dadada/pam-honeypot
dadada/pam-honeypot
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Compare commits

base: dadada:90467eabe22c2aefb0819091b539958b9e2205ae
Branches Tags
dadada:main
..
compare: dadada:a12f25aeddabdb716cd62684434ce02197f1def4
Branches Tags
dadada:main

No commits in common. "90467eabe22c2aefb0819091b539958b9e2205ae" and "a12f25aeddabdb716cd62684434ce02197f1def4" have entirely different histories.
90467eabe2 ... a12f25aedd

3 changed files with 13 additions and 38 deletions
Download patch file Download diff file Expand all files Collapse all files

2
.gitignore vendored
View file

@ -1,3 +1 @@
/target
/.nixos-test-history
/result

47
test.nix
View file

@ -13,40 +13,17 @@
};
testScript = ''
machine.wait_for_unit("multi-user.target")
with subtest("create user"):
machine.succeed("useradd -m alice")
machine.succeed("(echo foobar; echo foobar) | passwd alice")
with subtest("Switch to tty2 and wait for agetty"):
machine.send_key("alt-f2")
machine.wait_until_succeeds("[ $(fgconsole) = 2 ]")
machine.wait_for_unit("getty@tty2.service")
machine.wait_until_succeeds("pgrep -f 'agetty.*tty2'")
with subtest("Log in with honeypot credentials should fail and be logged"):
machine.wait_until_tty_matches("2", "login: ")
machine.send_chars("Admin\n")
machine.wait_until_tty_matches("2", "login: Admin")
machine.wait_until_succeeds("pgrep login")
machine.wait_until_tty_matches("2", "Password: ")
machine.send_chars("AdminPwdQ1\n")
machine.wait_until_tty_matches("2", "login: ")
machine.succeed("journalctl | grep 'log in with the honeypot credentials'")
with subtest("Switch to tty3 and wait for agetty"):
machine.send_key("alt-f3")
machine.wait_until_succeeds("[ $(fgconsole) = 3 ]")
machine.wait_for_unit("getty@tty3.service")
machine.wait_until_succeeds("pgrep -f 'agetty.*tty3'")
with subtest("Log in as alice on a virtual console should still work"):
machine.wait_until_tty_matches("3", "login: ")
machine.send_chars("alice\n")
machine.wait_until_tty_matches("3", "login: alice")
machine.wait_until_succeeds("pgrep login")
machine.wait_until_tty_matches("3", "Password: ")
machine.send_chars("foobar\n")
machine.wait_until_succeeds("pgrep -u alice bash")
machine.send_key("alt-f2")
machine.wait_until_succeeds("[ $(fgconsole) = 2 ]")
machine.wait_for_unit("getty@tty2.service")
machine.wait_until_succeeds("pgrep -f 'agetty.*tty2'")
machine.wait_until_tty_matches("2", "login: ")
machine.send_chars("Admin\n")
machine.wait_until_tty_matches("2", "login: Admin")
machine.wait_until_succeeds("pgrep login")
machine.wait_until_tty_matches("2", "Password: ")
machine.send_chars("AdminPwdQ1\n")
machine.wait_until_tty_matches("2", "login: ")
machine.succeed("journalctl | grep 'log in with the honeypot credentials'")
'';
}