41 lines
1.8 KiB
Python
41 lines
1.8 KiB
Python
import os
|
|
import subprocess
|
|
import tempfile
|
|
import unittest
|
|
|
|
ROOT = os.path.join(os.path.dirname(os.path.abspath(__file__)), "..")
|
|
STUBBED = ("launchctl", "lsof", "defaults", "osascript", "pgrep", "pkill", "curl")
|
|
SSH_ENVS = ({"SSH_CONNECTION": "10.0.0.2 50000 10.0.0.1 22"}, {"SSH_TTY": "/dev/ttys009"})
|
|
|
|
|
|
class RefuseOverSsh(unittest.TestCase):
|
|
"""Только охранная проверка: реальная установка в этих тестах не запускается."""
|
|
|
|
def assert_refused(self, *cmd):
|
|
for extra in SSH_ENVS:
|
|
with self.subTest(cmd=cmd, env=extra), tempfile.TemporaryDirectory() as home, \
|
|
tempfile.TemporaryDirectory() as stubs:
|
|
# второй рубеж: даже если охрана не сработает, системные команды — заглушки
|
|
for name in STUBBED:
|
|
path = os.path.join(stubs, name)
|
|
with open(path, "w") as f:
|
|
f.write("#!/bin/sh\nexit 1\n")
|
|
os.chmod(path, 0o755)
|
|
env = {k: v for k, v in os.environ.items() if k not in ("SSH_CONNECTION", "SSH_TTY")}
|
|
env.update(HOME=home, PATH=stubs + os.pathsep + env.get("PATH", ""), **extra)
|
|
r = subprocess.run(["bash", *cmd], cwd=ROOT, env=env, capture_output=True, text=True)
|
|
self.assertNotEqual(r.returncode, 0)
|
|
self.assertIn("за самим Mac", r.stdout + r.stderr)
|
|
self.assertEqual(os.listdir(home), [])
|
|
|
|
def test_install_refuses_over_ssh(self):
|
|
self.assert_refused("install.sh")
|
|
|
|
def test_uninstall_refuses_over_ssh(self):
|
|
self.assert_refused("uninstall.sh")
|
|
self.assert_refused("uninstall.sh", "--purge")
|
|
|
|
|
|
if __name__ == "__main__":
|
|
unittest.main()
|