mirror of
https://github.com/kuhyx/testsAndMisc.git
synced 2026-11-12 22:10:53 +01:00
Krzysztof kuhy Rudnicki
2d4331c703
The suite reported four failures on this host and none of them meant protection was missing. Tests 2, 3 and 5 checked hosts-guard.path, hosts-bind-mount.service and nsswitch-guard.path. The 2026-07-17 guard-lib refactor replaced those with templated units — guard-file@hosts.path, guard-bind-mount@hosts.service, guard-file@nsswitch.path — which are all active. That is also why the legacy units stop a second after boot: they are superseded, and the old nsswitch guard retriggered itself into systemd's start limit fighting the new watcher. Each check now accepts either generation, and the bind-mount check also accepts the read-only mount on /etc/hosts, which is the real invariant. Test 10 now treats a *disabled* shutdown-schedule-guard as intended rather than broken: the poweroff flow it protected was replaced by night-lockdown-enter.sh. An enabled-but-inactive unit still fails. That check also had a shell bug — `systemctl is-enabled` prints the state and exits non-zero when disabled, so `|| echo disabled` appended a second line and never matched. Verified protection is genuinely intact rather than assuming it: /etc/hosts is mounted ro,noatime and both it and /etc/nsswitch.conf carry the immutable flag. Host now reports 18/0/6. A container with faked host markers still reports 10 failures, so the suite has not been softened into always-green. No system state was changed. |
||
|---|---|---|
| .. | ||
| __init__.py | ||
| conftest.py | ||
| test_android_guardian_post_fs_data.sh | ||
| test_android_guardian_service.sh | ||
| test_fast_count.py | ||
| test_hosts_file_monitor.sh | ||
| test_hosts_guard_pacman_integration.sh | ||
| test_i3blocks_efficiency.sh | ||
| test_i3blocks_persist_common.sh | ||
| test_makepkg_capped.sh | ||
| test_makepkg_wrapper.sh | ||
| test_monitor_report.py | ||
| test_music_parallelism.sh | ||
| test_network_diagnostics.bats | ||
| test_pacman_wrapper_security.sh | ||
| test_security_hardening.sh | ||
| test_setup_dns_blocker.sh | ||
| test_shutdown_timer_monitor.sh | ||
| test_strip_workout_hosts.py | ||
| test_usage_monitoring_installer_efficiency.sh | ||
| test_usage_report_pmon_names.py | ||
| test_usage_report_since.py | ||
| test_validate_contract.py | ||
| test_validate_evidence.py | ||