mirrors/nixpkgs
1
0
Fork 1
mirror of https://github.com/NixOS/nixpkgs.git synced 2024-11-18 03:30:45 +00:00
Code Issues Wiki Activity
nixpkgs/nixos/tests/user-home-mode.nix

Ignoring revisions in .git-blame-ignore-revs. Click here to bypass and see the normal blame view.

36 lines
1 KiB
Nix
Raw Normal View History

nixos/users-group: Add 'homeMode' option.
2022-04-10 20:06:19 +01:00
import ./make-test-python.nix ({ lib, ... }: {
name = "user-home-mode";
meta = with lib.maintainers; { maintainers = [ fbeffa ]; };
nodes.machine = {
users.users.alice = {
initialPassword = "pass1";
isNormalUser = true;
};
users.users.bob = {
initialPassword = "pass2";
isNormalUser = true;
homeMode = "750";
};
nixos: Set home directory parent tree permissions to 0755 When the user's home directory is created using `createHome` e.g. ``` users.users.alice = { home = "/users/alice"; createHome = true; }; ``` The `/users` directory was created with the same permissions as `/users/alice`, `0700` by default. The parent directory `/users` permissions results in `createHome` creating a home directory that is inaccessible to the user: ``` $ su alice $ cd /user/alice cd: permission denied: /users/alice ``` The underlying cause is `make_path($u->{home}, { mode => oct($u->{homeMode}) })` which sets, in the example above`, `/users` to `0700`. Instead it should be `0755` like other system directories `/var`, `/dev`, etc.
2024-07-09 22:09:09 +01:00
users.users.carol = {
initialPassword = "pass3";
isNormalUser = true;
createHome = true;
home = "/users/carol";
};
nixos/users-group: Add 'homeMode' option.
2022-04-10 20:06:19 +01:00
};
testScript = ''
machine.wait_for_unit("multi-user.target")
machine.wait_for_unit("getty@tty1.service")
nixos/tests: fix all tests that uses wait_until_tty_matches
2022-06-04 05:22:03 +01:00
machine.wait_until_tty_matches("1", "login: ")
nixos/users-group: Add 'homeMode' option.
2022-04-10 20:06:19 +01:00
machine.send_chars("alice\n")
nixos/tests: fix all tests that uses wait_until_tty_matches
2022-06-04 05:22:03 +01:00
machine.wait_until_tty_matches("1", "Password: ")
nixos/users-group: Add 'homeMode' option.
2022-04-10 20:06:19 +01:00
machine.send_chars("pass1\n")
machine.succeed('[ "$(stat -c %a /home/alice)" == "700" ]')
machine.succeed('[ "$(stat -c %a /home/bob)" == "750" ]')
nixos: Set home directory parent tree permissions to 0755 When the user's home directory is created using `createHome` e.g. ``` users.users.alice = { home = "/users/alice"; createHome = true; }; ``` The `/users` directory was created with the same permissions as `/users/alice`, `0700` by default. The parent directory `/users` permissions results in `createHome` creating a home directory that is inaccessible to the user: ``` $ su alice $ cd /user/alice cd: permission denied: /users/alice ``` The underlying cause is `make_path($u->{home}, { mode => oct($u->{homeMode}) })` which sets, in the example above`, `/users` to `0700`. Instead it should be `0755` like other system directories `/var`, `/dev`, etc.
2024-07-09 22:09:09 +01:00
machine.succeed('[ "$(stat -c %a /users)" == "755" ]')
machine.succeed('[ "$(stat -c %a /users/carol)" == "700" ]')
nixos/users-group: Add 'homeMode' option.
2022-04-10 20:06:19 +01:00
'';
})
Copy permalink