mirror of
https://github.com/fail2ban/fail2ban.git
synced 2026-03-11 08:55:31 +00:00
abd56dbedf
* master: (26 commits) DOC: added a note that coverage script is python-coverage on Debian systems Fixed typos Added additional Transmitter tests, and some associated fixes TODO: test filters/examples files add corresponding ChangeLog entry do catch all exception ENH: typo + head -1 has been deprecated for 10+ years. ENH: add help command BF: allow more than single word for command action[start,stop,ban,unban,check] and for setcinfo too BF: general Exception catch was excessive. Only IOError and OSError are possible and has different meanings Add development documentation and framework for code coverage measurement FSF address changes missing from previous refresh generated manpages (since 0.8.2 state) Downgrade log rotation detection message to DEBUG level from INFO. Closes: gh-129 BF: do not shutdown logging until all jails stop -- so move into Server.quit() BF: safeguard closing of log handlers + close in reverse order Added transmitter get cinfo option for action Fix for missing value in transmitter delaction Rewrite and enable server testcase for Transmitter ENH: adding more of diagnostic messages into -client while starting the daemon ...
202 lines
6.1 KiB
Python
Executable file
202 lines
6.1 KiB
Python
Executable file
#!/usr/bin/python
|
|
# emacs: -*- mode: python; py-indent-offset: 4; indent-tabs-mode: t -*-
|
|
# vi: set ft=python sts=4 ts=4 sw=4 noet :
|
|
"""Script to run Fail2Ban tests battery
|
|
"""
|
|
|
|
# This file is part of Fail2Ban.
|
|
#
|
|
# Fail2Ban is free software; you can redistribute it and/or modify
|
|
# it under the terms of the GNU General Public License as published by
|
|
# the Free Software Foundation; either version 2 of the License, or
|
|
# (at your option) any later version.
|
|
#
|
|
# Fail2Ban is distributed in the hope that it will be useful,
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
# GNU General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU General Public License
|
|
# along with Fail2Ban; if not, write to the Free Software
|
|
# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
|
|
|
|
__author__ = "Cyril Jaquier"
|
|
__copyright__ = "Copyright (c) 2004 Cyril Jaquier, 2012- Yaroslav Halchenko"
|
|
__license__ = "GPL"
|
|
|
|
|
|
import unittest, logging, sys, time, os
|
|
|
|
from common.version import version
|
|
from testcases import banmanagertestcase
|
|
from testcases import clientreadertestcase
|
|
from testcases import failmanagertestcase
|
|
from testcases import filtertestcase
|
|
from testcases import servertestcase
|
|
from testcases import datedetectortestcase
|
|
from testcases import actiontestcase
|
|
from server.mytime import MyTime
|
|
|
|
from optparse import OptionParser, Option
|
|
|
|
def get_opt_parser():
|
|
# use module docstring for help output
|
|
p = OptionParser(
|
|
usage="%s [OPTIONS] [regexps]\n" % sys.argv[0] + __doc__,
|
|
version="%prog " + version)
|
|
|
|
p.add_options([
|
|
Option('-l', "--log-level", type="choice",
|
|
dest="log_level",
|
|
choices=('debug', 'info', 'warn', 'error', 'fatal'),
|
|
default=None,
|
|
help="Log level for the logger to use during running tests"),
|
|
])
|
|
|
|
p.add_options([
|
|
Option('-n', "--no-network", action="store_true",
|
|
dest="no_network",
|
|
help="Do not run tests that require the network"),
|
|
])
|
|
|
|
return p
|
|
|
|
parser = get_opt_parser()
|
|
(opts, regexps) = parser.parse_args()
|
|
|
|
#
|
|
# Logging
|
|
#
|
|
logSys = logging.getLogger("fail2ban")
|
|
|
|
# Numerical level of verbosity corresponding to a log "level"
|
|
verbosity = {'debug': 3,
|
|
'info': 2,
|
|
'warn': 1,
|
|
'error': 1,
|
|
'fatal': 0,
|
|
None: 1}[opts.log_level]
|
|
|
|
if opts.log_level is not None: # pragma: no cover
|
|
# so we had explicit settings
|
|
logSys.setLevel(getattr(logging, opts.log_level.upper()))
|
|
else: # pragma: no cover
|
|
# suppress the logging but it would leave unittests' progress dots
|
|
# ticking, unless like with '-l fatal' which would be silent
|
|
# unless error occurs
|
|
logSys.setLevel(getattr(logging, 'FATAL'))
|
|
|
|
# Add the default logging handler
|
|
stdout = logging.StreamHandler(sys.stdout)
|
|
# Custom log format for the verbose tests runs
|
|
if verbosity > 1: # pragma: no cover
|
|
stdout.setFormatter(logging.Formatter(' %(asctime)-15s %(thread)s %(message)s'))
|
|
else: # pragma: no cover
|
|
# just prefix with the space
|
|
stdout.setFormatter(logging.Formatter(' %(message)s'))
|
|
logSys.addHandler(stdout)
|
|
|
|
#
|
|
# Let know the version
|
|
#
|
|
if not opts.log_level or opts.log_level != 'fatal': # pragma: no cover
|
|
print "Fail2ban %s test suite. Python %s. Please wait..." \
|
|
% (version, str(sys.version).replace('\n', ''))
|
|
|
|
|
|
#
|
|
# Gather the tests
|
|
#
|
|
if not len(regexps): # pragma: no cover
|
|
tests = unittest.TestSuite()
|
|
else: # pragma: no cover
|
|
import re
|
|
class FilteredTestSuite(unittest.TestSuite):
|
|
_regexps = [re.compile(r) for r in regexps]
|
|
def addTest(self, suite):
|
|
suite_str = str(suite)
|
|
for r in self._regexps:
|
|
if r.search(suite_str):
|
|
super(FilteredTestSuite, self).addTest(suite)
|
|
return
|
|
|
|
tests = FilteredTestSuite()
|
|
|
|
# Server
|
|
#tests.addTest(unittest.makeSuite(servertestcase.StartStop))
|
|
tests.addTest(unittest.makeSuite(servertestcase.Transmitter))
|
|
tests.addTest(unittest.makeSuite(actiontestcase.ExecuteAction))
|
|
# FailManager
|
|
tests.addTest(unittest.makeSuite(failmanagertestcase.AddFailure))
|
|
# BanManager
|
|
tests.addTest(unittest.makeSuite(banmanagertestcase.AddFailure))
|
|
# ClientReader
|
|
tests.addTest(unittest.makeSuite(clientreadertestcase.JailReaderTest))
|
|
tests.addTest(unittest.makeSuite(clientreadertestcase.FilterReaderTest))
|
|
|
|
# Filter
|
|
if not opts.no_network:
|
|
tests.addTest(unittest.makeSuite(filtertestcase.IgnoreIP))
|
|
tests.addTest(unittest.makeSuite(filtertestcase.LogFile))
|
|
tests.addTest(unittest.makeSuite(filtertestcase.LogFileMonitor))
|
|
if not opts.no_network:
|
|
tests.addTest(unittest.makeSuite(filtertestcase.GetFailures))
|
|
tests.addTest(unittest.makeSuite(filtertestcase.DNSUtilsTests))
|
|
tests.addTest(unittest.makeSuite(filtertestcase.JailTests))
|
|
|
|
# DateDetector
|
|
tests.addTest(unittest.makeSuite(datedetectortestcase.DateDetectorTest))
|
|
|
|
#
|
|
# Extensive use-tests of different available filters backends
|
|
#
|
|
|
|
from server.filterpoll import FilterPoll
|
|
filters = [FilterPoll] # always available
|
|
|
|
# Additional filters available only if external modules are available
|
|
# yoh: Since I do not know better way for parametric tests
|
|
# with good old unittest
|
|
try:
|
|
from server.filtergamin import FilterGamin
|
|
filters.append(FilterGamin)
|
|
except Exception, e: # pragma: no cover
|
|
print "I: Skipping gamin backend testing. Got exception '%s'" % e
|
|
|
|
try:
|
|
from server.filterpyinotify import FilterPyinotify
|
|
filters.append(FilterPyinotify)
|
|
except Exception, e: # pragma: no cover
|
|
print "I: Skipping pyinotify backend testing. Got exception '%s'" % e
|
|
|
|
for Filter_ in filters:
|
|
tests.addTest(unittest.makeSuite(
|
|
filtertestcase.get_monitor_failures_testcase(Filter_)))
|
|
|
|
|
|
#
|
|
# Run the tests
|
|
#
|
|
testRunner = unittest.TextTestRunner(verbosity=verbosity)
|
|
|
|
try:
|
|
# Set the time to a fixed, known value
|
|
# Sun Aug 14 12:00:00 CEST 2005
|
|
# yoh: we need to adjust TZ to match the one used by Cyril so all the timestamps match
|
|
old_TZ = os.environ.get('TZ', None)
|
|
os.environ['TZ'] = 'Europe/Zurich'
|
|
time.tzset()
|
|
MyTime.setTime(1124013600)
|
|
|
|
tests_results = testRunner.run(tests)
|
|
|
|
finally: # pragma: no cover
|
|
# Just for the sake of it reset the TZ
|
|
# yoh: move all this into setup/teardown methods within tests
|
|
os.environ.pop('TZ')
|
|
if old_TZ:
|
|
os.environ['TZ'] = old_TZ
|
|
time.tzset()
|
|
|
|
if not tests_results.wasSuccessful(): # pragma: no cover
|
|
sys.exit(1)
|