smail
f60d3b0880
Some checks are pending
Security Checks / security (push) Waiting to run
统一 frontend、backend、test、test-log 和 out 目录，更新构建、部署及测试入口；纳入配置管理兼容与首次安全引导修复；排除本机配置、密钥和测试产物。
80 lines
2.3 KiB
Go
80 lines
2.3 KiB
Go
package main
|
|
|
|
import (
|
|
"os"
|
|
"path/filepath"
|
|
"strings"
|
|
"testing"
|
|
)
|
|
|
|
func TestWindowsDeploymentScriptsKeepAdminChannelManual(t *testing.T) {
|
|
root := filepath.Clean(filepath.Join("..", "..", ".."))
|
|
installer, err := os.ReadFile(filepath.Join(root, "deploy", "install-windows.ps1"))
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
content := string(installer)
|
|
for _, required := range []string{
|
|
"sc.exe",
|
|
"smail-admin.exe",
|
|
"Set-RestrictedAcl",
|
|
"sidtype",
|
|
"$PackageRoot = $null",
|
|
"$PackageRoot = Split-Path -Parent $PSScriptRoot",
|
|
"NT SERVICE\\Smail:(F)",
|
|
".backup-",
|
|
"$mainBackup",
|
|
"$adminBackup",
|
|
"不会自动注册或启动服务",
|
|
} {
|
|
if !strings.Contains(content, required) {
|
|
t.Fatalf("Windows installer is missing %q", required)
|
|
}
|
|
}
|
|
if !hasUTF8BOM(installer) {
|
|
t.Fatal("Windows installer must be encoded as UTF-8 with BOM for Windows PowerShell")
|
|
}
|
|
serviceSetup := strings.Index(content, `"sidtype", "Smail", "unrestricted"`)
|
|
aclSetup := strings.Index(content, "Set-RestrictedAcl -Root $resolvedInstallRoot")
|
|
if serviceSetup < 0 || aclSetup < 0 || serviceSetup > aclSetup {
|
|
t.Fatal("Windows installer must create the service SID before applying service ACLs")
|
|
}
|
|
for _, forbidden := range []string{
|
|
"create SmailAdmin",
|
|
"Start-Service -Name \"SmailAdmin\"",
|
|
"start= auto" + "\n" + "start= auto",
|
|
} {
|
|
if strings.Contains(content, forbidden) {
|
|
t.Fatalf("Windows installer contains forbidden admin-service action %q", forbidden)
|
|
}
|
|
}
|
|
}
|
|
|
|
func hasUTF8BOM(data []byte) bool {
|
|
return len(data) >= 3 && data[0] == 0xEF && data[1] == 0xBB && data[2] == 0xBF
|
|
}
|
|
|
|
func TestWindowsUninstallerPreservesData(t *testing.T) {
|
|
root := filepath.Clean(filepath.Join("..", "..", ".."))
|
|
uninstaller, err := os.ReadFile(filepath.Join(root, "deploy", "uninstall-windows.ps1"))
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
content := string(uninstaller)
|
|
if !hasUTF8BOM(uninstaller) {
|
|
t.Fatal("Windows uninstaller must be encoded as UTF-8 with BOM for Windows PowerShell")
|
|
}
|
|
if strings.Contains(content, "Remove-Item -LiteralPath $resolvedInstallRoot -Recurse") {
|
|
t.Fatal("Windows uninstaller recursively removes the data root")
|
|
}
|
|
for _, required := range []string{
|
|
"smail.exe",
|
|
"smail-admin.exe",
|
|
"配置、数据库、证书和用户数据未删除",
|
|
} {
|
|
if !strings.Contains(content, required) {
|
|
t.Fatalf("Windows uninstaller is missing %q", required)
|
|
}
|
|
}
|
|
}
|