summaryrefslogtreecommitdiffstats
path: root/cucumber/features/step_definitions/mac_spoofing.rb
diff options
context:
space:
mode:
authorHolger Levsen <holger@layer-acht.org>2017-10-04 13:16:52 +0200
committerHolger Levsen <holger@layer-acht.org>2017-10-04 13:16:52 +0200
commit4d8dfa12768c22f137c236b6e47352afb869a4c8 (patch)
tree1134341bf7a7db322a1da1e24b0e4d6018129a40 /cucumber/features/step_definitions/mac_spoofing.rb
parent213675aa5197309d93331f465297cfd53e0b01f3 (diff)
downloadjenkins.debian.net-4d8dfa12768c22f137c236b6e47352afb869a4c8.tar.xz
drop lvc stuff, now that openqa.debian.net is getting into shape
Signed-off-by: Holger Levsen <holger@layer-acht.org>
Diffstat (limited to 'cucumber/features/step_definitions/mac_spoofing.rb')
-rw-r--r--cucumber/features/step_definitions/mac_spoofing.rb119
1 files changed, 0 insertions, 119 deletions
diff --git a/cucumber/features/step_definitions/mac_spoofing.rb b/cucumber/features/step_definitions/mac_spoofing.rb
deleted file mode 100644
index 260b28fd..00000000
--- a/cucumber/features/step_definitions/mac_spoofing.rb
+++ /dev/null
@@ -1,119 +0,0 @@
-def all_ethernet_nics
- $vm.execute_successfully(
- "get_all_ethernet_nics", :libs => 'hardware'
- ).stdout.split
-end
-
-When /^I disable MAC spoofing in Tails Greeter$/ do
- open_greeter_additional_settings()
- @screen.wait_and_click("TailsGreeterMACSpoofing.png", 30)
- @screen.wait_and_click("TailsGreeterDisableMACSpoofing.png", 10)
- @screen.wait_and_click("TailsGreeterAdditionalSettingsAdd.png", 10)
-end
-
-Then /^the (\d+)(?:st|nd|rd|th) network device has (its real|a spoofed) MAC address configured$/ do |dev_nr, mode|
- is_spoofed = (mode == "a spoofed")
- alias_name = "net#{dev_nr.to_i - 1}"
- nic_real_mac = $vm.real_mac(alias_name)
- nic = "eth#{dev_nr.to_i - 1}"
- nic_current_mac = $vm.execute_successfully(
- "get_current_mac_of_nic #{nic}", :libs => 'hardware'
- ).stdout.chomp
- begin
- if is_spoofed
- if nic_real_mac == nic_current_mac
- raise "The MAC address was expected to be spoofed but wasn't"
- end
- else
- if nic_real_mac != nic_current_mac
- raise "The MAC address is spoofed but was expected to not be"
- end
- end
- rescue Exception => e
- save_failure_artifact("Network capture", @sniffer.pcap_file)
- raise e
- end
-end
-
-Then /^no network device leaked the real MAC address$/ do
- macs = $vm.all_real_macs
- assert_all_connections(@sniffer.pcap_file) do |c|
- macs.all? do |mac|
- not [c.mac_saddr, c.mac_daddr].include?(mac)
- end
- end
-end
-
-Then /^some network device leaked the real MAC address$/ do
- assert_raise(FirewallAssertionFailedError) do
- step 'no network device leaked the real MAC address'
- end
-end
-
-Given /^macchanger will fail by not spoofing and always returns ([\S]+)$/ do |mode|
- $vm.execute_successfully("mv /usr/bin/macchanger /usr/bin/macchanger.orig")
- $vm.execute_successfully("ln -s /bin/#{mode} /usr/bin/macchanger")
-end
-
-Given /^no network interface modules can be unloaded$/ do
- # Note that the real /sbin/modprobe is a symlink to /bin/kmod, and
- # for it to run in modprobe compatibility mode the name must be
- # exactly "modprobe", so we just move it somewhere our of the path
- # instead of renaming it ".real" or whatever we usuablly do when
- # diverting executables for wrappers.
- modprobe_divert = "/usr/local/lib/modprobe"
- $vm.execute_successfully(
- "dpkg-divert --add --rename --divert '#{modprobe_divert}' /sbin/modprobe"
- )
- fake_modprobe_wrapper = <<EOF
-#!/bin/sh
-if echo "${@}" | grep -q -- -r; then
- exit 1
-fi
-exec '#{modprobe_divert}' "${@}"
-EOF
- $vm.file_append('/sbin/modprobe', fake_modprobe_wrapper)
- $vm.execute_successfully("chmod a+rx /sbin/modprobe")
-end
-
-Then /^(\d+|no) network interface(?:s)? (?:is|are) enabled$/ do |expected_nr_nics|
- # note that "no".to_i => 0 in Ruby.
- expected_nr_nics = expected_nr_nics.to_i
- nr_nics = all_ethernet_nics.size
- assert_equal(expected_nr_nics, nr_nics)
-end
-
-Then /^the MAC spoofing panic mode disabled networking$/ do
- nm_state = $vm.execute_successfully('systemctl show NetworkManager').stdout
- nm_is_disabled = $vm.pidof('NetworkManager').empty? &&
- nm_state[/^LoadState=masked$/] &&
- nm_state[/^ActiveState=inactive$/]
- assert(nm_is_disabled, "NetworkManager was not disabled")
- all_ethernet_nics.each do |nic|
- ["nic_ipv4_addr", "nic_ipv6_addr"].each do |function|
- addr = $vm.execute_successfully(
- "#{function} #{nic}", :libs => 'hardware'
- ).stdout.chomp
- assert_equal("", addr, "NIC #{nic} was assigned address #{addr}")
- end
- end
-end
-
-When /^I hotplug a network device( and wait for it to be initialized)?$/ do |wait|
- initial_nr_nics = wait ? all_ethernet_nics.size : nil
- xml = <<-EOF
- <interface type='network'>
- <alias name='net1'/>
- <mac address='52:54:00:11:22:33'/>
- <source network='TailsToasterNet'/>
- <model type='virtio'/>
- <link state='up'/>
- </interface>
- EOF
- $vm.plug_device(xml)
- if wait
- try_for(20) do
- all_ethernet_nics.size >= initial_nr_nics + 1
- end
- end
-end