login_OwnershipApi.py revision 5d010aa50a0694d498e8317fd8044e56474ce7ed
132ca7d25a0d23fe40e25aedf0337e561b3362c1aChris Masone# Copyright (c) 2011 The Chromium OS Authors. All rights reserved. 232ca7d25a0d23fe40e25aedf0337e561b3362c1aChris Masone# Use of this source code is governed by a BSD-style license that can be 332ca7d25a0d23fe40e25aedf0337e561b3362c1aChris Masone# found in the LICENSE file. 432ca7d25a0d23fe40e25aedf0337e561b3362c1aChris Masone 5ea07fea97472497c33b79f1142cb99c18c3b41c6Nirnimeshimport logging 632ca7d25a0d23fe40e25aedf0337e561b3362c1aChris Masoneimport os 732ca7d25a0d23fe40e25aedf0337e561b3362c1aChris Masoneimport tempfile 832ca7d25a0d23fe40e25aedf0337e561b3362c1aChris Masone 9d976e0ed3cb28e532f15826c5071149b8fabeaf8Chris Masonefrom autotest_lib.client.bin import test, utils 1032ca7d25a0d23fe40e25aedf0337e561b3362c1aChris Masonefrom autotest_lib.client.common_lib import autotemp, error 115d010aa50a0694d498e8317fd8044e56474ce7edChris Masonefrom autotest_lib.client.common_lib.cros import policy, session_manager 12d976e0ed3cb28e532f15826c5071149b8fabeaf8Chris Masonefrom autotest_lib.client.cros import cros_ui, cryptohome, ownership 1332ca7d25a0d23fe40e25aedf0337e561b3362c1aChris Masone 1432ca7d25a0d23fe40e25aedf0337e561b3362c1aChris Masone 15d976e0ed3cb28e532f15826c5071149b8fabeaf8Chris Masoneclass login_OwnershipApi(test.test): 164dbb67c9f8fbb9d31cffa910feda5186c4c1994aChris Masone """Tests to ensure that the Ownership API works for a local device owner. 174dbb67c9f8fbb9d31cffa910feda5186c4c1994aChris Masone """ 1832ca7d25a0d23fe40e25aedf0337e561b3362c1aChris Masone version = 1 1932ca7d25a0d23fe40e25aedf0337e561b3362c1aChris Masone 2032ca7d25a0d23fe40e25aedf0337e561b3362c1aChris Masone _tempdir = None 2132ca7d25a0d23fe40e25aedf0337e561b3362c1aChris Masone 22bbd576fc1975e33aa89e67b412d5be8fe36bd683Chris Masone def setup(self): 23bbd576fc1975e33aa89e67b412d5be8fe36bd683Chris Masone os.chdir(self.srcdir) 24bbd576fc1975e33aa89e67b412d5be8fe36bd683Chris Masone utils.make('OUT_DIR=.') 25bbd576fc1975e33aa89e67b412d5be8fe36bd683Chris Masone 26bbd576fc1975e33aa89e67b412d5be8fe36bd683Chris Masone 27bbd576fc1975e33aa89e67b412d5be8fe36bd683Chris Masone def initialize(self): 28eac4f4f0839c57d84d5c042deed64cf6d2189d26Chris Masone super(login_OwnershipApi, self).initialize() 294dbb67c9f8fbb9d31cffa910feda5186c4c1994aChris Masone # Start clean. 3014b746590380faa30a2119b3be1d5fcf2d953f11Chris Masone cros_ui.stop() 31d976e0ed3cb28e532f15826c5071149b8fabeaf8Chris Masone ownership.clear_ownership_files() 32d976e0ed3cb28e532f15826c5071149b8fabeaf8Chris Masone cryptohome.remove_vault(ownership.TESTUSER) 334dbb67c9f8fbb9d31cffa910feda5186c4c1994aChris Masone 34d976e0ed3cb28e532f15826c5071149b8fabeaf8Chris Masone # Make device already owned by ownership.TESTUSER. 35d976e0ed3cb28e532f15826c5071149b8fabeaf8Chris Masone cryptohome.mount_vault(ownership.TESTUSER, 36d976e0ed3cb28e532f15826c5071149b8fabeaf8Chris Masone ownership.TESTPASS, 37d976e0ed3cb28e532f15826c5071149b8fabeaf8Chris Masone create=True) 38d976e0ed3cb28e532f15826c5071149b8fabeaf8Chris Masone ownership.use_known_ownerkeys(ownership.TESTUSER) 394dbb67c9f8fbb9d31cffa910feda5186c4c1994aChris Masone 4014b746590380faa30a2119b3be1d5fcf2d953f11Chris Masone self._tempdir = autotemp.tempdir(unique_id=self.__class__.__name__) 4114b746590380faa30a2119b3be1d5fcf2d953f11Chris Masone cros_ui.start() 4214b746590380faa30a2119b3be1d5fcf2d953f11Chris Masone 4332ca7d25a0d23fe40e25aedf0337e561b3362c1aChris Masone 44d5d577a535556c6911ef4ba0f76e148036c7f060Chris Masone def __generate_temp_filename(self, dir): 45d5d577a535556c6911ef4ba0f76e148036c7f060Chris Masone """Generate a guaranteed-unique filename in dir.""" 46d5d577a535556c6911ef4ba0f76e148036c7f060Chris Masone just_for_name = tempfile.NamedTemporaryFile(dir=dir, delete=True) 4732ca7d25a0d23fe40e25aedf0337e561b3362c1aChris Masone basename = just_for_name.name 4832ca7d25a0d23fe40e25aedf0337e561b3362c1aChris Masone just_for_name.close() # deletes file. 4932ca7d25a0d23fe40e25aedf0337e561b3362c1aChris Masone return basename 5032ca7d25a0d23fe40e25aedf0337e561b3362c1aChris Masone 5132ca7d25a0d23fe40e25aedf0337e561b3362c1aChris Masone 5232ca7d25a0d23fe40e25aedf0337e561b3362c1aChris Masone def run_once(self): 53105706efb7ebc97575dafd7a92bb815f79d8bb47Chris Masone pkey = ownership.known_privkey() 54105706efb7ebc97575dafd7a92bb815f79d8bb47Chris Masone pubkey = ownership.known_pubkey() 555d010aa50a0694d498e8317fd8044e56474ce7edChris Masone sm = session_manager.connect() 56d976e0ed3cb28e532f15826c5071149b8fabeaf8Chris Masone if not sm.StartSession(ownership.TESTUSER, ''): 57eac4f4f0839c57d84d5c042deed64cf6d2189d26Chris Masone raise error.TestFail('Could not start session for owner') 5814b746590380faa30a2119b3be1d5fcf2d953f11Chris Masone 59d976e0ed3cb28e532f15826c5071149b8fabeaf8Chris Masone poldata = policy.build_policy_data(self.srcdir, 60d976e0ed3cb28e532f15826c5071149b8fabeaf8Chris Masone owner=ownership.TESTUSER, 61d976e0ed3cb28e532f15826c5071149b8fabeaf8Chris Masone guests=False, 62d976e0ed3cb28e532f15826c5071149b8fabeaf8Chris Masone new_users=True, 63d976e0ed3cb28e532f15826c5071149b8fabeaf8Chris Masone roaming=True, 64d976e0ed3cb28e532f15826c5071149b8fabeaf8Chris Masone whitelist=(ownership.TESTUSER, 65d976e0ed3cb28e532f15826c5071149b8fabeaf8Chris Masone 'a@b.c'), 66d976e0ed3cb28e532f15826c5071149b8fabeaf8Chris Masone proxies={ 'proxy_mode': 'direct' }) 67d976e0ed3cb28e532f15826c5071149b8fabeaf8Chris Masone 68d976e0ed3cb28e532f15826c5071149b8fabeaf8Chris Masone policy_string = policy.generate_policy(self.srcdir, 69d976e0ed3cb28e532f15826c5071149b8fabeaf8Chris Masone pkey, 70d976e0ed3cb28e532f15826c5071149b8fabeaf8Chris Masone pubkey, 71d976e0ed3cb28e532f15826c5071149b8fabeaf8Chris Masone poldata) 72d976e0ed3cb28e532f15826c5071149b8fabeaf8Chris Masone policy.push_policy_and_verify(policy_string, sm) 73d976e0ed3cb28e532f15826c5071149b8fabeaf8Chris Masone retrieved_policy = policy.get_policy(sm) 74105706efb7ebc97575dafd7a92bb815f79d8bb47Chris Masone if retrieved_policy is None: raise error.TestFail('Policy not found') 75d976e0ed3cb28e532f15826c5071149b8fabeaf8Chris Masone policy.compare_policy_response(self.srcdir, 76d976e0ed3cb28e532f15826c5071149b8fabeaf8Chris Masone retrieved_policy, 77d976e0ed3cb28e532f15826c5071149b8fabeaf8Chris Masone owner=ownership.TESTUSER, 78d976e0ed3cb28e532f15826c5071149b8fabeaf8Chris Masone guests=False, 79d976e0ed3cb28e532f15826c5071149b8fabeaf8Chris Masone new_users=True, 80d976e0ed3cb28e532f15826c5071149b8fabeaf8Chris Masone roaming=True, 81d976e0ed3cb28e532f15826c5071149b8fabeaf8Chris Masone whitelist=(ownership.TESTUSER, 'a@b.c'), 82d976e0ed3cb28e532f15826c5071149b8fabeaf8Chris Masone proxies={ 'proxy_mode': 'direct' }) 83105706efb7ebc97575dafd7a92bb815f79d8bb47Chris Masone try: 84105706efb7ebc97575dafd7a92bb815f79d8bb47Chris Masone # Sanity check against an incorrect policy 85d976e0ed3cb28e532f15826c5071149b8fabeaf8Chris Masone policy.compare_policy_response(self.srcdir, 86d976e0ed3cb28e532f15826c5071149b8fabeaf8Chris Masone retrieved_policy, 87d976e0ed3cb28e532f15826c5071149b8fabeaf8Chris Masone owner=ownership.TESTUSER, 88d976e0ed3cb28e532f15826c5071149b8fabeaf8Chris Masone guests=True, 89d976e0ed3cb28e532f15826c5071149b8fabeaf8Chris Masone whitelist=(ownership.TESTUSER, 90d976e0ed3cb28e532f15826c5071149b8fabeaf8Chris Masone 'a@b.c'), 91d976e0ed3cb28e532f15826c5071149b8fabeaf8Chris Masone proxies={ 'proxy_mode': 'direct' }) 92105706efb7ebc97575dafd7a92bb815f79d8bb47Chris Masone except ownership.OwnershipError: 93105706efb7ebc97575dafd7a92bb815f79d8bb47Chris Masone pass 94105706efb7ebc97575dafd7a92bb815f79d8bb47Chris Masone else: 95105706efb7ebc97575dafd7a92bb815f79d8bb47Chris Masone raise error.TestFail('Did not detect bad policy') 96d51ac9cdab93aee5b408dde4543a00d9913f740fDavid James 9767f77a12725f81b88235a9d865bd4b8322fb83c7Chris Masone try: 98d976e0ed3cb28e532f15826c5071149b8fabeaf8Chris Masone sm.StopSession('') 9967f77a12725f81b88235a9d865bd4b8322fb83c7Chris Masone except error.TestError as e: 10067f77a12725f81b88235a9d865bd4b8322fb83c7Chris Masone logging.error(str(e)) 10167f77a12725f81b88235a9d865bd4b8322fb83c7Chris Masone raise error.TestFail('Could not stop session for owner') 10232ca7d25a0d23fe40e25aedf0337e561b3362c1aChris Masone 10332ca7d25a0d23fe40e25aedf0337e561b3362c1aChris Masone 10432ca7d25a0d23fe40e25aedf0337e561b3362c1aChris Masone def cleanup(self): 10532ca7d25a0d23fe40e25aedf0337e561b3362c1aChris Masone cryptohome.unmount_vault() 106eac4f4f0839c57d84d5c042deed64cf6d2189d26Chris Masone if self._tempdir: self._tempdir.clean() 10714b746590380faa30a2119b3be1d5fcf2d953f11Chris Masone cros_ui.start(allow_fail=True) 10832ca7d25a0d23fe40e25aedf0337e561b3362c1aChris Masone super(login_OwnershipApi, self).cleanup() 109