blob: 46c73aef881666c2ee1ff9ff5dd1a55bb8244880 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
|
#!/bin/sh
# $FreeBSD$
. $(atf_get_srcdir)/conf.sh
atf_test_case delkey cleanup
delkey_head()
{
atf_set "descr" "geli delkey can destroy the master key"
atf_set "require.user" "root"
}
delkey_body()
{
geli_test_setup
sectors=100
md=$(attach_md -t malloc -s `expr $sectors + 1`)
atf_check dd if=/dev/random of=keyfile1 bs=512 count=16 status=none
atf_check dd if=/dev/random of=keyfile2 bs=512 count=16 status=none
atf_check dd if=/dev/random of=keyfile3 bs=512 count=16 status=none
atf_check dd if=/dev/random of=keyfile4 bs=512 count=16 status=none
atf_check geli init -B none -P -K keyfile1 ${md}
atf_check geli attach -p -k keyfile1 ${md}
atf_check -s exit:0 -o ignore geli setkey -n 1 -P -K keyfile2 ${md}
# Remove key 0 for attached provider.
atf_check geli delkey -n 0 ${md}
atf_check geli detach ${md}
# We cannot use keyfile1 anymore.
atf_check -s not-exit:0 -e match:"Wrong key" \
geli attach -p -k keyfile1 ${md}
# Attach with key 1.
atf_check geli attach -p -k keyfile2 ${md}
# We cannot remove last key without -f option (for attached provider).
atf_check -s not-exit:0 -e match:"This is the last Master Key" \
geli delkey -n 1 ${md}
# Remove last key for attached provider.
atf_check geli delkey -f -n 1 ${md}
# If there are no valid keys, but provider is attached, we can save situation.
atf_check -s exit:0 -o ignore geli setkey -n 0 -P -K keyfile3 ${md}
atf_check geli detach ${md}
# We cannot use keyfile2 anymore.
atf_check -s not-exit:0 -e match:"Wrong key" \
geli attach -p -k keyfile2 ${md}
# Attach with key 0.
atf_check geli attach -p -k keyfile3 ${md}
# Setup key 1.
atf_check -s exit:0 -o ignore geli setkey -n 1 -P -K keyfile4 ${md}
atf_check geli detach ${md}
# Remove key 1 for detached provider.
atf_check geli delkey -n 1 ${md}
# We cannot use keyfile4 anymore.
atf_check -s not-exit:0 -e match:"Wrong key" \
geli attach -p -k keyfile4 ${md}
# We cannot remove last key without -f option (for detached provider).
atf_check -s not-exit:0 -e match:"This is the last Master Key" \
geli delkey -n 0 ${md}
# Remove last key for detached provider.
atf_check geli delkey -f -n 0 ${md}
# We cannot use keyfile3 anymore.
atf_check -s not-exit:0 -e match:"No valid keys" \
geli attach -p -k keyfile3 ${md}
}
delkey_cleanup()
{
geli_test_cleanup
}
atf_test_case delkey_readonly cleanup
delkey_readonly_head()
{
atf_set "descr" "geli delkey cannot work on a read-only provider"
atf_set "require.user" "root"
}
delkey_readonly_body()
{
geli_test_setup
sectors=100
md=$(attach_md -t malloc -s `expr $sectors + 1`)
atf_check dd if=/dev/random of=keyfile bs=512 count=16 status=none
atf_check geli init -B none -P -K keyfile ${md}
atf_check geli attach -r -p -k keyfile ${md}
atf_check -s not-exit:0 -e match:"read-only" geli delkey -n 0 ${md}
# Even with -f (force) it should still fail
atf_check -s not-exit:0 -e match:"read-only" geli delkey -f -n 0 ${md}
}
delkey_readonly_cleanup()
{
geli_test_cleanup
}
atf_init_test_cases()
{
atf_add_test_case delkey
atf_add_test_case delkey_readonly
}
|
