Add integration tests and refresh golden files

ubuntu · Feb 6, 2024 · 89d54ad · 89d54ad
1 parent 1b06084
commit 89d54ad
Show file tree

Hide file tree

Showing 170 changed files with 408 additions and 6 deletions.
diff --git a/cmd/adsysd/integration_tests/adsys_test.go b/cmd/adsysd/integration_tests/adsys_test.go
@@ -196,8 +196,9 @@ client_timeout: %d`, socket, tc.timeout)), 0600)
 type confOption func(*confOptions)
 
 type confOptions struct {
-	adsysDir string
-	backend  string
+	adsysDir           string
+	backend            string
+	detectCachedTicket bool
 }
 
 func confWithAdsysDir(adsysDir string) confOption {
@@ -212,6 +213,12 @@ func confWithBackend(backend string) confOption {
 	}
 }
 
+func confDetectCachedTicket(detectCachedTicket bool) confOption {
+	return func(o *confOptions) {
+		o.detectCachedTicket = detectCachedTicket
+	}
+}
+
 // createConf generates an adsys configuration in a temporary directory
 // It will use adsysDir for socket, cache and run dir if provided.
 func createConf(t *testing.T, opts ...confOption) (conf string) {
@@ -257,7 +264,9 @@ apparmor_dir: %s/apparmor.d/adsys
 apparmorfs_dir: %s/apparmorfs
 systemunit_dir: %s/systemd/system
 global_trust_dir: %s/share/ca-certificates
-`, args.adsysDir, args.adsysDir, args.adsysDir, args.adsysDir, args.backend, args.adsysDir, args.adsysDir, args.adsysDir, args.adsysDir, args.adsysDir, args.adsysDir, args.adsysDir, args.adsysDir))
+
+detect_cached_ticket: %t
+`, args.adsysDir, args.adsysDir, args.adsysDir, args.adsysDir, args.backend, args.adsysDir, args.adsysDir, args.adsysDir, args.adsysDir, args.adsysDir, args.adsysDir, args.adsysDir, args.adsysDir, args.detectCachedTicket))
 
 	testutils.WriteFile(t, confFile, confData, os.ModePerm)
 	require.NoError(t, os.MkdirAll(filepath.Join(args.adsysDir, "dconf"), 0750), "Setup: should create dconf dir")

diff --git a/cmd/adsysd/integration_tests/adsysctl_policy_test.go b/cmd/adsysd/integration_tests/adsysctl_policy_test.go
@@ -215,8 +215,11 @@ func TestPolicyUpdate(t *testing.T) {
 		addPaths            []string
 		readOnlyDirs        []string
 		winbindMockBehavior string
+		krb5MockBehavior    string
 		purge               bool
 		missingCertmonger   bool
+		noExportKrb5cc      bool
+		detectCachedTicket  bool
 
 		wantErr bool
 	}{
@@ -228,6 +231,33 @@ func TestPolicyUpdate(t *testing.T) {
 			backend:   "winbind",
 			initState: "localhost-uptodate",
 		},
+		"Current user, KRB5CCNAME is not exported but present": {
+			initState:          "localhost-uptodate",
+			noExportKrb5cc:     true,
+			detectCachedTicket: true,
+			krb5MockBehavior:   "return_ccache:%s",
+		},
+		"Current user, libkrb5 not used if KRB5CCNAME is present": {
+			initState:          "localhost-uptodate",
+			detectCachedTicket: true,
+			krb5MockBehavior:   "return_ccache:%s/maybebadvalue",
+		},
+		"Current user, libkrb5 not used if setting not enabled": {
+			initState:        "localhost-uptodate",
+			krb5MockBehavior: "return_ccache:%s/maybebadvalue",
+		},
+		"Current user, librkb5 returns error but symlink is present": {
+			initState:          "localhost-uptodate",
+			detectCachedTicket: true,
+			noExportKrb5cc:     true,
+			krb5MockBehavior:   "return_empty_ccache",
+			krb5ccNamesState: []krb5ccNamesWithState{
+				{
+					src:          currentUser + ".krb5",
+					adsysSymlink: currentUser,
+				},
+			},
+		},
 		"Other user, first time": {
 			args:       []string{"[email protected]", "[email protected]"},
 			initState:  "localhost-uptodate",
@@ -871,6 +901,27 @@ func TestPolicyUpdate(t *testing.T) {
 			},
 			wantErr: true,
 		},
+		// Krb5 library error cases
+		"Error when libkrb5 ccache not present on disk": {
+			initState:          "localhost-uptodate",
+			noExportKrb5cc:     true,
+			detectCachedTicket: true,
+			krb5MockBehavior:   "return_ccache:%s/not_present",
+			wantErr:            true,
+		},
+		"Error when libkrb5 returns null value": {
+			initState:          "localhost-uptodate",
+			noExportKrb5cc:     true,
+			detectCachedTicket: true,
+			krb5MockBehavior:   "return_null_ccache",
+			wantErr:            true,
+		},
+		"Error when cached ticket setting not enabled": {
+			initState:        "localhost-uptodate",
+			noExportKrb5cc:   true,
+			krb5MockBehavior: "return_ccache:%s",
+			wantErr:          true,
+		},
 		// Incompatible options
 		"Error on all and specific user requested": {
 			args:       []string{"--all", "[email protected]", "[email protected]"},
@@ -1078,10 +1129,19 @@ func TestPolicyUpdate(t *testing.T) {
 				} else {
 					tc.krb5ccname = fmt.Sprintf("FILE:%s/%s", krb5dir, tc.krb5ccname)
 				}
-				t.Setenv("KRB5CCNAME", tc.krb5ccname)
+				if !tc.noExportKrb5cc {
+					t.Setenv("KRB5CCNAME", tc.krb5ccname)
+				}
+			}
+
+			if tc.krb5MockBehavior != "" {
+				if strings.Contains(tc.krb5MockBehavior, "return_ccache") {
+					tc.krb5MockBehavior = fmt.Sprintf(tc.krb5MockBehavior, tc.krb5ccname)
+				}
+				t.Setenv("ADSYS_KRB5_BEHAVIOR", tc.krb5MockBehavior)
 			}
 
-			conf := createConf(t, confWithAdsysDir(adsysDir), confWithBackend(tc.backend))
+			conf := createConf(t, confWithAdsysDir(adsysDir), confWithBackend(tc.backend), confDetectCachedTicket(tc.detectCachedTicket))
 			if tc.sssdConf != "" {
 				content, err := os.ReadFile(conf)
 				require.NoError(t, err, "Setup: can’t read configuration file")
@@ -1243,6 +1303,7 @@ func setupSubprocessForTest(t *testing.T, currentUser string, otherUsers ...stri
 	require.NoError(t, err, "libnss-wrapper is not installed on disk, either skip integration tests or install it")
 
 	mockWinbindLibPath := testutils.BuildWinbindMock(t, filepath.Join(rootProjectDir, "internal/ad/backends/winbind"))
+	mockKrb5LibPath := testutils.BuildKrb5Mock(t, filepath.Join(rootProjectDir, "internal/ad"))
 
 	var subArgs []string
 	// We are going to only reexec ourself: only take options (without -run)
@@ -1288,7 +1349,7 @@ func setupSubprocessForTest(t *testing.T, currentUser string, otherUsers ...stri
 		fmt.Sprintf("PYTHONPATH=%s", admock),
 
 		// override user and host database
-		fmt.Sprintf("LD_PRELOAD=libnss_wrapper.so:%s", mockWinbindLibPath),
+		fmt.Sprintf("LD_PRELOAD=libnss_wrapper.so:%s:%s", mockWinbindLibPath, mockKrb5LibPath),
 		fmt.Sprintf("NSS_WRAPPER_PASSWD=%s", passwd),
 		"NSS_WRAPPER_GROUP=/etc/group",
 	)

diff --git a/..._user,_krb5ccname_is_not_exported_but_present/apparmor.d/adsys/machine/nested/usr.bin.baz b/..._user,_krb5ccname_is_not_exported_but_present/apparmor.d/adsys/machine/nested/usr.bin.baz
@@ -0,0 +1 @@
+/usr/bin/baz {}
diff --git a/...current_user,_krb5ccname_is_not_exported_but_present/apparmor.d/adsys/machine/usr.bin.bar b/...current_user,_krb5ccname_is_not_exported_but_present/apparmor.d/adsys/machine/usr.bin.bar
@@ -0,0 +1 @@
+/usr/bin/bar {}
diff --git a/...current_user,_krb5ccname_is_not_exported_but_present/apparmor.d/adsys/machine/usr.bin.foo b/...current_user,_krb5ccname_is_not_exported_but_present/apparmor.d/adsys/machine/usr.bin.foo
@@ -0,0 +1 @@
+/usr/bin/foo {}
diff --git a/...,_krb5ccname_is_not_exported_but_present/apparmor.d/adsys/users/[email protected] b/...,_krb5ccname_is_not_exported_but_present/apparmor.d/adsys/users/[email protected]
@@ -0,0 +1,6 @@
+^[email protected] {
+/etc/environment r,
+@{HOMEDIRS}/.xauth* w,
+/usr/bin/{,b,d,rb}ash Ux,
+/usr/bin/{c,k,tc}sh Ux,
+}
diff --git a/...t_user,_krb5ccname_is_not_exported_but_present/dconf/db/[email protected]/adsys b/...t_user,_krb5ccname_is_not_exported_but_present/dconf/db/[email protected]/adsys
@@ -0,0 +1,5 @@
+[org/gnome/desktop/background]
+picture-options='stretched'
+picture-uri='file:///usr/share/backgrounds/canonical.png'
+[org/gnome/shell]
+favorite-apps=['\'libreoffice-writer.desktop\'', '\'snap-store_ubuntu-software.desktop\'', '\'yelp.desktop']
diff --git a/...,_krb5ccname_is_not_exported_but_present/dconf/db/[email protected]/locks/adsys b/...,_krb5ccname_is_not_exported_but_present/dconf/db/[email protected]/locks/adsys
@@ -0,0 +1,4 @@
+/org/gnome/desktop/background/picture-options
+/org/gnome/desktop/background/picture-uri
+/org/gnome/desktop/media-handling/automount
+/org/gnome/shell/favorite-apps
diff --git a/...cyUpdate/golden/current_user,_krb5ccname_is_not_exported_but_present/dconf/db/gdm.d/adsys b/...cyUpdate/golden/current_user,_krb5ccname_is_not_exported_but_present/dconf/db/gdm.d/adsys
@@ -0,0 +1,4 @@
+[org/gnome/desktop/interface]
+clock-format='24h'
+clock-show-date=false
+clock-show-weekday=true
diff --git a/...te/golden/current_user,_krb5ccname_is_not_exported_but_present/dconf/db/gdm.d/locks/adsys b/...te/golden/current_user,_krb5ccname_is_not_exported_but_present/dconf/db/gdm.d/locks/adsys
@@ -0,0 +1,3 @@
+/org/gnome/desktop/interface/clock-format
+/org/gnome/desktop/interface/clock-show-date
+/org/gnome/desktop/interface/clock-show-weekday
diff --git a/...date/golden/current_user,_krb5ccname_is_not_exported_but_present/dconf/db/machine.d/adsys b/...date/golden/current_user,_krb5ccname_is_not_exported_but_present/dconf/db/machine.d/adsys
@@ -0,0 +1 @@
+
diff --git a/...olden/current_user,_krb5ccname_is_not_exported_but_present/dconf/db/machine.d/locks/adsys b/...olden/current_user,_krb5ccname_is_not_exported_but_present/dconf/db/machine.d/locks/adsys
@@ -0,0 +1 @@
+
diff --git a/...rent_user,_krb5ccname_is_not_exported_but_present/dconf/profile/[email protected] b/...rent_user,_krb5ccname_is_not_exported_but_present/dconf/profile/[email protected]
@@ -0,0 +1,3 @@
+user-db:user
+system-db:[email protected]
+system-db:machine
diff --git a/...olicyUpdate/golden/current_user,_krb5ccname_is_not_exported_but_present/dconf/profile/gdm b/...olicyUpdate/golden/current_user,_krb5ccname_is_not_exported_but_present/dconf/profile/gdm
@@ -0,0 +1,3 @@
+user-db:user
+system-db:gdm
+system-db:machine
diff --git a/...en/current_user,_krb5ccname_is_not_exported_but_present/lib/samba/cert_gpo_state_HOST.tdb b/...en/current_user,_krb5ccname_is_not_exported_but_present/lib/samba/cert_gpo_state_HOST.tdb
@@ -0,0 +1 @@
+TDB file
diff --git a/...t_exported_but_present/polkit-1/localauthority.conf.d/99-adsys-privilege-enforcement.conf b/...t_exported_but_present/polkit-1/localauthority.conf.d/99-adsys-privilege-enforcement.conf
@@ -0,0 +1,10 @@
+# This file is managed by adsys.
+# Do not edit this file manually.
+# Any changes will be overwritten.
+
+[Configuration]
+AdminIdentities=unix-group:sudo;unix-group:admin
+
+[Configuration]
+AdminIdentities=unix-user:[email protected];unix-group:[email protected]
+
diff --git a/...te/golden/current_user,_krb5ccname_is_not_exported_but_present/run/machine/scripts/.ready b/...te/golden/current_user,_krb5ccname_is_not_exported_but_present/run/machine/scripts/.ready
diff --git a/...krb5ccname_is_not_exported_but_present/run/machine/scripts/scripts/empty-subfolder/.empty b/...krb5ccname_is_not_exported_but_present/run/machine/scripts/scripts/empty-subfolder/.empty
diff --git a/...rb5ccname_is_not_exported_but_present/run/machine/scripts/scripts/final-machine-script.sh b/...rb5ccname_is_not_exported_but_present/run/machine/scripts/scripts/final-machine-script.sh
@@ -0,0 +1 @@
+final machine script
diff --git a/...me_is_not_exported_but_present/run/machine/scripts/scripts/otherfolder/script-user-logoff b/...me_is_not_exported_but_present/run/machine/scripts/scripts/otherfolder/script-user-logoff
@@ -0,0 +1 @@
+script user logoff
diff --git a/...rb5ccname_is_not_exported_but_present/run/machine/scripts/scripts/script-machine-shutdown b/...rb5ccname_is_not_exported_but_present/run/machine/scripts/scripts/script-machine-shutdown
@@ -0,0 +1 @@
+script machine shutdown
diff --git a/...krb5ccname_is_not_exported_but_present/run/machine/scripts/scripts/script-machine-startup b/...krb5ccname_is_not_exported_but_present/run/machine/scripts/scripts/script-machine-startup
@@ -0,0 +1 @@
+script machine startup
diff --git a/...ser,_krb5ccname_is_not_exported_but_present/run/machine/scripts/scripts/script-user-logon b/...ser,_krb5ccname_is_not_exported_but_present/run/machine/scripts/scripts/script-user-logon
@@ -0,0 +1 @@
+script user logon
diff --git a/...krb5ccname_is_not_exported_but_present/run/machine/scripts/scripts/subfolder/other-script b/...krb5ccname_is_not_exported_but_present/run/machine/scripts/scripts/subfolder/other-script
@@ -0,0 +1 @@
+subfolder other script
diff --git a/...ser,_krb5ccname_is_not_exported_but_present/run/machine/scripts/scripts/unreferenced-data b/...ser,_krb5ccname_is_not_exported_but_present/run/machine/scripts/scripts/unreferenced-data
@@ -0,0 +1 @@
+unreferenced data
diff --git a/...r,_krb5ccname_is_not_exported_but_present/run/machine/scripts/scripts/unreferenced-script b/...r,_krb5ccname_is_not_exported_but_present/run/machine/scripts/scripts/unreferenced-script
@@ -0,0 +1 @@
+unreferenced script
diff --git a/...e/golden/current_user,_krb5ccname_is_not_exported_but_present/run/machine/scripts/startup b/...e/golden/current_user,_krb5ccname_is_not_exported_but_present/run/machine/scripts/startup
@@ -0,0 +1,2 @@
+scripts/script-machine-startup
+scripts/subfolder/other-script
diff --git a/...PolicyUpdate/golden/current_user,_krb5ccname_is_not_exported_but_present/run/users/.empty b/...PolicyUpdate/golden/current_user,_krb5ccname_is_not_exported_but_present/run/users/.empty
diff --git a/.../golden/current_user,_krb5ccname_is_not_exported_but_present/run/users/CURRENT_UID/mounts b/.../golden/current_user,_krb5ccname_is_not_exported_but_present/run/users/CURRENT_UID/mounts
@@ -0,0 +1,4 @@
+protocol://example.com/it/mount/path
+protocol://example.com/all/other/mount/path
+protocol://example.com/all/another/path
+protocol://example.com/rnd/mount/path
diff --git a/...current_user,_krb5ccname_is_not_exported_but_present/run/users/CURRENT_UID/scripts/.ready b/...current_user,_krb5ccname_is_not_exported_but_present/run/users/CURRENT_UID/scripts/.ready
diff --git a/...current_user,_krb5ccname_is_not_exported_but_present/run/users/CURRENT_UID/scripts/logoff b/...current_user,_krb5ccname_is_not_exported_but_present/run/users/CURRENT_UID/scripts/logoff
@@ -0,0 +1,2 @@
+scripts/otherfolder/script-user-logoff
+scripts/subfolder/other-script
diff --git a/.../current_user,_krb5ccname_is_not_exported_but_present/run/users/CURRENT_UID/scripts/logon b/.../current_user,_krb5ccname_is_not_exported_but_present/run/users/CURRENT_UID/scripts/logon
@@ -0,0 +1,4 @@
+scripts/script-user-logon
+scripts/other-script-user-logon
+scripts/script-user-logon
+scripts/subfolder/other-script
diff --git a/..._is_not_exported_but_present/run/users/CURRENT_UID/scripts/scripts/empty-subfolder/.empty b/..._is_not_exported_but_present/run/users/CURRENT_UID/scripts/scripts/empty-subfolder/.empty
diff --git a/...is_not_exported_but_present/run/users/CURRENT_UID/scripts/scripts/final-machine-script.sh b/...is_not_exported_but_present/run/users/CURRENT_UID/scripts/scripts/final-machine-script.sh
@@ -0,0 +1 @@
+final machine script
diff --git a/...is_not_exported_but_present/run/users/CURRENT_UID/scripts/scripts/other-script-user-logon b/...is_not_exported_but_present/run/users/CURRENT_UID/scripts/scripts/other-script-user-logon
@@ -0,0 +1 @@
+script user logon
diff --git a/...exported_but_present/run/users/CURRENT_UID/scripts/scripts/otherfolder/script-user-logoff b/...exported_but_present/run/users/CURRENT_UID/scripts/scripts/otherfolder/script-user-logoff
@@ -0,0 +1 @@
+script user logoff
diff --git a/...is_not_exported_but_present/run/users/CURRENT_UID/scripts/scripts/script-machine-shutdown b/...is_not_exported_but_present/run/users/CURRENT_UID/scripts/scripts/script-machine-shutdown
@@ -0,0 +1 @@
+script machine shutdown
diff --git a/..._is_not_exported_but_present/run/users/CURRENT_UID/scripts/scripts/script-machine-startup b/..._is_not_exported_but_present/run/users/CURRENT_UID/scripts/scripts/script-machine-startup
@@ -0,0 +1 @@
+script machine startup
diff --git a/...cname_is_not_exported_but_present/run/users/CURRENT_UID/scripts/scripts/script-user-logon b/...cname_is_not_exported_but_present/run/users/CURRENT_UID/scripts/scripts/script-user-logon
@@ -0,0 +1 @@
+script user logon
diff --git a/..._is_not_exported_but_present/run/users/CURRENT_UID/scripts/scripts/subfolder/other-script b/..._is_not_exported_but_present/run/users/CURRENT_UID/scripts/scripts/subfolder/other-script
@@ -0,0 +1 @@
+subfolder other script
diff --git a/...cname_is_not_exported_but_present/run/users/CURRENT_UID/scripts/scripts/unreferenced-data b/...cname_is_not_exported_but_present/run/users/CURRENT_UID/scripts/scripts/unreferenced-data
@@ -0,0 +1 @@
+unreferenced data
diff --git a/...ame_is_not_exported_but_present/run/users/CURRENT_UID/scripts/scripts/unreferenced-script b/...ame_is_not_exported_but_present/run/users/CURRENT_UID/scripts/scripts/unreferenced-script
@@ -0,0 +1 @@
+unreferenced script
diff --git a/...ent_user,_krb5ccname_is_not_exported_but_present/sudoers.d/99-adsys-privilege-enforcement b/...ent_user,_krb5ccname_is_not_exported_but_present/sudoers.d/99-adsys-privilege-enforcement
@@ -0,0 +1,10 @@
+# This file is managed by adsys.
+# Do not edit this file manually.
+# Any changes will be overwritten.
+
+%admin	ALL=(ALL) !ALL
+%sudo	ALL=(ALL:ALL) !ALL
+
+"[email protected]"	ALL=(ALL:ALL) ALL
+"%[email protected]"	ALL=(ALL:ALL) ALL
+
diff --git a/...yUpdate/golden/current_user,_krb5ccname_is_not_exported_but_present/systemd/system/.empty b/...yUpdate/golden/current_user,_krb5ccname_is_not_exported_but_present/systemd/system/.empty
diff --git a/...er,_libkrb5_not_used_if_krb5ccname_is_present/apparmor.d/adsys/machine/nested/usr.bin.baz b/...er,_libkrb5_not_used_if_krb5ccname_is_present/apparmor.d/adsys/machine/nested/usr.bin.baz
@@ -0,0 +1 @@
+/usr/bin/baz {}
diff --git a/...rent_user,_libkrb5_not_used_if_krb5ccname_is_present/apparmor.d/adsys/machine/usr.bin.bar b/...rent_user,_libkrb5_not_used_if_krb5ccname_is_present/apparmor.d/adsys/machine/usr.bin.bar
@@ -0,0 +1 @@
+/usr/bin/bar {}
diff --git a/...rent_user,_libkrb5_not_used_if_krb5ccname_is_present/apparmor.d/adsys/machine/usr.bin.foo b/...rent_user,_libkrb5_not_used_if_krb5ccname_is_present/apparmor.d/adsys/machine/usr.bin.foo
@@ -0,0 +1 @@
+/usr/bin/foo {}
diff --git a/...ibkrb5_not_used_if_krb5ccname_is_present/apparmor.d/adsys/users/[email protected] b/...ibkrb5_not_used_if_krb5ccname_is_present/apparmor.d/adsys/users/[email protected]
@@ -0,0 +1,6 @@
+^[email protected] {
+/etc/environment r,
+@{HOMEDIRS}/.xauth* w,
+/usr/bin/{,b,d,rb}ash Ux,
+/usr/bin/{c,k,tc}sh Ux,
+}
diff --git a/...ser,_libkrb5_not_used_if_krb5ccname_is_present/dconf/db/[email protected]/adsys b/...ser,_libkrb5_not_used_if_krb5ccname_is_present/dconf/db/[email protected]/adsys
@@ -0,0 +1,5 @@
+[org/gnome/desktop/background]
+picture-options='stretched'
+picture-uri='file:///usr/share/backgrounds/canonical.png'
+[org/gnome/shell]
+favorite-apps=['\'libreoffice-writer.desktop\'', '\'snap-store_ubuntu-software.desktop\'', '\'yelp.desktop']
diff --git a/...ibkrb5_not_used_if_krb5ccname_is_present/dconf/db/[email protected]/locks/adsys b/...ibkrb5_not_used_if_krb5ccname_is_present/dconf/db/[email protected]/locks/adsys
@@ -0,0 +1,4 @@
+/org/gnome/desktop/background/picture-options
+/org/gnome/desktop/background/picture-uri
+/org/gnome/desktop/media-handling/automount
+/org/gnome/shell/favorite-apps
diff --git a/...pdate/golden/current_user,_libkrb5_not_used_if_krb5ccname_is_present/dconf/db/gdm.d/adsys b/...pdate/golden/current_user,_libkrb5_not_used_if_krb5ccname_is_present/dconf/db/gdm.d/adsys
@@ -0,0 +1,4 @@
+[org/gnome/desktop/interface]
+clock-format='24h'
+clock-show-date=false
+clock-show-weekday=true
diff --git a/...golden/current_user,_libkrb5_not_used_if_krb5ccname_is_present/dconf/db/gdm.d/locks/adsys b/...golden/current_user,_libkrb5_not_used_if_krb5ccname_is_present/dconf/db/gdm.d/locks/adsys
@@ -0,0 +1,3 @@
+/org/gnome/desktop/interface/clock-format
+/org/gnome/desktop/interface/clock-show-date
+/org/gnome/desktop/interface/clock-show-weekday
diff --git a/...e/golden/current_user,_libkrb5_not_used_if_krb5ccname_is_present/dconf/db/machine.d/adsys b/...e/golden/current_user,_libkrb5_not_used_if_krb5ccname_is_present/dconf/db/machine.d/adsys
@@ -0,0 +1 @@
+
diff --git a/...en/current_user,_libkrb5_not_used_if_krb5ccname_is_present/dconf/db/machine.d/locks/adsys b/...en/current_user,_libkrb5_not_used_if_krb5ccname_is_present/dconf/db/machine.d/locks/adsys
@@ -0,0 +1 @@
+
diff --git a/...t_user,_libkrb5_not_used_if_krb5ccname_is_present/dconf/profile/[email protected] b/...t_user,_libkrb5_not_used_if_krb5ccname_is_present/dconf/profile/[email protected]
@@ -0,0 +1,3 @@
+user-db:user
+system-db:[email protected]
+system-db:machine
diff --git a/...cyUpdate/golden/current_user,_libkrb5_not_used_if_krb5ccname_is_present/dconf/profile/gdm b/...cyUpdate/golden/current_user,_libkrb5_not_used_if_krb5ccname_is_present/dconf/profile/gdm
@@ -0,0 +1,3 @@
+user-db:user
+system-db:gdm
+system-db:machine
diff --git a/...current_user,_libkrb5_not_used_if_krb5ccname_is_present/lib/samba/cert_gpo_state_HOST.tdb b/...current_user,_libkrb5_not_used_if_krb5ccname_is_present/lib/samba/cert_gpo_state_HOST.tdb
@@ -0,0 +1 @@
+TDB file
diff --git a/..._krb5ccname_is_present/polkit-1/localauthority.conf.d/99-adsys-privilege-enforcement.conf b/..._krb5ccname_is_present/polkit-1/localauthority.conf.d/99-adsys-privilege-enforcement.conf
@@ -0,0 +1,10 @@
+# This file is managed by adsys.
+# Do not edit this file manually.
+# Any changes will be overwritten.
+
+[Configuration]
+AdminIdentities=unix-group:sudo;unix-group:admin
+
+[Configuration]
+AdminIdentities=unix-user:[email protected];unix-group:[email protected]
+
diff --git a/...golden/current_user,_libkrb5_not_used_if_krb5ccname_is_present/run/machine/scripts/.ready b/...golden/current_user,_libkrb5_not_used_if_krb5ccname_is_present/run/machine/scripts/.ready
diff --git a/...krb5_not_used_if_krb5ccname_is_present/run/machine/scripts/scripts/empty-subfolder/.empty b/...krb5_not_used_if_krb5ccname_is_present/run/machine/scripts/scripts/empty-subfolder/.empty
diff --git a/...rb5_not_used_if_krb5ccname_is_present/run/machine/scripts/scripts/final-machine-script.sh b/...rb5_not_used_if_krb5ccname_is_present/run/machine/scripts/scripts/final-machine-script.sh
@@ -0,0 +1 @@
+final machine script
diff --git a/..._used_if_krb5ccname_is_present/run/machine/scripts/scripts/otherfolder/script-user-logoff b/..._used_if_krb5ccname_is_present/run/machine/scripts/scripts/otherfolder/script-user-logoff
@@ -0,0 +1 @@
+script user logoff
diff --git a/...rb5_not_used_if_krb5ccname_is_present/run/machine/scripts/scripts/script-machine-shutdown b/...rb5_not_used_if_krb5ccname_is_present/run/machine/scripts/scripts/script-machine-shutdown
@@ -0,0 +1 @@
+script machine shutdown
diff --git a/...krb5_not_used_if_krb5ccname_is_present/run/machine/scripts/scripts/script-machine-startup b/...krb5_not_used_if_krb5ccname_is_present/run/machine/scripts/scripts/script-machine-startup
@@ -0,0 +1 @@
+script machine startup
diff --git a/...,_libkrb5_not_used_if_krb5ccname_is_present/run/machine/scripts/scripts/script-user-logon b/...,_libkrb5_not_used_if_krb5ccname_is_present/run/machine/scripts/scripts/script-user-logon
@@ -0,0 +1 @@
+script user logon
diff --git a/...krb5_not_used_if_krb5ccname_is_present/run/machine/scripts/scripts/subfolder/other-script b/...krb5_not_used_if_krb5ccname_is_present/run/machine/scripts/scripts/subfolder/other-script
@@ -0,0 +1 @@
+subfolder other script
diff --git a/...,_libkrb5_not_used_if_krb5ccname_is_present/run/machine/scripts/scripts/unreferenced-data b/...,_libkrb5_not_used_if_krb5ccname_is_present/run/machine/scripts/scripts/unreferenced-data
@@ -0,0 +1 @@
+unreferenced data
diff --git a/...libkrb5_not_used_if_krb5ccname_is_present/run/machine/scripts/scripts/unreferenced-script b/...libkrb5_not_used_if_krb5ccname_is_present/run/machine/scripts/scripts/unreferenced-script
@@ -0,0 +1 @@
+unreferenced script
diff --git a/...olden/current_user,_libkrb5_not_used_if_krb5ccname_is_present/run/machine/scripts/startup b/...olden/current_user,_libkrb5_not_used_if_krb5ccname_is_present/run/machine/scripts/startup
@@ -0,0 +1,2 @@
+scripts/script-machine-startup
+scripts/subfolder/other-script
diff --git a/...icyUpdate/golden/current_user,_libkrb5_not_used_if_krb5ccname_is_present/run/users/.empty b/...icyUpdate/golden/current_user,_libkrb5_not_used_if_krb5ccname_is_present/run/users/.empty
diff --git a/...lden/current_user,_libkrb5_not_used_if_krb5ccname_is_present/run/users/CURRENT_UID/mounts b/...lden/current_user,_libkrb5_not_used_if_krb5ccname_is_present/run/users/CURRENT_UID/mounts
@@ -0,0 +1,4 @@
+protocol://example.com/it/mount/path
+protocol://example.com/all/other/mount/path
+protocol://example.com/all/another/path
+protocol://example.com/rnd/mount/path
diff --git a/...rent_user,_libkrb5_not_used_if_krb5ccname_is_present/run/users/CURRENT_UID/scripts/.ready b/...rent_user,_libkrb5_not_used_if_krb5ccname_is_present/run/users/CURRENT_UID/scripts/.ready
diff --git a/...rent_user,_libkrb5_not_used_if_krb5ccname_is_present/run/users/CURRENT_UID/scripts/logoff b/...rent_user,_libkrb5_not_used_if_krb5ccname_is_present/run/users/CURRENT_UID/scripts/logoff
@@ -0,0 +1,2 @@
+scripts/otherfolder/script-user-logoff
+scripts/subfolder/other-script
diff --git a/...rrent_user,_libkrb5_not_used_if_krb5ccname_is_present/run/users/CURRENT_UID/scripts/logon b/...rrent_user,_libkrb5_not_used_if_krb5ccname_is_present/run/users/CURRENT_UID/scripts/logon
@@ -0,0 +1,4 @@
+scripts/script-user-logon
+scripts/other-script-user-logon
+scripts/script-user-logon
+scripts/subfolder/other-script
diff --git a/...sed_if_krb5ccname_is_present/run/users/CURRENT_UID/scripts/scripts/empty-subfolder/.empty b/...sed_if_krb5ccname_is_present/run/users/CURRENT_UID/scripts/scripts/empty-subfolder/.empty
diff --git a/...ed_if_krb5ccname_is_present/run/users/CURRENT_UID/scripts/scripts/final-machine-script.sh b/...ed_if_krb5ccname_is_present/run/users/CURRENT_UID/scripts/scripts/final-machine-script.sh
@@ -0,0 +1 @@
+final machine script
diff --git a/...ed_if_krb5ccname_is_present/run/users/CURRENT_UID/scripts/scripts/other-script-user-logon b/...ed_if_krb5ccname_is_present/run/users/CURRENT_UID/scripts/scripts/other-script-user-logon
@@ -0,0 +1 @@
+script user logon
diff --git a/...rb5ccname_is_present/run/users/CURRENT_UID/scripts/scripts/otherfolder/script-user-logoff b/...rb5ccname_is_present/run/users/CURRENT_UID/scripts/scripts/otherfolder/script-user-logoff
@@ -0,0 +1 @@
+script user logoff
diff --git a/...ed_if_krb5ccname_is_present/run/users/CURRENT_UID/scripts/scripts/script-machine-shutdown b/...ed_if_krb5ccname_is_present/run/users/CURRENT_UID/scripts/scripts/script-machine-shutdown
@@ -0,0 +1 @@
+script machine shutdown
diff --git a/...sed_if_krb5ccname_is_present/run/users/CURRENT_UID/scripts/scripts/script-machine-startup b/...sed_if_krb5ccname_is_present/run/users/CURRENT_UID/scripts/scripts/script-machine-startup
@@ -0,0 +1 @@
+script machine startup
diff --git a/...not_used_if_krb5ccname_is_present/run/users/CURRENT_UID/scripts/scripts/script-user-logon b/...not_used_if_krb5ccname_is_present/run/users/CURRENT_UID/scripts/scripts/script-user-logon
@@ -0,0 +1 @@
+script user logon
diff --git a/...sed_if_krb5ccname_is_present/run/users/CURRENT_UID/scripts/scripts/subfolder/other-script b/...sed_if_krb5ccname_is_present/run/users/CURRENT_UID/scripts/scripts/subfolder/other-script
@@ -0,0 +1 @@
+subfolder other script
diff --git a/...not_used_if_krb5ccname_is_present/run/users/CURRENT_UID/scripts/scripts/unreferenced-data b/...not_used_if_krb5ccname_is_present/run/users/CURRENT_UID/scripts/scripts/unreferenced-data
@@ -0,0 +1 @@
+unreferenced data
diff --git a/...t_used_if_krb5ccname_is_present/run/users/CURRENT_UID/scripts/scripts/unreferenced-script b/...t_used_if_krb5ccname_is_present/run/users/CURRENT_UID/scripts/scripts/unreferenced-script
@@ -0,0 +1 @@
+unreferenced script
diff --git a/..._user,_libkrb5_not_used_if_krb5ccname_is_present/sudoers.d/99-adsys-privilege-enforcement b/..._user,_libkrb5_not_used_if_krb5ccname_is_present/sudoers.d/99-adsys-privilege-enforcement
@@ -0,0 +1,10 @@
+# This file is managed by adsys.
+# Do not edit this file manually.
+# Any changes will be overwritten.
+
+%admin	ALL=(ALL) !ALL
+%sudo	ALL=(ALL:ALL) !ALL
+
+"[email protected]"	ALL=(ALL:ALL) ALL
+"%[email protected]"	ALL=(ALL:ALL) ALL
+
diff --git a/...date/golden/current_user,_libkrb5_not_used_if_krb5ccname_is_present/systemd/system/.empty b/...date/golden/current_user,_libkrb5_not_used_if_krb5ccname_is_present/systemd/system/.empty
diff --git a/...user,_libkrb5_not_used_if_setting_not_enabled/apparmor.d/adsys/machine/nested/usr.bin.baz b/...user,_libkrb5_not_used_if_setting_not_enabled/apparmor.d/adsys/machine/nested/usr.bin.baz
@@ -0,0 +1 @@
+/usr/bin/baz {}
diff --git a/...urrent_user,_libkrb5_not_used_if_setting_not_enabled/apparmor.d/adsys/machine/usr.bin.bar b/...urrent_user,_libkrb5_not_used_if_setting_not_enabled/apparmor.d/adsys/machine/usr.bin.bar
@@ -0,0 +1 @@
+/usr/bin/bar {}
diff --git a/...urrent_user,_libkrb5_not_used_if_setting_not_enabled/apparmor.d/adsys/machine/usr.bin.foo b/...urrent_user,_libkrb5_not_used_if_setting_not_enabled/apparmor.d/adsys/machine/usr.bin.foo
@@ -0,0 +1 @@
+/usr/bin/foo {}
Original file line number	Diff line number	Diff line change
		@@ -0,0 +1,2 @@
		scripts/script-machine-startup
		scripts/subfolder/other-script
Original file line number	Diff line number	Diff line change
		@@ -0,0 +1,2 @@
		scripts/otherfolder/script-user-logoff
		scripts/subfolder/other-script