2021-05-05 11:36:57 +00:00
|
|
|
import os
|
2021-06-28 21:05:40 +00:00
|
|
|
from pathlib import Path
|
2021-05-05 11:36:57 +00:00
|
|
|
|
|
|
|
import pytest
|
|
|
|
from unit.applications.proto import TestApplicationProto
|
|
|
|
|
2023-06-12 13:16:59 +00:00
|
|
|
prerequisites = {'features': {'chroot': True}}
|
2021-05-05 11:36:57 +00:00
|
|
|
|
|
|
|
|
2023-06-12 13:16:59 +00:00
|
|
|
class TestStaticSymlink(TestApplicationProto):
|
2021-05-05 11:36:57 +00:00
|
|
|
@pytest.fixture(autouse=True)
|
|
|
|
def setup_method_fixture(self, temp_dir):
|
2023-02-21 17:21:29 +00:00
|
|
|
os.makedirs(f'{temp_dir}/assets/dir/dir')
|
|
|
|
Path(f'{temp_dir}/assets/index.html').write_text('0123456789')
|
|
|
|
Path(f'{temp_dir}/assets/dir/file').write_text('blah')
|
2021-05-05 11:36:57 +00:00
|
|
|
|
|
|
|
self._load_conf(
|
|
|
|
{
|
|
|
|
"listeners": {"*:7080": {"pass": "routes"}},
|
2023-02-21 17:21:29 +00:00
|
|
|
"routes": [{"action": {"share": f'{temp_dir}/assets$uri'}}],
|
2021-05-05 11:36:57 +00:00
|
|
|
}
|
|
|
|
)
|
|
|
|
|
2021-06-28 21:05:40 +00:00
|
|
|
def test_static_symlink(self, temp_dir, skip_alert):
|
2021-05-05 11:36:57 +00:00
|
|
|
skip_alert(r'opening.*failed')
|
|
|
|
|
2023-02-21 17:21:29 +00:00
|
|
|
os.symlink(f'{temp_dir}/assets/dir', f'{temp_dir}/assets/link')
|
2021-05-05 11:36:57 +00:00
|
|
|
|
|
|
|
assert self.get(url='/dir')['status'] == 301, 'dir'
|
|
|
|
assert self.get(url='/dir/file')['status'] == 200, 'file'
|
|
|
|
assert self.get(url='/link')['status'] == 301, 'symlink dir'
|
|
|
|
assert self.get(url='/link/file')['status'] == 200, 'symlink file'
|
|
|
|
|
|
|
|
assert 'success' in self.conf(
|
2023-02-21 17:21:29 +00:00
|
|
|
{"share": f'{temp_dir}/assets$uri', "follow_symlinks": False},
|
2021-05-05 11:36:57 +00:00
|
|
|
'routes/0/action',
|
|
|
|
), 'configure symlink disable'
|
|
|
|
|
|
|
|
assert self.get(url='/link/file')['status'] == 403, 'symlink disabled'
|
|
|
|
|
|
|
|
assert 'success' in self.conf(
|
2023-02-21 17:21:29 +00:00
|
|
|
{"share": f'{temp_dir}/assets$uri', "follow_symlinks": True},
|
2021-05-05 11:36:57 +00:00
|
|
|
'routes/0/action',
|
|
|
|
), 'configure symlink enable'
|
|
|
|
|
|
|
|
assert self.get(url='/link/file')['status'] == 200, 'symlink enabled'
|
|
|
|
|
2021-06-28 21:05:40 +00:00
|
|
|
def test_static_symlink_two_blocks(self, temp_dir, skip_alert):
|
2021-05-05 11:36:57 +00:00
|
|
|
skip_alert(r'opening.*failed')
|
|
|
|
|
2023-02-21 17:21:29 +00:00
|
|
|
os.symlink(f'{temp_dir}/assets/dir', f'{temp_dir}/assets/link')
|
2021-05-05 11:36:57 +00:00
|
|
|
|
|
|
|
assert 'success' in self.conf(
|
|
|
|
[
|
|
|
|
{
|
|
|
|
"match": {"method": "HEAD"},
|
|
|
|
"action": {
|
2023-02-21 17:21:29 +00:00
|
|
|
"share": f'{temp_dir}/assets$uri',
|
2021-05-05 11:36:57 +00:00
|
|
|
"follow_symlinks": False,
|
|
|
|
},
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"match": {"method": "GET"},
|
|
|
|
"action": {
|
2023-02-21 17:21:29 +00:00
|
|
|
"share": f'{temp_dir}/assets$uri',
|
2021-05-05 11:36:57 +00:00
|
|
|
"follow_symlinks": True,
|
|
|
|
},
|
|
|
|
},
|
|
|
|
],
|
|
|
|
'routes',
|
|
|
|
), 'configure two options'
|
|
|
|
|
|
|
|
assert self.get(url='/link/file')['status'] == 200, 'block enabled'
|
|
|
|
assert self.head(url='/link/file')['status'] == 403, 'block disabled'
|
|
|
|
|
2021-06-28 21:05:40 +00:00
|
|
|
def test_static_symlink_chroot(self, temp_dir, skip_alert):
|
2021-05-05 11:36:57 +00:00
|
|
|
skip_alert(r'opening.*failed')
|
|
|
|
|
|
|
|
os.symlink(
|
2023-02-21 17:21:29 +00:00
|
|
|
f'{temp_dir}/assets/dir/file', f'{temp_dir}/assets/dir/dir/link'
|
2021-05-05 11:36:57 +00:00
|
|
|
)
|
|
|
|
|
|
|
|
assert self.get(url='/dir/dir/link')['status'] == 200, 'default chroot'
|
|
|
|
|
|
|
|
assert 'success' in self.conf(
|
|
|
|
{
|
2023-02-21 17:21:29 +00:00
|
|
|
"share": f'{temp_dir}/assets$uri',
|
|
|
|
"chroot": f'{temp_dir}/assets/dir/dir',
|
2021-05-05 11:36:57 +00:00
|
|
|
},
|
|
|
|
'routes/0/action',
|
|
|
|
), 'configure chroot'
|
|
|
|
|
|
|
|
assert self.get(url='/dir/dir/link')['status'] == 404, 'chroot'
|