"
|
|
"net/http"
|
|
"net/http/httptest"
|
|
"os"
|
|
"path/filepath"
|
|
"syscall"
|
|
"testing"
|
|
|
|
"github.com/Wikid82/charon/backend/internal/config"
|
|
"github.com/gin-gonic/gin"
|
|
"github.com/stretchr/testify/require"
|
|
)
|
|
|
|
func TestSystemPermissionsWave6_RepairPermissions_NonRootBranchViaSeteuid(t *testing.T) {
|
|
if os.Geteuid() != 0 {
|
|
t.Skip("test requires root execution")
|
|
}
|
|
|
|
if err := syscall.Seteuid(65534); err != nil {
|
|
t.Skip("unable to drop euid for test")
|
|
}
|
|
defer func() {
|
|
restoreErr := syscall.Seteuid(0)
|
|
require.NoError(t, restoreErr)
|
|
}()
|
|
|
|
gin.SetMode(gin.TestMode)
|
|
|
|
root := t.TempDir()
|
|
dataDir := filepath.Join(root, "data")
|
|
require.NoError(t, os.MkdirAll(dataDir, 0o750))
|
|
|
|
h := NewSystemPermissionsHandler(config.Config{
|
|
SingleContainer: true,
|
|
DatabasePath: filepath.Join(dataDir, "charon.db"),
|
|
ConfigRoot: dataDir,
|
|
CaddyLogDir: dataDir,
|
|
CrowdSecLogDir: dataDir,
|
|
}, nil, stubPermissionChecker{})
|
|
|
|
w := httptest.NewRecorder()
|
|
c, _ := gin.CreateTestContext(w)
|
|
c.Set("role", "admin")
|
|
c.Request = httptest.NewRequest(http.MethodPost, "/system/permissions/repair", bytes.NewBufferString(`{"paths":["/tmp"]}`))
|
|
c.Request.Header.Set("Content-Type", "application/json")
|
|
|
|
h.RepairPermissions(c)
|
|
|
|
require.Equal(t, http.StatusForbidden, w.Code)
|
|
var payload map[string]string
|
|
require.NoError(t, json.Unmarshal(w.Body.Bytes(), &payload))
|
|
require.Equal(t, "permissions_non_root", payload["error_code"])
|
|
}
|