Training courses

Kernel and Embedded Linux

Bootlin training courses

Embedded Linux, kernel,
Yocto Project, Buildroot, real-time,
graphics, boot time, debugging...

Bootlin logo

Elixir Cross Referencer

Open Menu /tests/sys/geom/class/eli/delkey_test.sh 
  1
  2
  3
  4
  5
  6
  7
  8
  9
 10
 11
 12
 13
 14
 15
 16
 17
 18
 19
 20
 21
 22
 23
 24
 25
 26
 27
 28
 29
 30
 31
 32
 33
 34
 35
 36
 37
 38
 39
 40
 41
 42
 43
 44
 45
 46
 47
 48
 49
 50
 51
 52
 53
 54
 55
 56
 57
 58
 59
 60
 61
 62
 63
 64
 65
 66
 67
 68
 69
 70
 71
 72
 73
 74
 75
 76
 77
 78
 79
 80
 81
 82
 83
 84
 85
 86
 87
 88
 89
 90
 91
 92
 93
 94
 95
 96
 97
 98
 99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
#!/bin/sh
# $FreeBSD$

. $(atf_get_srcdir)/conf.sh

atf_test_case delkey cleanup
delkey_head()
{
	atf_set "descr" "geli delkey can destroy the master key"
	atf_set "require.user" "root"
}
delkey_body()
{
	geli_test_setup

	sectors=100
	md=$(attach_md -t malloc -s `expr $sectors + 1`)

	atf_check dd if=/dev/random of=keyfile1 bs=512 count=16 status=none
	atf_check dd if=/dev/random of=keyfile2 bs=512 count=16 status=none
	atf_check dd if=/dev/random of=keyfile3 bs=512 count=16 status=none
	atf_check dd if=/dev/random of=keyfile4 bs=512 count=16 status=none

	atf_check geli init -B none -P -K keyfile1 ${md}
	atf_check geli attach -p -k keyfile1 ${md}
	atf_check -s exit:0 -o ignore geli setkey -n 1 -P -K keyfile2 ${md}

	# Remove key 0 for attached provider.
	atf_check geli delkey -n 0 ${md}
	atf_check geli detach ${md}

	# We cannot use keyfile1 anymore.
	atf_check -s not-exit:0 -e match:"Wrong key" \
		geli attach -p -k keyfile1 ${md}

	# Attach with key 1.
	atf_check geli attach -p -k keyfile2 ${md}

	# We cannot remove last key without -f option (for attached provider).
	atf_check -s not-exit:0 -e match:"This is the last Master Key" \
		geli delkey -n 1 ${md}

	# Remove last key for attached provider.
	atf_check geli delkey -f -n 1 ${md}

	# If there are no valid keys, but provider is attached, we can save situation.
	atf_check -s exit:0 -o ignore geli setkey -n 0 -P -K keyfile3 ${md}
	atf_check geli detach ${md}

	# We cannot use keyfile2 anymore.
	atf_check -s not-exit:0 -e match:"Wrong key" \
		geli attach -p -k keyfile2 ${md}

	# Attach with key 0.
	atf_check geli attach -p -k keyfile3 ${md}

	# Setup key 1.
	atf_check -s exit:0 -o ignore geli setkey -n 1 -P -K keyfile4 ${md}
	atf_check geli detach ${md}

	# Remove key 1 for detached provider.
	atf_check geli delkey -n 1 ${md}

	# We cannot use keyfile4 anymore.
	atf_check -s not-exit:0 -e match:"Wrong key" \
		geli attach -p -k keyfile4 ${md}

	# We cannot remove last key without -f option (for detached provider).
	atf_check -s not-exit:0 -e match:"This is the last Master Key" \
		geli delkey -n 0 ${md}

	# Remove last key for detached provider.
	atf_check geli delkey -f -n 0 ${md}

	# We cannot use keyfile3 anymore.
	atf_check -s not-exit:0 -e match:"No valid keys" \
		geli attach -p -k keyfile3 ${md}
}
delkey_cleanup()
{
	geli_test_cleanup
}

atf_test_case delkey_readonly cleanup
delkey_readonly_head()
{
	atf_set "descr" "geli delkey cannot work on a read-only provider"
	atf_set "require.user" "root"
}
delkey_readonly_body()
{
	geli_test_setup

	sectors=100
	md=$(attach_md -t malloc -s `expr $sectors + 1`)
	atf_check dd if=/dev/random of=keyfile bs=512 count=16 status=none

	atf_check geli init -B none -P -K keyfile ${md}
	atf_check geli attach -r -p -k keyfile ${md}

	atf_check -s not-exit:0 -e match:"read-only" geli delkey -n 0 ${md}
	# Even with -f (force) it should still fail
	atf_check -s not-exit:0 -e match:"read-only" geli delkey -f -n 0 ${md}
}
delkey_readonly_cleanup()
{
	geli_test_cleanup
}

atf_init_test_cases()
{
	atf_add_test_case delkey
	atf_add_test_case delkey_readonly
}