torified_browsing.feature 9.48 KB
Newer Older
1
@product @fragile
2
Feature: Browsing the web using the Tor Browser
Tails developers's avatar
Tails developers committed
3
  As a Tails user
4
  when I browse the web using the Tor Browser
Tails developers's avatar
Tails developers committed
5
  all Internet traffic should flow only through Tor
6

7
  Scenario: The Tor Browser cannot access the LAN
8
    Given I have started Tails from DVD and logged in and the network is connected
9
    And a web server is running on the LAN
anonym's avatar
anonym committed
10
    And I capture all network traffic
11
12
    When I start the Tor Browser
    And the Tor Browser has started and loaded the startup page
anonym's avatar
anonym committed
13
    And I open a page on the LAN web server in the Tor Browser
14
    Then I see "TorBrowserUnableToConnect.png" after at most 20 seconds
anonym's avatar
anonym committed
15
    And no traffic has flowed to the LAN
16

17
  @check_tor_leaks
18
  Scenario: The Tor Browser directory is usable
19
    Given I have started Tails from DVD and logged in and the network is connected
20
21
22
    Then the amnesiac Tor Browser directory exists
    And there is a GNOME bookmark for the amnesiac Tor Browser directory
    And the persistent Tor Browser directory does not exist
23
24
25
    When I start the Tor Browser
    And the Tor Browser has started and loaded the startup page
    Then I can save the current page as "index.html" to the default downloads directory
26
27
    And I can print the current page as "output.pdf" to the default downloads directory

28
  @check_tor_leaks @fragile
29
  Scenario: Importing an OpenPGP key from a website
30
    Given I have started Tails from DVD and logged in and the network is connected
31
32
33
34
    When I start the Tor Browser
    And the Tor Browser has started and loaded the startup page
    And I open the address "https://tails.boum.org/tails-signing.key" in the Tor Browser
    Then I see "OpenWithImportKey.png" after at most 20 seconds
35
    When I accept to import the key with Seahorse
36
37
    Then I see "KeyImportedNotification.png" after at most 10 seconds

38
  @check_tor_leaks @fragile
39
  Scenario: Playing HTML5 audio
40
    Given I have started Tails from DVD and logged in and the network is connected
41
42
43
44
45
46
47
    When I start the Tor Browser
    And the Tor Browser has started and loaded the startup page
    And no application is playing audio
    And I open the address "http://www.terrillthompson.com/tests/html5-audio.html" in the Tor Browser
    And I click the HTML5 play button
    And 1 application is playing audio after 10 seconds

48
  @check_tor_leaks @fragile
49
  Scenario: Watching a WebM video
50
    Given I have started Tails from DVD and logged in and the network is connected
51
52
53
54
    When I start the Tor Browser
    And the Tor Browser has started and loaded the startup page
    And I open the address "https://webm.html5.org/test.webm" in the Tor Browser
    And I click the blocked video icon
intrigeri's avatar
intrigeri committed
55
    And I see "TorBrowserNoScriptTemporarilyAllowDialog.png" after at most 30 seconds
56
57
58
59
    And I accept to temporarily allow playing this video
    Then I see "TorBrowserSampleRemoteWebMVideoFrame.png" after at most 180 seconds

  Scenario: I can view a file stored in "~/Tor Browser" but not in ~/.gnupg
60
    Given I have started Tails from DVD and logged in and the network is connected
anonym's avatar
anonym committed
61
    And I copy "/usr/share/synaptic/html/index.html" to "/home/amnesia/Tor Browser/synaptic.html" as user "amnesia"
62
    And I copy "/usr/share/synaptic/html/index.html" to "/home/amnesia/.gnupg/synaptic.html" as user "amnesia"
63
    And I copy "/usr/share/synaptic/html/index.html" to "/tmp/synaptic.html" as user "amnesia"
64
65
66
    Then the file "/home/amnesia/.gnupg/synaptic.html" exists
    And the file "/lib/live/mount/overlay/home/amnesia/.gnupg/synaptic.html" exists
    And the file "/live/overlay/home/amnesia/.gnupg/synaptic.html" exists
67
    And the file "/tmp/synaptic.html" exists
anonym's avatar
anonym committed
68
69
    Given I start monitoring the AppArmor log of "/usr/local/lib/tor-browser/firefox"
    When I start the Tor Browser
70
    And the Tor Browser has started and loaded the startup page
anonym's avatar
anonym committed
71
    And I open the address "file:///home/amnesia/Tor Browser/synaptic.html" in the Tor Browser
72
    Then I see "TorBrowserSynapticManual.png" after at most 5 seconds
73
    And AppArmor has not denied "/usr/local/lib/tor-browser/firefox" from opening "/home/amnesia/Tor Browser/synaptic.html"
anonym's avatar
anonym committed
74
    Given I restart monitoring the AppArmor log of "/usr/local/lib/tor-browser/firefox"
75
    When I open the address "file:///home/amnesia/.gnupg/synaptic.html" in the Tor Browser
76
77
    Then I do not see "TorBrowserSynapticManual.png" after at most 5 seconds
    And AppArmor has denied "/usr/local/lib/tor-browser/firefox" from opening "/home/amnesia/.gnupg/synaptic.html"
anonym's avatar
anonym committed
78
    Given I restart monitoring the AppArmor log of "/usr/local/lib/tor-browser/firefox"
79
    When I open the address "file:///lib/live/mount/overlay/home/amnesia/.gnupg/synaptic.html" in the Tor Browser
80
81
    Then I do not see "TorBrowserSynapticManual.png" after at most 5 seconds
    And AppArmor has denied "/usr/local/lib/tor-browser/firefox" from opening "/lib/live/mount/overlay/home/amnesia/.gnupg/synaptic.html"
anonym's avatar
anonym committed
82
    Given I restart monitoring the AppArmor log of "/usr/local/lib/tor-browser/firefox"
83
    When I open the address "file:///live/overlay/home/amnesia/.gnupg/synaptic.html" in the Tor Browser
84
    Then I do not see "TorBrowserSynapticManual.png" after at most 5 seconds
anonym's avatar
anonym committed
85
86
    # Due to our AppArmor aliases, /live/overlay will be treated
    # as /lib/live/mount/overlay.
87
    And AppArmor has denied "/usr/local/lib/tor-browser/firefox" from opening "/lib/live/mount/overlay/home/amnesia/.gnupg/synaptic.html"
intrigeri's avatar
intrigeri committed
88
    # We do not get any AppArmor log for when access to files in /tmp is denied
89
90
91
92
93
    # since we explictly override (commit 51c0060) the rules (from the user-tmp
    # abstration) that would otherwise allow it, and we do so with "deny", which
    # also specifies "noaudit". We could explicitly specify "audit deny" and
    # then have logs, but it could be a problem when we set up desktop
    # notifications for AppArmor denials (#9337).
94
    When I open the address "file:///tmp/synaptic.html" in the Tor Browser
95
    Then I do not see "TorBrowserSynapticManual.png" after at most 5 seconds
96

97
  @doc
98
  Scenario: The "Tails documentation" link on the Desktop works
99
    Given I have started Tails from DVD and logged in and the network is connected
100
101
102
103
    When I double-click on the "Tails documentation" link on the Desktop
    Then the Tor Browser has started
    And I see "TailsOfflineDocHomepage.png" after at most 10 seconds

104
  Scenario: The Tor Browser uses TBB's shared libraries
105
    Given I have started Tails from DVD and logged in and the network is connected
106
107
108
109
    When I start the Tor Browser
    And the Tor Browser has started
    Then the Tor Browser uses all expected TBB shared libraries

110
  @check_tor_leaks @fragile
111
  Scenario: Opening check.torproject.org in the Tor Browser shows the green onion and the congratulations message
112
    Given I have started Tails from DVD and logged in and the network is connected
113
114
115
116
    When I start the Tor Browser
    And the Tor Browser has started and loaded the startup page
    And I open the address "https://check.torproject.org" in the Tor Browser
    Then I see "TorBrowserTorCheck.png" after at most 180 seconds
117

118
  @check_tor_leaks @fragile
119
  Scenario: The Tor Browser's "New identity" feature works as expected
120
    Given I have started Tails from DVD and logged in and the network is connected
121
122
123
124
125
126
127
128
    When I start the Tor Browser
    And the Tor Browser has started and loaded the startup page
    And I open the address "https://check.torproject.org" in the Tor Browser
    Then I see "TorBrowserTorCheck.png" after at most 180 seconds
    When I request a new identity using Torbutton
    And I acknowledge Torbutton's New Identity confirmation prompt
    Then the Tor Browser loads the startup page

129
  Scenario: The Tor Browser should not have any plugins enabled
130
    Given I have started Tails from DVD and logged in and the network is connected
131
132
    When I start the Tor Browser
    And the Tor Browser has started and loaded the startup page
133
    Then the Tor Browser has no plugins installed
134
135

  Scenario: The persistent Tor Browser directory is usable
136
    Given I have started Tails without network from a USB drive with a persistent partition enabled and logged in
137
138
139
140
141
142
143
144
145
146
147
148
149
150
    And the network is plugged
    And Tor is ready
    And available upgrades have been checked
    And all notifications have disappeared
    Then the persistent Tor Browser directory exists
    And there is a GNOME bookmark for the persistent Tor Browser directory
    When I start the Tor Browser
    And the Tor Browser has started and loaded the startup page
    And I can save the current page as "index.html" to the persistent Tor Browser directory
    When I open the address "file:///home/amnesia/Persistent/Tor Browser/index.html" in the Tor Browser
    Then I see "TorBrowserSavedStartupPage.png" after at most 10 seconds
    And I can print the current page as "output.pdf" to the persistent Tor Browser directory

  Scenario: Persistent browser bookmarks
151
    Given I have started Tails without network from a USB drive with a persistent partition enabled and logged in
152
153
154
155
156
157
158
159
160
    And all persistence presets are enabled
    And all persistent filesystems have safe access rights
    And all persistence configuration files have safe access rights
    And all persistent directories have safe access rights
    And I start the Tor Browser in offline mode
    And the Tor Browser has started in offline mode
    And I add a bookmark to eff.org in the Tor Browser
    And I warm reboot the computer
    And the computer reboots Tails
161
    And I enable read-only persistence
162
163
164
165
166
    And I log in to a new session
    And the Tails desktop is ready
    And I start the Tor Browser in offline mode
    And the Tor Browser has started in offline mode
    Then the Tor Browser has a bookmark to eff.org