diff options
| author | Rob Crittenden <rcritten@redhat.com> | 2012-07-24 22:55:27 -0400 |
|---|---|---|
| committer | Rob Crittenden <rcritten@redhat.com> | 2012-07-26 23:57:25 -0400 |
| commit | e345ad12eb05e53246c2eca54616f9001765c291 (patch) | |
| tree | f2f5a2e393e055ef5dc4a29ae6b6935cc8a12eb6 /tests/test_xmlrpc | |
| parent | 9d853483fe3366b8af28de6b8318720339bde89d (diff) | |
| download | freeipa.git-e345ad12eb05e53246c2eca54616f9001765c291.tar.gz freeipa.git-e345ad12eb05e53246c2eca54616f9001765c291.tar.xz freeipa.git-e345ad12eb05e53246c2eca54616f9001765c291.zip | |
Fix validator for SELinux user map settings in config plugin.
We need to compare two values and need to be aware of where those
values are coming from. They may come from options, setattr or
existing config. The format of that data is going to be different
depending on its source (always a list internally).
One may also set both at the same time so a standard validator cannot
be used because it lacks the context of the other value being set.
https://fedorahosted.org/freeipa/ticket/2938
https://fedorahosted.org/freeipa/ticket/2940
Diffstat (limited to 'tests/test_xmlrpc')
| -rw-r--r-- | tests/test_xmlrpc/test_config_plugin.py | 28 |
1 files changed, 28 insertions, 0 deletions
diff --git a/tests/test_xmlrpc/test_config_plugin.py b/tests/test_xmlrpc/test_config_plugin.py index da549bfb..6d83f047 100644 --- a/tests/test_xmlrpc/test_config_plugin.py +++ b/tests/test_xmlrpc/test_config_plugin.py @@ -60,4 +60,32 @@ class test_config(Declarative): expected=errors.RequirementError(name='ipausersearchfields'), ), + dict( + desc='Try to set invalid ipaselinuxusermapdefault', + command=('config_mod', [], + dict(ipaselinuxusermapdefault=u'unknown_u:s0')), + expected=errors.ValidationError(name='ipaselinuxusermapdefault', error='SELinux user map default user not in order list'), + ), + + dict( + desc='Try to set invalid ipaselinuxusermapdefault with setattr', + command=('config_mod', [], + dict(setattr=u'ipaselinuxusermapdefault=unknown_u:s0')), + expected=errors.ValidationError(name='ipaselinuxusermapdefault', error='SELinux user map default user not in order list'), + ), + + dict( + desc='Try to set invalid ipaselinuxusermaporder', + command=('config_mod', [], + dict(ipaselinuxusermaporder=u'notfound_u:s0')), + expected=errors.ValidationError(name='ipaselinuxusermaporder', error='SELinux user map default user not in order list'), + ), + + dict( + desc='Try to set new selinux order and invalid default user', + command=('config_mod', [], + dict(ipaselinuxusermaporder=u'$xguest_u:s0$guest_u:s0$user_u:s0-s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023', ipaselinuxusermapdefault=u'unknown_u:s0')), + expected=errors.ValidationError(name='ipaselinuxusermapdefault', error='SELinux user map default user not in order list'), + ), + ] |