github/open-cas-linux
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

tests: fix checksec test formating

Browse Source 
Signed-off-by: Kamil Gierszewski <kamil.gierszewski@huawei.com>
This commit is contained in:
Kamil Gierszewski 2025-02-28 02:15:19 +01:00
parent 8544e28788
commit cef43f7778
No known key found for this signature in database
1 changed files with 42 additions and 22 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

64
test/functional/tests/security/test_compilation_flags.py
View File

@ -16,30 +16,47 @@ from test_utils.filesystem.fs_item import FsItem
@pytest.mark.os_dependent @pytest.mark.os_dependent
def test_checksec(): def test_checksec():
""" """
title: Checking defenses enabled compilation flags. title: Checking defenses enabled compilation flags.
description: | description: |
Check if Open CAS executable file was compiled with defenses enabled compilation flags. Check if Open CAS executable file was compiled with defenses enabled compilation flags.
pass_criteria: pass_criteria:
- For casadm script returns: - For casadm script returns:
RELRO STACK CANARY NX PIE RPATH RUNPATH FILE RELRO STACK CANARY NX PIE RPATH RUNPATH FILE
Full RELRO Canary found NX enabled PIE enabled No RPATH No RUNPATH /sbin/casadm. Full RELRO Canary found NX enabled PIE enabled No RPATH No RUNPATH /sbin/casadm.
""" """
with TestRun.step("Prepare checksec script"): with TestRun.step("Prepare checksec script"):
checksec_path = posixpath.join( checksec_path = posixpath.join(
TestRun.usr.working_dir, TestRun.usr.working_dir, "test/functional/test-framework/scripts/checksec.sh"
"test/functional/test-framework/scripts/checksec.sh"
) )
checksec = FsItem(checksec_path) checksec = FsItem(checksec_path)
checksec.chmod(Permissions.x, PermissionsUsers.u, PermissionSign.add) checksec.chmod(Permissions.x, PermissionsUsers.u, PermissionSign.add)
with TestRun.step("Check casadm compilation flags"): with TestRun.step("Check casadm compilation flags"):
casadm_binary = "/sbin/casadm" casadm_binary = "/sbin/casadm"
header_expected = ["RELRO", "STACK CANARY", "NX", "PIE", "RPATH", "RUNPATH", "FILE"] header_expected = [
binary_expected = ["Full RELRO", "Canary found", "NX enabled", "PIE enabled", "No RPATH", "RELRO",
"No RUNPATH", casadm_binary] "STACK CANARY",
"NX",
"PIE",
"RPATH",
"RUNPATH",
"FILE",
]
binary_expected = [
"Full RELRO",
"Canary found",
"NX enabled",
"PIE enabled",
"No RPATH",
"No RUNPATH",
casadm_binary,
]
result_lines = TestRun.executor.run_expect_success( result_lines = TestRun.executor.run_expect_success(
f'{checksec_path} --file {casadm_binary}').stdout.splitlines() f"{checksec_path} --file {casadm_binary}"
).stdout.splitlines()
header_found = False header_found = False
for line in result_lines: for line in result_lines:
if not header_found: if not header_found:
if line.startswith("RELRO"): if line.startswith("RELRO"):
@ -47,17 +64,20 @@ def test_checksec():
header = line header = line
continue continue
# remove formatting from output # remove formatting from output
result = re.sub(r'\x1B\[[0-9;]*m', '', line) result = re.sub(r"\x1B\[[0-9;]*m", "", line)
break break
header = [i.strip() for i in header.split(" ") if i != ''] header = [i.strip() for i in header.split(" ") if i != ""]
if header != header_expected: if header != header_expected:
TestRun.LOGGER.error( TestRun.LOGGER.error(
'Incorrect header detected!\n' "Incorrect header detected!\n"
f'Expected: {" ".join(header_expected)},\n' f"Expected: {' '.join(header_expected)},\n"
f'Actual: {" ".join(header)}') f"Actual: {' '.join(header)}"
result = [i.strip() for i in result.split(" ") if i != ''] )
result = [i.strip() for i in result.split(" ") if i != ""]
if result != binary_expected: if result != binary_expected:
TestRun.LOGGER.error( TestRun.LOGGER.error(
'Incorrect compilation flags!\n' "Incorrect compilation flags!\n"
f'Expected: {" ".join(binary_expected)},\n' f"Expected: {' '.join(binary_expected)},\n"
f'Actual: {" ".join(result)}') f"Actual: {' '.join(result)}"
)