Restrict access to doas.conf

This commit is contained in:
heat-wave 2021-04-07 19:56:19 +01:00 committed by Denis Roio
parent 24a89b680d
commit 087ecd25a2
3 changed files with 19 additions and 18 deletions

View File

@ -15,17 +15,17 @@ test_expect_success 'Testing tomb creation: dig, forge and lock' '
tt_lock --tomb-pwd $DUMMYPASS tt_lock --tomb-pwd $DUMMYPASS
' '
# if test_have_prereq SPHINX ORACLE; then if test_have_prereq SPHINX ORACLE; then
# test_export "sphinx_test" test_export "sphinx_test"
# test_expect_success 'Testing tomb creation: dig, forge and lock (sphinx password handling)' ' test_expect_success 'Testing tomb creation: dig, forge and lock (sphinx password handling)' '
# tt_dig -s 20 && tt_dig -s 20 &&
# tt_forge --tomb-pwd $DUMMYPASS --sphx-user $DUMMYUSER --sphx-host $DUMMYHOST && tt_forge --tomb-pwd $DUMMYPASS --sphx-user $DUMMYUSER --sphx-host $DUMMYHOST &&
# print $(echo $DUMMYPASS | sphinx get $DUMMYUSER $DUMMYHOST) \ print $(echo $DUMMYPASS | sphinx get $DUMMYUSER $DUMMYHOST) \
# | gpg --batch --passphrase-fd 0 --no-tty --no-options -d $tomb_key \ | gpg --batch --passphrase-fd 0 --no-tty --no-options -d $tomb_key \
# | hexdump -C && | hexdump -C &&
# tt_lock --tomb-pwd $DUMMYPASS --sphx-user $DUMMYUSER --sphx-host $DUMMYHOST tt_lock --tomb-pwd $DUMMYPASS --sphx-user $DUMMYUSER --sphx-host $DUMMYHOST
# ' '
# fi fi
if test_have_prereq DOAS; then if test_have_prereq DOAS; then
test_export "doas_test" test_export "doas_test"

View File

@ -44,13 +44,13 @@ if test_have_prereq LSOF; then
' '
fi fi
# if test_have_prereq SPHINX ORACLE; then if test_have_prereq SPHINX ORACLE; then
# test_export "sphinx_test" # Using already generated tomb test_export "sphinx_test" # Using already generated tomb
# test_expect_success 'Testing open with good password (sphinx)' ' test_expect_success 'Testing open with good password (sphinx)' '
# tt_open --tomb-pwd $DUMMYPASS --sphx-user $DUMMYUSER --sphx-host $DUMMYHOST && tt_open --tomb-pwd $DUMMYPASS --sphx-user $DUMMYUSER --sphx-host $DUMMYHOST &&
# tt_close tt_close
# ' '
# fi fi
if test_have_prereq DOAS; then if test_have_prereq DOAS; then
test_export "doas_test" # Using already generated tomb test_export "doas_test" # Using already generated tomb

View File

@ -12,6 +12,7 @@ WORKDIR /Tomb/extras
RUN ./install_sphinx.sh RUN ./install_sphinx.sh
COPY extras/test/doas.conf /etc/doas.conf COPY extras/test/doas.conf /etc/doas.conf
RUN chmod 400 /etc/doas.conf
WORKDIR /Tomb WORKDIR /Tomb
RUN make --directory=extras/kdf-keys RUN make --directory=extras/kdf-keys