1# Copyright (c) 2011 The Chromium OS Authors. All rights reserved. 2# Use of this source code is governed by a BSD-style license that can be 3# found in the LICENSE file. 4 5import logging, os, tempfile 6from dbus.mainloop.glib import DBusGMainLoop 7 8from autotest_lib.client.bin import test, utils 9from autotest_lib.client.common_lib import autotemp, error 10from autotest_lib.client.common_lib.cros import policy, session_manager 11from autotest_lib.client.cros import cros_ui, cryptohome, ownership 12 13 14class login_OwnershipApi(test.test): 15 """Tests to ensure that the Ownership API works for a local device owner. 16 """ 17 version = 1 18 19 _tempdir = None 20 21 def setup(self): 22 os.chdir(self.srcdir) 23 utils.make('OUT_DIR=.') 24 25 26 def initialize(self): 27 super(login_OwnershipApi, self).initialize() 28 self._bus_loop = DBusGMainLoop(set_as_default=True) 29 30 # Clear existing ownership and inject known keys. 31 cros_ui.stop() 32 ownership.clear_ownership_files_no_restart() 33 34 # Make device already owned by ownership.TESTUSER. 35 cryptohome.mount_vault(ownership.TESTUSER, 36 ownership.TESTPASS, 37 create=True) 38 ownership.use_known_ownerkeys(ownership.TESTUSER) 39 40 self._tempdir = autotemp.tempdir(unique_id=self.__class__.__name__) 41 cros_ui.start() 42 43 44 def __generate_temp_filename(self, dir): 45 """Generate a guaranteed-unique filename in dir.""" 46 just_for_name = tempfile.NamedTemporaryFile(dir=dir, delete=True) 47 basename = just_for_name.name 48 just_for_name.close() # deletes file. 49 return basename 50 51 52 def run_once(self): 53 pkey = ownership.known_privkey() 54 pubkey = ownership.known_pubkey() 55 sm = session_manager.connect(self._bus_loop) 56 sm.StartSession(ownership.TESTUSER, '') 57 58 poldata = policy.build_policy_data(self.srcdir, 59 owner=ownership.TESTUSER, 60 guests=False, 61 new_users=True, 62 roaming=True, 63 whitelist=(ownership.TESTUSER, 64 'a@b.c')) 65 66 policy_string = policy.generate_policy(self.srcdir, 67 pkey, 68 pubkey, 69 poldata) 70 policy.push_policy_and_verify(policy_string, sm) 71 retrieved_policy = policy.get_policy(sm) 72 if retrieved_policy is None: raise error.TestFail('Policy not found') 73 policy.compare_policy_response(self.srcdir, 74 retrieved_policy, 75 owner=ownership.TESTUSER, 76 guests=False, 77 new_users=True, 78 roaming=True, 79 whitelist=(ownership.TESTUSER, 'a@b.c')) 80 try: 81 # Sanity check against an incorrect policy 82 policy.compare_policy_response(self.srcdir, 83 retrieved_policy, 84 owner=ownership.TESTUSER, 85 guests=True, 86 whitelist=(ownership.TESTUSER, 87 'a@b.c')) 88 except ownership.OwnershipError: 89 pass 90 else: 91 raise error.TestFail('Did not detect bad policy') 92 93 try: 94 sm.StopSession('') 95 except error.TestError as e: 96 logging.error(str(e)) 97 raise error.TestFail('Could not stop session for owner') 98 99 100 def cleanup(self): 101 if self._tempdir: self._tempdir.clean() 102 # Best effort to bounce the UI, which may be up or down. 103 cros_ui.stop(allow_fail=True) 104 cryptohome.unmount_vault(ownership.TESTUSER) 105 cryptohome.remove_vault(ownership.TESTUSER) 106 cros_ui.start(allow_fail=True, wait_for_login_prompt=False) 107 super(login_OwnershipApi, self).cleanup() 108