diff options
author | Joe Guo <joeg@catalyst.net.nz> | 2018-07-04 15:25:56 +1200 |
---|---|---|
committer | Andrew Bartlett <abartlet@samba.org> | 2018-07-12 04:32:02 +0200 |
commit | d68c294ac4b313fd97d8de4e9a814944da0f8c6d (patch) | |
tree | 9ac4c61a15b5f795d5241a7b9ed2d99b0ed02921 /python/samba/tests/posixacl.py | |
parent | 197b4b8508f5a1e9ed6b538966afd237c328e091 (diff) | |
download | samba-d68c294ac4b313fd97d8de4e9a814944da0f8c6d.tar.gz |
tests/posixacl: define global ACL to make code DRY
BUG: https://bugzilla.samba.org/show_bug.cgi?id=13521
Signed-off-by: Joe Guo <joeg@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Gary Lockyer <gary@catalyst.net.nz>
Diffstat (limited to 'python/samba/tests/posixacl.py')
-rw-r--r-- | python/samba/tests/posixacl.py | 23 |
1 files changed, 12 insertions, 11 deletions
diff --git a/python/samba/tests/posixacl.py b/python/samba/tests/posixacl.py index 462ee7ef12d..982861c824c 100644 --- a/python/samba/tests/posixacl.py +++ b/python/samba/tests/posixacl.py @@ -29,6 +29,7 @@ from samba.samba3 import smbd, passdb from samba.samba3 import param as s3param DOM_SID = "S-1-5-21-2212615479-2695158682-2101375467" +ACL = "O:S-1-5-21-2212615479-2695158682-2101375467-512G:S-1-5-21-2212615479-2695158682-2101375467-513D:(A;OICI;0x001f01ff;;;S-1-5-21-2212615479-2695158682-2101375467-512)" class PosixAclMappingTests(TestCaseInTempDir): @@ -45,18 +46,18 @@ class PosixAclMappingTests(TestCaseInTempDir): return aclstr def test_setntacl(self): - acl = "O:S-1-5-21-2212615479-2695158682-2101375467-512G:S-1-5-21-2212615479-2695158682-2101375467-513D:(A;OICI;0x001f01ff;;;S-1-5-21-2212615479-2695158682-2101375467-512)" + acl = ACL setntacl(self.lp, self.tempf, acl, DOM_SID, use_ntvfs=False) def test_setntacl_smbd_getntacl(self): - acl = "O:S-1-5-21-2212615479-2695158682-2101375467-512G:S-1-5-21-2212615479-2695158682-2101375467-513D:(A;OICI;0x001f01ff;;;S-1-5-21-2212615479-2695158682-2101375467-512)" + acl = ACL setntacl(self.lp, self.tempf, acl, DOM_SID, use_ntvfs=True) facl = getntacl(self.lp, self.tempf, direct_db_access=True) anysid = security.dom_sid(security.SID_NT_SELF) self.assertEquals(facl.as_sddl(anysid),acl) def test_setntacl_smbd_setposixacl_getntacl(self): - acl = "O:S-1-5-21-2212615479-2695158682-2101375467-512G:S-1-5-21-2212615479-2695158682-2101375467-513D:(A;OICI;0x001f01ff;;;S-1-5-21-2212615479-2695158682-2101375467-512)" + acl = ACL setntacl(self.lp, self.tempf, acl, DOM_SID, use_ntvfs=True) # This will invalidate the ACL, as we have a hook! @@ -70,7 +71,7 @@ class PosixAclMappingTests(TestCaseInTempDir): pass def test_setntacl_invalidate_getntacl(self): - acl = "O:S-1-5-21-2212615479-2695158682-2101375467-512G:S-1-5-21-2212615479-2695158682-2101375467-513D:(A;OICI;0x001f01ff;;;S-1-5-21-2212615479-2695158682-2101375467-512)" + acl = ACL setntacl(self.lp, self.tempf, acl, DOM_SID, use_ntvfs=True) # This should invalidate the ACL, as we include the posix ACL in the hash @@ -84,7 +85,7 @@ class PosixAclMappingTests(TestCaseInTempDir): self.assertEquals(acl, facl.as_sddl(anysid)) def test_setntacl_invalidate_getntacl_smbd(self): - acl = "O:S-1-5-21-2212615479-2695158682-2101375467-512G:S-1-5-21-2212615479-2695158682-2101375467-513D:(A;OICI;0x001f01ff;;;S-1-5-21-2212615479-2695158682-2101375467-512)" + acl = ACL setntacl(self.lp, self.tempf, acl, DOM_SID, use_ntvfs=False) # This should invalidate the ACL, as we include the posix ACL in the hash @@ -98,7 +99,7 @@ class PosixAclMappingTests(TestCaseInTempDir): self.assertEquals(acl, facl.as_sddl(anysid)) def test_setntacl_smbd_invalidate_getntacl_smbd(self): - acl = "O:S-1-5-21-2212615479-2695158682-2101375467-512G:S-1-5-21-2212615479-2695158682-2101375467-513D:(A;OICI;0x001f01ff;;;S-1-5-21-2212615479-2695158682-2101375467-512)" + acl = ACL simple_acl_from_posix = "O:S-1-5-21-2212615479-2695158682-2101375467-512G:S-1-5-21-2212615479-2695158682-2101375467-513D:(A;;0x001f01ff;;;S-1-5-21-2212615479-2695158682-2101375467-512)(A;;0x001200a9;;;S-1-5-21-2212615479-2695158682-2101375467-513)(A;;;;;WD)" os.chmod(self.tempf, 0o750) setntacl(self.lp, self.tempf, acl, DOM_SID, use_ntvfs=False) @@ -114,21 +115,21 @@ class PosixAclMappingTests(TestCaseInTempDir): self.assertEquals(simple_acl_from_posix, facl.as_sddl(anysid)) def test_setntacl_getntacl_smbd(self): - acl = "O:S-1-5-21-2212615479-2695158682-2101375467-512G:S-1-5-21-2212615479-2695158682-2101375467-513D:(A;OICI;0x001f01ff;;;S-1-5-21-2212615479-2695158682-2101375467-512)" + acl = ACL setntacl(self.lp, self.tempf, acl, DOM_SID, use_ntvfs=True) facl = getntacl(self.lp, self.tempf, direct_db_access=False) anysid = security.dom_sid(security.SID_NT_SELF) self.assertEquals(facl.as_sddl(anysid),acl) def test_setntacl_smbd_getntacl_smbd(self): - acl = "O:S-1-5-21-2212615479-2695158682-2101375467-512G:S-1-5-21-2212615479-2695158682-2101375467-513D:(A;OICI;0x001f01ff;;;S-1-5-21-2212615479-2695158682-2101375467-512)" + acl = ACL setntacl(self.lp, self.tempf, acl, DOM_SID, use_ntvfs=False) facl = getntacl(self.lp, self.tempf, direct_db_access=False) anysid = security.dom_sid(security.SID_NT_SELF) self.assertEquals(facl.as_sddl(anysid),acl) def test_setntacl_smbd_setposixacl_getntacl_smbd(self): - acl = "O:S-1-5-21-2212615479-2695158682-2101375467-512G:S-1-5-21-2212615479-2695158682-2101375467-513D:(A;OICI;0x001f01ff;;;S-1-5-21-2212615479-2695158682-2101375467-512)" + acl = ACL simple_acl_from_posix = "O:S-1-5-21-2212615479-2695158682-2101375467-512G:S-1-5-21-2212615479-2695158682-2101375467-513D:(A;;0x001f019f;;;S-1-5-21-2212615479-2695158682-2101375467-512)(A;;0x00120089;;;S-1-5-21-2212615479-2695158682-2101375467-513)(A;;;;;WD)" setntacl(self.lp, self.tempf, acl, DOM_SID, use_ntvfs=False) # This invalidates the hash of the NT acl just set because there is a hook in the posix ACL set code @@ -138,7 +139,7 @@ class PosixAclMappingTests(TestCaseInTempDir): self.assertEquals(simple_acl_from_posix, facl.as_sddl(anysid)) def test_setntacl_smbd_setposixacl_group_getntacl_smbd(self): - acl = "O:S-1-5-21-2212615479-2695158682-2101375467-512G:S-1-5-21-2212615479-2695158682-2101375467-513D:(A;OICI;0x001f01ff;;;S-1-5-21-2212615479-2695158682-2101375467-512)" + acl = ACL BA_sid = security.dom_sid(security.SID_BUILTIN_ADMINISTRATORS) simple_acl_from_posix = "O:S-1-5-21-2212615479-2695158682-2101375467-512G:S-1-5-21-2212615479-2695158682-2101375467-513D:(A;;0x001f019f;;;S-1-5-21-2212615479-2695158682-2101375467-512)(A;;0x00120089;;;BA)(A;;0x00120089;;;S-1-5-21-2212615479-2695158682-2101375467-513)(A;;;;;WD)" setntacl(self.lp, self.tempf, acl, DOM_SID, use_ntvfs=False) @@ -160,7 +161,7 @@ class PosixAclMappingTests(TestCaseInTempDir): self.assertEquals(facl.as_sddl(domsid),acl) def test_setntacl_getposixacl(self): - acl = "O:S-1-5-21-2212615479-2695158682-2101375467-512G:S-1-5-21-2212615479-2695158682-2101375467-513D:(A;OICI;0x001f01ff;;;S-1-5-21-2212615479-2695158682-2101375467-512)" + acl = ACL setntacl(self.lp, self.tempf, acl, DOM_SID, use_ntvfs=False) facl = getntacl(self.lp, self.tempf) anysid = security.dom_sid(security.SID_NT_SELF) |