puppet 5.5.22-x64-mingw32 → 6.0.0-x64-mingw32

data/spec/unit/provider/selboolean_spec.rb

@@ -1,34 +0,0 @@
-require 'spec_helper'
-
-provider_class = Puppet::Type.type(:selboolean).provider(:getsetsebool)
-
-describe provider_class do
-  before :each do
-    @resource = double("resource", :name => "foo")
-    allow(@resource).to receive(:[]).and_return("foo")
-    @provider = provider_class.new(@resource)
-  end
-
-  it "should return :on when getsebool returns on" do
-    expect(@provider).to receive(:getsebool).with("foo").and_return("foo --> on\n")
-    expect(@provider.value).to eq(:on)
-  end
-
-  it "should return :off when getsebool returns on" do
-    expect(@provider).to receive(:getsebool).with("foo").and_return("foo --> off\n")
-    expect(@provider.value).to eq(:off)
-  end
-
-  it "should call execpipe when updating boolean setting" do
-    expect(@provider).to receive(:command).with(:setsebool).and_return("/usr/sbin/setsebool")
-    expect(@provider).to receive(:execpipe).with("/usr/sbin/setsebool  foo off")
-    @provider.value = :off
-  end
-
-  it "should call execpipe with -P when updating persistent boolean setting" do
-    allow(@resource).to receive(:[]).with(:persistent).and_return(:true)
-    expect(@provider).to receive(:command).with(:setsebool).and_return("/usr/sbin/setsebool")
-    expect(@provider).to receive(:execpipe).with("/usr/sbin/setsebool -P foo off")
-    @provider.value = :off
-  end
-end

data/spec/unit/provider/selmodule_spec.rb

@@ -1,154 +0,0 @@
-# Note: This unit test depends on having a sample SELinux policy file
-# in the same directory as this test called selmodule-example.pp
-# with version 1.5.0.  The provided selmodule-example.pp is the first
-# 256 bytes taken from /usr/share/selinux/targeted/nagios.pp on Fedora 9
-
-require 'spec_helper'
-require 'stringio'
-
-describe Puppet::Type.type(:selmodule).provider(:semodule) do
-  let(:resource) { instance_double('resource', name: name) }
-  let(:provider) { described_class.new(resource) }
-
-  before :each do
-    allow(resource).to receive(:[]).and_return name
-  end
-
-  def loaded_modules
-    {
-      'bar'  => '1.2.3',
-      'foo'  => '4.4.4',
-      'bang' => '1.0.0',
-    }
-  end
-
-  def semodule_list_output
-    loaded_modules.map{|k,v| "#{k}\t#{v}"}.join("\n")
-  end
-
-  describe 'selmodules_loaded' do
-    let(:name) { 'foo' }
-
-    it 'should return raise an exception when running selmodule raises an exception' do
-      provider.class.loaded_modules = nil # Reset loaded_modules before test
-      allow(provider.class).to receive(:command).with(:semodule).and_return '/usr/sbin/semodule'
-      allow(provider.class).to receive(:execpipe).with('/usr/sbin/semodule --list')
-        .and_yield(StringIO.new("this is\nan error")).and_raise(Puppet::ExecutionFailure, 'it failed')
-      expect { provider.selmodules_loaded }
-        .to raise_error(Puppet::Error, /Could not list policy modules: ".*" failed with "this is an error"/)
-    end
-
-    it 'should return empty hash if no modules are loaded' do
-      provider.class.loaded_modules = nil # Reset loaded_modules before test
-      allow(provider.class).to receive(:command).with(:semodule).and_return '/usr/sbin/semodule'
-      allow(provider.class).to receive(:execpipe).with('/usr/sbin/semodule --list').and_yield StringIO.new('')
-      expect(provider.selmodules_loaded).to eq(Hash.new())
-    end
-
-    it 'should return hash of loaded modules' do
-      provider.class.loaded_modules = nil # Reset loaded_modules before test
-      allow(provider.class).to receive(:command).with(:semodule).and_return '/usr/sbin/semodule'
-      allow(provider.class).to receive(:execpipe).with('/usr/sbin/semodule --list').and_yield StringIO.new(semodule_list_output)
-      expect(provider.selmodules_loaded).to eq(loaded_modules)
-    end
-
-    it 'should return cached hash of loaded modules' do
-      allow(provider.class).to receive(:loaded_modules).and_return loaded_modules
-      allow(provider.class).to receive(:command).with(:semodule).and_return '/usr/sbin/semodule'
-      allow(provider.class).to receive(:execpipe).with('/usr/sbin/semodule --list').and_yield StringIO.new("test\t1.0.0")
-      expect(provider.selmodules_loaded).to eq(loaded_modules)
-    end
-
-    it 'should return cached hash of loaded modules and not raise an exception' do
-      allow(provider.class).to receive(:loaded_modules).and_return loaded_modules
-      allow(provider.class).to receive(:command).with(:semodule).and_return '/usr/sbin/semodule'
-      allow(provider.class).to receive(:execpipe).with('/usr/sbin/semodule --list')
-        .and_yield(StringIO.new('this should not be called')).and_raise(Puppet::ExecutionFailure, 'it failed')
-      expect(provider.selmodules_loaded).to eq(loaded_modules)
-    end
-  end
-
-  describe 'exists? method' do
-    context 'with name foo' do
-      let(:name) { 'foo' }
-
-      it 'should return false if no modules are loaded' do
-        allow(provider).to receive(:selmodules_loaded).and_return Hash.new()
-        expect(provider.exists?).to eq(false)
-      end
-
-      it 'should find a module if it is already loaded' do
-        allow(provider).to receive(:selmodules_loaded).and_return loaded_modules
-        expect(provider.exists?).to eq(true)
-      end
-    end
-
-    context 'with name foobar' do
-      let(:name) { 'foobar' }
-
-      it 'should return false if not loaded' do
-        allow(provider).to receive(:selmodules_loaded).and_return loaded_modules
-        expect(provider.exists?).to eq(false)
-      end
-    end
-
-    context 'with name myfoo' do
-      let(:name) { 'myfoo' }
-
-      it 'should return false if module with same suffix is loaded' do
-        allow(provider).to receive(:selmodules_loaded).and_return loaded_modules
-        expect(provider.exists?).to eq(false)
-      end
-    end
-  end
-
-  describe 'selmodversion_file' do
-    let(:name) { 'foo' }
-
-    it 'should return 1.5.0 for the example policy file' do
-      allow(provider).to receive(:selmod_name_to_filename).and_return "#{File.dirname(__FILE__)}/selmodule-example.pp"
-      expect(provider.selmodversion_file).to eq('1.5.0')
-    end
-  end
-
-  describe 'syncversion' do
-    let(:name) { 'foo' }
-
-    it 'should return :true if loaded and file modules are in sync' do
-      allow(provider).to receive(:selmodversion_loaded).and_return '1.5.0'
-      allow(provider).to receive(:selmodversion_file).and_return '1.5.0'
-      expect(provider.syncversion).to eq(:true)
-    end
-
-    it 'should return :false if loaded and file modules are not in sync' do
-      allow(provider).to receive(:selmodversion_loaded).and_return '1.4.0'
-      allow(provider).to receive(:selmodversion_file).and_return '1.5.0'
-      expect(provider.syncversion).to eq(:false)
-    end
-
-    it 'should return before checking file version if no loaded policy' do
-      allow(provider).to receive(:selmodversion_loaded).and_return nil
-      expect(provider.syncversion).to eq(:false)
-    end
-  end
-
-  describe 'selmodversion_loaded' do
-    context 'with name foo' do
-      let(:name) { 'foo' }
-
-      it 'should return the version of a loaded module' do
-        allow(provider).to receive(:selmodules_loaded).and_return loaded_modules
-        expect(provider.selmodversion_loaded).to eq('4.4.4')
-      end
-    end
-
-    context 'with name foobar' do
-      let(:name) { 'foobar' }
-
-      it 'should return nil if module is not loaded' do
-        allow(provider).to receive(:selmodules_loaded).and_return loaded_modules
-        expect(provider.selmodversion_loaded).to be_nil
-      end
-    end
-  end
-end

data/spec/unit/provider/ssh_authorized_key/parsed_spec.rb

@@ -1,259 +0,0 @@
-require 'spec_helper'
-require 'shared_behaviours/all_parsedfile_providers'
-require 'puppet_spec/files'
-
-provider_class = Puppet::Type.type(:ssh_authorized_key).provider(:parsed)
-
-describe provider_class, :unless => Puppet.features.microsoft_windows? do
-  include PuppetSpec::Files
-
-  before :each do
-    @keyfile = tmpfile('authorized_keys')
-    @provider_class = provider_class
-    @provider_class.initvars
-    allow_any_instance_of(@provider_class).to receive(:target).and_return(@keyfile)
-    @user = 'random_bob'
-    allow(Puppet::Util).to receive(:uid).with(@user).and_return(12345)
-  end
-
-  def mkkey(args)
-    args[:target] = @keyfile
-    args[:user]   = @user
-    resource = Puppet::Type.type(:ssh_authorized_key).new(args)
-    key = @provider_class.new(resource)
-    args.each do |p,v|
-      key.send(p.to_s + "=", v)
-    end
-    key
-  end
-
-  def genkey(key)
-    allow(@provider_class).to receive(:filetype).and_return(Puppet::Util::FileType::FileTypeRam)
-    allow(File).to receive(:chown)
-    allow(File).to receive(:chmod)
-    allow(Puppet::Util::SUIDManager).to receive(:asuser).and_yield
-    key.flush
-    @provider_class.target_object(@keyfile).read
-  end
-
-  it_should_behave_like "all parsedfile providers", provider_class
-
-  it "should be able to generate a basic authorized_keys file" do
-    key = mkkey(:name    => "Just_Testing",
-                :key     => "AAAAfsfddsjldjgksdflgkjsfdlgkj",
-                :type    => "ssh-dss",
-                :ensure  => :present,
-                :options => [:absent]
-              )
-
-    expect(genkey(key)).to eq("ssh-dss AAAAfsfddsjldjgksdflgkjsfdlgkj Just_Testing\n")
-  end
-
-  it "should be able to generate an authorized_keys file with options" do
-    key = mkkey(:name    => "root@localhost",
-                :key     => "AAAAfsfddsjldjgksdflgkjsfdlgkj",
-                :type    => "ssh-rsa",
-                :ensure  => :present,
-                :options => ['from="192.168.1.1"', "no-pty", "no-X11-forwarding"]
-                )
-
-    expect(genkey(key)).to eq("from=\"192.168.1.1\",no-pty,no-X11-forwarding ssh-rsa AAAAfsfddsjldjgksdflgkjsfdlgkj root@localhost\n")
-  end
-
-  it "should parse comments" do
-    result = [{ :record_type => :comment, :line => "# hello" }]
-    expect(@provider_class.parse("# hello\n")).to eq(result)
-  end
-
-  it "should parse comments with leading whitespace" do
-    result = [{ :record_type => :comment, :line => "  # hello" }]
-    expect(@provider_class.parse("  # hello\n")).to eq(result)
-  end
-
-  it "should skip over lines with only whitespace" do
-    result = [{ :record_type => :comment, :line => "#before" },
-              { :record_type => :blank,   :line => "  " },
-              { :record_type => :comment, :line => "#after" }]
-    expect(@provider_class.parse("#before\n  \n#after\n")).to eq(result)
-  end
-
-  it "should skip over completely empty lines" do
-    result = [{ :record_type => :comment, :line => "#before"},
-              { :record_type => :blank,   :line => ""},
-              { :record_type => :comment, :line => "#after"}]
-    expect(@provider_class.parse("#before\n\n#after\n")).to eq(result)
-  end
-
-  it "should be able to parse name if it includes whitespace" do
-    expect(@provider_class.parse_line('ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAAAgQC7pHZ1XRj3tXbFpPFhMGU1bVwz7jr13zt/wuE+pVIJA8GlmHYuYtIxHPfDHlkixdwLachCpSQUL9NbYkkRFRn9m6PZ7125ohE4E4m96QS6SGSQowTiRn4Lzd9LV38g93EMHjPmEkdSq7MY4uJEd6DUYsLvaDYdIgBiLBIWPA3OrQ== fancy user')[:name]).to eq('fancy user')
-    expect(@provider_class.parse_line('from="host1.reductlivelabs.com,host.reductivelabs.com",command="/usr/local/bin/run",ssh-pty ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAAAgQC7pHZ1XRj3tXbFpPFhMGU1bVwz7jr13zt/wuE+pVIJA8GlmHYuYtIxHPfDHlkixdwLachCpSQUL9NbYkkRFRn9m6PZ7125ohE4E4m96QS6SGSQowTiRn4Lzd9LV38g93EMHjPmEkdSq7MY4uJEd6DUYsLvaDYdIgBiLBIWPA3OrQ== fancy user')[:name]).to eq('fancy user')
-    expect(@provider_class.parse_line('ssh-rsa               AAAAB3NzaC1yc2EAAAADAQABAAAAgQC7pHZ1XRj3tXbFpPFhMGU1bVwz7jr13zt/wuE+pVIJA8GlmHYuYtIxHPfDHlkixdwLachCpSQUL9NbYkkRFRn9m6PZ7125ohE4E4m96QS6SGSQowTiRn4Lzd9LV38g93EMHjPmEkdSq7MY4uJEd6DUYsLvaDYdIgBiLBIWPA3OrQ==       whitespace fan')[:name]).to eq('whitespace fan')
-  end
-
-  it "should be able to parse options containing commas via its parse_options method" do
-    options = %w{from="host1.reductlivelabs.com,host.reductivelabs.com" command="/usr/local/bin/run" ssh-pty}
-    optionstr = options.join(", ")
-
-    expect(@provider_class.parse_options(optionstr)).to eq(options)
-  end
-
-  it "should parse quoted options" do
-    line = 'command="/usr/local/bin/mybin \"$SSH_ORIGINAL_COMMAND\"" ssh-rsa xxx mykey'
-
-    expect(@provider_class.parse(line)[0][:options][0]).to eq('command="/usr/local/bin/mybin \"$SSH_ORIGINAL_COMMAND\""')
-  end
-
-  it "should use '' as name for entries that lack a comment" do
-    line = "ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAut8aOSxenjOqF527dlsdHWV4MNoAsX14l9M297+SQXaQ5Z3BedIxZaoQthkDALlV/25A1COELrg9J2MqJNQc8Xe9XQOIkBQWWinUlD/BXwoOTWEy8C8zSZPHZ3getMMNhGTBO+q/O+qiJx3y5cA4MTbw2zSxukfWC87qWwcZ64UUlegIM056vPsdZWFclS9hsROVEa57YUMrehQ1EGxT4Z5j6zIopufGFiAPjZigq/vqgcAqhAKP6yu4/gwO6S9tatBeEjZ8fafvj1pmvvIplZeMr96gHE7xS3pEEQqnB3nd4RY7AF6j9kFixnsytAUO7STPh/M3pLiVQBN89TvWPQ=="
-
-    expect(@provider_class.parse(line)[0][:name]).to eq("")
-  end
-
-  {
-    # ssh-keygen -t dsa -b 1024
-    'ssh-dss' => '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',
-    # ssh-keygen -t rsa -b 2048
-    'ssh-rsa' => 'AAAAB3NzaC1yc2EAAAADAQABAAABAQDYtEaWa1mlxaAh9vtiz6RCVKDiJHDY15nsqqWU7F7A1+U1498+sWDyRDkZ8vXWQpzyOMBzBSHIxhsprlKhkjomy8BuJP+bHDBIKx4zgSFDrklrPIf467Iuug8J0qqDLxO4rOOjeAiLEyC0t2ZGnsTEea+rmat0bJ2cv3g5L4gH/OFz2pI4ZLp1HGN83ipl5UH8CjXQKwo3Db1E3WJCqKgszVX0Z4/qjnBRxFMoqky/1mGb/mX1eoT9JyQ8OhU9uENZOShkksSpgUqjlrjpj0Yd14hBlnE3M18pE4ivxjzectA/XRKNZaxOL1YREtU8sXusAwmlEY4aJ64aR0JrXfgx',
-    # ssh-keygen -t ecdsa -b 256
-    'ecdsa-sha2-nistp256' => 'AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBBO5PfBf0c2jAuqD+Lj3j+SuXOXNT2uqESLVOn5jVQfEF9GzllOw+CMOpUvV1CiOOn+F1ET15vcsfmD7z05WUTA=',
-    # ssh-keygen -t ecdsa -b 384
-    'ecdsa-sha2-nistp384' => 'AAAAE2VjZHNhLXNoYTItbmlzdHAzODQAAAAIbmlzdHAzODQAAABhBJIfxNoVK4FX3RuMlkHOwwxXwAh6Fqx5uAp4ftXrJ+64qYuIzb+/zSAkJV698Sre1b1lb0G4LyDdVAvXwaYK9kN25vy8umV3WdfZeHKXJGCcrplMCbbOERWARlpiPNEblg==',
-    # ssh-keygen -t ecdsa -b 521
-    'ecdsa-sha2-nistp521' => 'AAAAE2VjZHNhLXNoYTItbmlzdHA1MjEAAAAIbmlzdHA1MjEAAACFBADLK+u12xwB0JOwpmaxYXv8KnPK4p+SE2405qoo+vpAQ569fMwPMgKzltd770amdeuFogw/MJu17PN9LDdrD3o0uwHMjWee6TpHQDkuEetaxiou6K0WAzgbxx9QsY0MsJgXf1BuMLqdK+xT183wOSXwwumv99G7T32dOJZ5tYrH0y4XMw==',
-    # ssh-keygen -t ed25519
-    'ssh-ed25519' => 'AAAAC3NzaC1lZDI1NTE5AAAAIBWvu7D1KHBPaNXQcEuBsp48+JyPelXAq8ds6K5Du9gd',
-  }.each_pair do |keytype, keydata|
-    it "should be able to parse a #{keytype} key entry" do
-      comment = 'sample_key'
-
-      record = @provider_class.parse_line("#{keytype} #{keydata} #{comment}")
-      expect(record).not_to be_nil
-      expect(record[:name]).to eq(comment)
-      expect(record[:key]).to eq(keydata)
-      expect(record[:type]).to eq(keytype)
-    end
-  end
-
-  describe "prefetch_hook" do
-    let(:path) { '/path/to/keyfile' }
-    let(:input) do
-      { :type        => 'rsa',
-        :key         => 'KEYDATA',
-        :name        => '',
-        :record_type => :parsed,
-        :target      => path,
-      }
-    end
-    it "adds an indexed name to unnamed resources" do
-      expect(@provider_class.prefetch_hook([input])[0][:name]).to match(/^#{path}:unnamed-\d+/)
-    end
-  end
-
-end
-
-describe provider_class, :unless => Puppet.features.microsoft_windows? do
-  let(:resource) { Puppet::Type.type(:ssh_authorized_key).new(:name => "foo", :user => "random_bob") }
-  let(:provider) { provider_class.new(resource) }
-
-  before(:each) do
-    allow(provider_class).to receive(:filetype).and_return(Puppet::Util::FileType::FileTypeRam)
-    allow(Puppet::Util::SUIDManager).to receive(:asuser).and_yield
-
-    provider_class.initvars
-  end
-
-  describe "when flushing" do
-    before :each do
-      # Stub file and directory operations
-      allow(Dir).to receive(:mkdir)
-      allow(File).to receive(:chmod)
-      allow(File).to receive(:chown)
-    end
-
-    describe "and both a user and a target have been specified" do
-      before :each do
-        allow(Puppet::Util).to receive(:uid).with("random_bob").and_return(12345)
-        resource[:user] = "random_bob"
-        target = "/tmp/.ssh_dir/place_to_put_authorized_keys"
-        resource[:target] = target
-      end
-
-      it "should create the directory" do
-        allow(Puppet::FileSystem).to receive(:exist?).with("/tmp/.ssh_dir").and_return(false)
-        expect(Dir).to receive(:mkdir).with("/tmp/.ssh_dir", 0700)
-        provider.flush
-      end
-
-      it "should absolutely not chown the directory to the user" do
-        expect(File).not_to receive(:chown)
-        provider.flush
-      end
-
-      it "should chmod the key file to 0600" do
-        expect(File).to receive(:chmod).with(0600, "/tmp/.ssh_dir/place_to_put_authorized_keys")
-        provider.flush
-      end
-    end
-
-    describe "and a user has been specified with no target" do
-      #
-      # I'd like to use random_bob here and something like
-      #
-      #    File.stubs(:expand_path).with("~random_bob/.ssh").returns "/users/r/random_bob/.ssh"
-      #
-      # but mocha objects strenuously to stubbing File.expand_path
-      # so I'm left with using nobody.
-      let(:dir) { File.expand_path("~nobody/.ssh") }
-      before :each do
-        resource[:user] = "nobody"
-      end
-
-      it "should create the directory if it doesn't exist" do
-        allow(Puppet::FileSystem).to receive(:exist?).with(dir).and_return(false)
-        expect(Dir).to receive(:mkdir).with(dir, 0700)
-        provider.flush
-      end
-
-      it "should absolutely not chown the directory to the user if it creates it" do
-        allow(Puppet::FileSystem).to receive(:exist?).with(dir).and_return(false)
-        allow(Dir).to receive(:mkdir).with(dir, 0700)
-        expect(File).not_to receive(:chown)
-        provider.flush
-      end
-
-      it "should not create or chown the directory if it already exists" do
-        allow(Puppet::FileSystem).to receive(:exist?).with(dir).and_return(true)
-        expect(Dir).not_to receive(:mkdir)
-        expect(File).not_to receive(:chown)
-        provider.flush
-      end
-
-      it "should absolutely not chown the key file to the user" do
-        expect(File).not_to receive(:chown)
-        provider.flush
-      end
-
-      it "should chmod the key file to 0600" do
-        expect(File).to receive(:chmod).with(0600, File.expand_path("~nobody/.ssh/authorized_keys"))
-        provider.flush
-      end
-    end
-
-    describe "and a target has been specified with no user" do
-      it "should raise an error" do
-        resource = Puppet::Type.type(:ssh_authorized_key).new(:name => "foo", :target => "/tmp/.ssh_dir/place_to_put_authorized_keys")
-        provider = provider_class.new(resource)
-
-        expect { provider.flush }.to raise_error(Puppet::Error, /Cannot write SSH authorized keys without user/)
-      end
-    end
-
-    describe "and an invalid user has been specified with no target" do
-      it "should catch an exception and raise a Puppet error" do
-        resource[:user] = "thisusershouldnotexist"
-
-        expect { provider.flush }.to raise_error(Puppet::Error)
-      end
-    end
-  end
-end