76 lines
2.4 KiB
Go
76 lines
2.4 KiB
Go
package platform
|
|
|
|
import (
|
|
"os"
|
|
"path/filepath"
|
|
"testing"
|
|
|
|
"git.casaderoll.de/michael/urbm/internal/model"
|
|
)
|
|
|
|
func TestValidateRestoreTarget(t *testing.T) {
|
|
root := "/mnt/user/urbm-restores"
|
|
target := filepath.Join(root, "task")
|
|
if got, err := ValidateRestoreTarget(target, root, false, false); err != nil || got != target {
|
|
t.Fatalf("staging target rejected: %q %v", got, err)
|
|
}
|
|
if got, err := ValidateRestoreTarget("/mnt/user/Transfer", root, false, false); err != nil || got != "/mnt/user/Transfer" {
|
|
t.Fatalf("user share restore target rejected: %q %v", got, err)
|
|
}
|
|
if _, err := ValidateRestoreTarget("/home/root/restore", root, false, false); err == nil {
|
|
t.Fatal("staging target outside allowed restore roots accepted")
|
|
}
|
|
if got, err := ValidateRestoreTarget("/mnt/user/data", root, true, true); err != nil || got != "/" {
|
|
t.Fatalf("confirmed in-place target = %q, %v", got, err)
|
|
}
|
|
if _, err := ValidateRestoreTarget("/mnt/user/data", root, true, false); err == nil {
|
|
t.Fatal("unconfirmed in-place restore accepted")
|
|
}
|
|
}
|
|
|
|
func TestValidateRsyncPathsRejectsSymlinkOverlap(t *testing.T) {
|
|
root := t.TempDir()
|
|
source := filepath.Join(root, "source")
|
|
if err := os.Mkdir(source, 0755); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
target := filepath.Join(root, "target-link")
|
|
if err := os.Symlink(source, target); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
job := model.Job{Sources: []model.Source{{Path: source}}, Rsync: model.RsyncOptions{Target: target}}
|
|
if err := ValidateRsyncPaths(job); err == nil {
|
|
t.Fatal("symlinked rsync target overlapping the source was accepted")
|
|
}
|
|
}
|
|
|
|
func TestValidateRestoreTargetRejectsSymlink(t *testing.T) {
|
|
root := t.TempDir()
|
|
real := filepath.Join(root, "real")
|
|
link := filepath.Join(root, "link")
|
|
if err := os.Mkdir(real, 0755); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
if err := os.Symlink(real, link); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
if err := rejectSymlinks(root, filepath.Join(link, "task")); err == nil {
|
|
t.Fatal("symlink traversal accepted")
|
|
}
|
|
}
|
|
|
|
func TestRejectSymlinksChecksRootItself(t *testing.T) {
|
|
base := t.TempDir()
|
|
real := filepath.Join(base, "real")
|
|
link := filepath.Join(base, "root-link")
|
|
if err := os.Mkdir(real, 0755); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
if err := os.Symlink(real, link); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
if err := rejectSymlinks(link, filepath.Join(link, "task")); err == nil {
|
|
t.Fatal("symlinked restore root accepted")
|
|
}
|
|
}
|