From 0993115bdc02bd294fa94f850d2ac178ee7f7c90 Mon Sep 17 00:00:00 2001 From: 3hhh Date: Sun, 16 May 2021 07:32:10 +0200 Subject: [PATCH] add some checks for QubesDB /qubes-firewall_handled/[ip] --- qubesagent/test_firewall.py | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/qubesagent/test_firewall.py b/qubesagent/test_firewall.py index a721847..9665045 100644 --- a/qubesagent/test_firewall.py +++ b/qubesagent/test_firewall.py @@ -675,11 +675,17 @@ class TestFirewallWorker(TestCase): def test_handle_addr(self): self.obj.handle_addr('10.137.0.2') self.assertEqual(self.obj.rules['10.137.0.2'], [{'action': 'accept'}]) + self.assertEqual(self.obj.qdb.entries['/qubes-firewall_handled/10.137.0.2'], '1') + self.obj.handle_addr('10.137.0.2') + self.assertEqual(self.obj.rules['10.137.0.2'], [{'action': 'accept'}]) + self.assertEqual(self.obj.qdb.entries['/qubes-firewall_handled/10.137.0.2'], '2') # fallback to block all self.obj.handle_addr('10.137.0.3') self.assertEqual(self.obj.rules['10.137.0.3'], [{'action': 'drop'}]) + self.assertEqual(self.obj.qdb.entries['/qubes-firewall_handled/10.137.0.3'], '1') self.obj.handle_addr('10.137.0.4') self.assertEqual(self.obj.rules['10.137.0.4'], [{'action': 'drop'}]) + self.assertEqual(self.obj.qdb.entries['/qubes-firewall_handled/10.137.0.4'], '1') @patch('os.path.isfile') @patch('os.access')