mirror of
https://github.com/fleetdm/fleet
synced 2026-04-21 21:47:20 +00:00
94aa81e42d
For #28343 Connects to #28343 Removing Apple MDM profile validation checks for com.apple.MCX keys (dontAllowFDEDisable and dontAllowFDEEnable) due to customer feedback. # Checklist for submitter - [x] Changes file added for user-visible changes in `changes/`, `orbit/changes/` or `ee/fleetd-chrome/changes`. - [x] Added/updated automated tests - [x] Manual QA for all new/changed functionality
109 lines
3.1 KiB
Go
109 lines
3.1 KiB
Go
package mobileconfig
|
|
|
|
import (
|
|
"fmt"
|
|
"testing"
|
|
|
|
"github.com/fleetdm/fleet/v4/server/ptr"
|
|
"github.com/stretchr/testify/assert"
|
|
"github.com/stretchr/testify/require"
|
|
)
|
|
|
|
func TestContainsFDEVileVaultOptionsPayload(t *testing.T) {
|
|
cases := []struct {
|
|
name string
|
|
in string
|
|
contains bool
|
|
}{
|
|
{
|
|
name: "no-op",
|
|
in: "",
|
|
contains: false,
|
|
},
|
|
{
|
|
name: "not com.apple.MCX payload",
|
|
in: getFileVaultOptionsPayload(FDEFileVaultOptionsPayload{
|
|
PayloadType: "com.apple.security.scep",
|
|
}),
|
|
contains: false,
|
|
},
|
|
{
|
|
name: "com.apple.MCX payload, no FDE options",
|
|
in: getFileVaultOptionsPayload(FDEFileVaultOptionsPayload{
|
|
PayloadType: FleetCustomSettingsPayloadType,
|
|
}),
|
|
contains: false,
|
|
},
|
|
{
|
|
name: "com.apple.MCX payload with DestroyFVKeyOnStandby option",
|
|
in: getFileVaultOptionsPayload(FDEFileVaultOptionsPayload{
|
|
PayloadType: FleetCustomSettingsPayloadType,
|
|
DestroyFVKeyOnStandby: ptr.Bool(true),
|
|
}),
|
|
contains: true,
|
|
},
|
|
}
|
|
for _, tc := range cases {
|
|
t.Run(tc.name, func(t *testing.T) {
|
|
result, err := ContainsFDEFileVaultOptionsPayload([]byte(tc.in))
|
|
require.NoError(t, err)
|
|
assert.Equal(t, tc.contains, result)
|
|
})
|
|
}
|
|
}
|
|
|
|
func getFileVaultOptionsPayload(payload FDEFileVaultOptionsPayload) string {
|
|
var DestroyFVKeyOnStandby string
|
|
|
|
if payload.DestroyFVKeyOnStandby != nil {
|
|
DestroyFVKeyOnStandby = fmt.Sprintf("<key>DestroyFVKeyOnStandby</key><%t/>", *payload.DestroyFVKeyOnStandby)
|
|
}
|
|
return fmt.Sprintf(`<?xml version="1.0" encoding="UTF-8"?>
|
|
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
|
|
<plist version="1.0">
|
|
<dict>
|
|
<key>PayloadContent</key>
|
|
<array>
|
|
<dict>
|
|
%s
|
|
<key>PayloadIdentifier</key>
|
|
<string>com.example.fdefvoptionspayload</string>
|
|
<key>PayloadType</key>
|
|
<string>%s</string>
|
|
<key>PayloadUUID</key>
|
|
<string>0a8f4102-0fbf-4d8c-b1e1-3d916f89d927</string>
|
|
<key>PayloadVersion</key>
|
|
<integer>1</integer>
|
|
<key>dontAllowFDEDisable</key>
|
|
<true/>
|
|
<key>dontAllowFDEEnable</key>
|
|
<true/>
|
|
</dict>
|
|
<dict>
|
|
<key>dontAllowFDEDisable</key>
|
|
<true/>
|
|
<key>PayloadIdentifier</key>
|
|
<string>com.example.pkcs12</string>
|
|
<key>PayloadType</key>
|
|
<string>com.apple.security.pkcs12</string>
|
|
<key>PayloadContent</key>
|
|
<data>bozo</data>
|
|
<key>PayloadUUID</key>
|
|
<string>0a8f4102-0fbf-4d8c-b1e1-3d916f89d927</string>
|
|
<key>PayloadVersion</key>
|
|
<integer>1</integer>
|
|
</dict>
|
|
</array>
|
|
<key>PayloadDisplayName</key>
|
|
<string>FileVault 2 Options</string>
|
|
<key>PayloadIdentifier</key>
|
|
<string>com.example.myprofile</string>
|
|
<key>PayloadType</key>
|
|
<string>Configuration</string>
|
|
<key>PayloadUUID</key>
|
|
<string>92821df0-7c04-4366-b805-eb51ed87541b</string>
|
|
<key>PayloadVersion</key>
|
|
<integer>1</integer>
|
|
</dict>
|
|
</plist>`, DestroyFVKeyOnStandby, payload.PayloadType)
|
|
}
|