1 files changed, 66 insertions, 0 deletions
diff --git a/tests/sys/geom/class/eli/setkey_test.sh b/tests/sys/geom/class/eli/setkey_test.sh
index 7829f41f1efd..bd5e2dcedd8e 100644
--- a/tests/sys/geom/class/eli/setkey_test.sh
+++ b/tests/sys/geom/class/eli/setkey_test.sh
@@ -92,7 +92,73 @@ setkey_cleanup()
 	geli_test_cleanup
 }
 
+atf_test_case setkey_readonly cleanup
+setkey_readonly_head()
+{
+	atf_set "descr" "geli setkey cannot change the keys of a readonly provider"
+	atf_set "require.user" "root"
+}
+setkey_readonly_body()
+{
+	. $(atf_get_srcdir)/conf.sh
+
+	sectors=100
+	md=$(attach_md -t malloc -s `expr $sectors + 1`)
+	atf_check dd if=/dev/random of=keyfile bs=512 count=16 status=none
+
+	atf_check geli init -B none -P -K keyfile ${md}
+	atf_check geli attach -r -p -k keyfile ${md}
+
+	atf_check -s not-exit:0 -e match:"read-only" \
+		geli setkey -n 1 -P -K /dev/null ${md}
+}
+setkey_readonly_cleanup()
+{
+	. $(atf_get_srcdir)/conf.sh
+	geli_test_cleanup
+}
+
+atf_test_case nokey cleanup
+nokey_head()
+{
+	atf_set "descr" "geli setkey can change the key for an existing provider"
+	atf_set "require.user" "root"
+}
+nokey_body()
+{
+	. $(atf_get_srcdir)/conf.sh
+
+	sectors=100
+	md=$(attach_md -t malloc -s `expr $sectors + 1`)
+	atf_check dd if=/dev/random of=keyfile1 bs=512 count=16 status=none
+	atf_check dd if=/dev/random of=keyfile2 bs=512 count=16 status=none
+
+	atf_check geli init -B none -P -K keyfile1 ${md}
+
+	# Try to set the key for a detached device without providing any
+	# components for the old key.
+	atf_check -s not-exit:0 -e match:"No key components given" \
+		geli setkey -n 0 -p -P -K keyfile2 ${md}
+
+	# Try to set the key for a detached device without providing any
+	# components for the new key
+	atf_check -s not-exit:0 -e match:"No key components given" \
+		geli setkey -n 0 -p -k keyfile1 -P ${md}
+
+	# Try to set a new key for an attached device with no components
+	atf_check geli attach -p -k keyfile1 ${md}
+	atf_check -s not-exit:0 -e match:"No key components given" \
+		geli setkey -n 0 -P ${md}
+}
+nokey_cleanup()
+{
+	. $(atf_get_srcdir)/conf.sh
+	geli_test_cleanup
+}
+
 atf_init_test_cases()
 {
 	atf_add_test_case setkey
+	atf_add_test_case setkey_readonly
+	atf_add_test_case nokey
 }