Commit 0ea36948 authored by anonym's avatar anonym
Browse files

Use new AppArmor verification steps in other scenarios.

parent 36cb0492
......@@ -22,8 +22,10 @@ Feature: Using Evince
Scenario: I cannot view a PDF file stored in non-persistent /home/amnesia/.gnupg
Given I copy "/usr/share/cups/data/default-testpage.pdf" to "/home/amnesia/.gnupg" as user "amnesia"
And AppArmor has not denied "/usr/bin/evince" from opening "/home/amnesia/.gnupg/default-testpage.pdf"
When I try to open "/home/amnesia/.gnupg/default-testpage.pdf" with Evince
Then I see "EvinceUnableToOpen.png" after at most 10 seconds
And AppArmor has denied "/usr/bin/evince" from opening "/home/amnesia/.gnupg/default-testpage.pdf"
@keep_volumes
Scenario: Installing Tails on a USB drive, creating a persistent partition, copying PDF files to it
......@@ -48,6 +50,8 @@ Feature: Using Evince
Scenario: I cannot view a PDF file stored in persistent /home/amnesia/.gnupg
Given a computer
When I start Tails from USB drive "current" with network unplugged and I login with persistence password "asdf"
Then the file "/home/amnesia/Persistent/default-testpage.pdf" exists
Given AppArmor has not denied "/usr/bin/evice" from opening "/home/amnesia/.gnupg/default-testpage.pdf"
And I try to open "/home/amnesia/.gnupg/default-testpage.pdf" with Evince
Then I see "EvinceUnableToOpen.png" after at most 10 seconds
And AppArmor has denied "/usr/bin/evice" from opening "/home/amnesia/.gnupg/default-testpage.pdf"
......@@ -106,10 +106,14 @@ Feature: Chatting anonymously using Pidgin
# This should really be in dedicated scenarios, but it would be
# too costly to set up the virtual USB drive with persistence more
# than once in this feature.
And I cannot add a certificate from the "/home/amnesia/.gnupg" directory to Pidgin
Given AppArmor has not denied "/usr/bin/pidgin" from opening "/home/amnesia/.gnupg/test.crt"
Then I cannot add a certificate from the "/home/amnesia/.gnupg" directory to Pidgin
And AppArmor has denied "/usr/bin/pidgin" from opening "/home/amnesia/.gnupg/test.crt"
When I close Pidgin's certificate import failure dialog
And I close Pidgin's certificate manager
Given AppArmor has not denied "/usr/bin/pidgin" from opening "/live/persistence/TailsData_unlocked/gnupg/test.crt"
Then I cannot add a certificate from the "/live/persistence/TailsData_unlocked/gnupg" directory to Pidgin
And AppArmor has denied "/usr/bin/pidgin" from opening "/live/persistence/TailsData_unlocked/gnupg/test.crt"
When I close Pidgin's certificate import failure dialog
And I close Pidgin's certificate manager
Then I can add a certificate from the "/home/amnesia" directory to Pidgin
......@@ -21,8 +21,10 @@ Feature: Using Totem
Then I see "SampleLocalMp4VideoFrame.png" after at most 10 seconds
Given I close Totem
And I copy the sample videos to "/home/amnesia/.gnupg" as user "amnesia"
And AppArmor has not denied "/usr/bin/totem" from opening "/home/amnesia/.gnupg/video.mp4"
When I try to open "/home/amnesia/.gnupg/video.mp4" with Totem
Then I see "TotemUnableToOpen.png" after at most 10 seconds
And AppArmor has denied "/usr/bin/totem" from opening "/home/amnesia/.gnupg/video.mp4"
@check_tor_leaks
Scenario: Watching a WebM video over HTTPS, with and without the command-line
......@@ -54,5 +56,7 @@ Feature: Using Totem
Then I see "SampleLocalMp4VideoFrame.png" after at most 10 seconds
Given I close Totem
And the file "/home/amnesia/.gnupg/video.mp4" exists
And AppArmor has not denied "/usr/bin/totem" from opening "/home/amnesia/.gnupg/video.mp4"
When I try to open "/home/amnesia/.gnupg/video.mp4" with Totem
Then I see "TotemUnableToOpen.png" after at most 10 seconds
And AppArmor has denied "/usr/bin/totem" from opening "/home/amnesia/.gnupg/video.mp4"
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment