Commit Graph

761 Commits

Author SHA1 Message Date
6d21128b89 device: Simplify VerifyStart handler using prints loading functions 2021-03-02 17:15:14 +01:00
1511eb93ea device: Do not list invalid prints as enrolled
The user may have some invalid prints saved (like the ones enrolled with
fprintd 1) in the storage, this lead to list such prints as enrolled but
they're actually not valid.

So load the prints to ensure that those are of the valid type instead of
just discovering them.

We may make just store.discover_prints to be aware of this, but this
would break some assumptions we do in tests, so better to go this way.
2021-03-02 17:15:14 +01:00
8f3b48e261 device: Add utility function to load all user prints
We may want to be able to load the user prints to check whether they
are usable, so add an utility function for this.

And use it also in load_all_prints().
2021-03-02 17:15:14 +01:00
bc8ff3e3f6 device: Add helper routine to load all prints
It might make sense to push this into the storage layer. But, overall,
it is OK to live here, and if we do make changes on the storage layer we
probably want to change more than just this.
2021-03-02 17:15:14 +01:00
d07e81acae meson: Consider the 'pam' option in the summary
We may show that we build it even when it's disabled but available in
the system
2021-03-02 17:15:14 +01:00
a04a60cd8e tests/fprintd: Add better tests for ListEnrolledFingers in unclaimed state 2021-03-02 17:15:14 +01:00
ecf6b7c323 pam_fprintd: Just return a PAM_AUTH_ERROR on unknown errors
If something under the hood failed with a generic device error we'd just
mark the PAM module not available, this is probably too much as it may
just be due to a device temporary error.

So make it stop but allow the loading system to retry with it
2021-03-02 17:15:14 +01:00
df6ebefef7 pam_fprintd: Consistently return PAM_AUTHINFO_UNAVAIL when device has no prints
Loading saved prints may lead to an error if they were stored long time
ago and so they're using a wrong format.

In such case we list the prints as available even though they are really
not, so the PAM module won't return PAM_AUTHINFO_UNAVAIL as in the
no-prints case but PAM_USER_UNKNOWN.

This will lead some auth systems (such as gdm) to keep retrying using
PAM fprintd module, even if it's not really available.
2021-03-02 17:15:14 +01:00
b7aa0c455d tests: Update output checker
This pulls in some changes done in gnome-settings-daemon to be able to
force close the FD at the end of the test.
2021-02-15 17:45:08 +01:00
fe95889f2e pam_fprintd.pod: Adapt documentation on max-tries to match code 2021-02-01 18:08:25 +01:00
556f8928a6 pam: Allow values bigger than 9 to be used as max tries match 2021-02-01 18:07:52 +01:00
02bd36d8d9 tests/fprintd: Check that we can't try to release a device while closing 2021-01-27 18:18:57 +01:00
b92f39be3d tests/fprintd: Add test to check errors during release 2021-01-27 18:18:57 +01:00
b46aba6fb2 tests/fprintd: Ensure stored print deletion error has higher prio than device error 2021-01-27 18:18:57 +01:00
2b81184b42 device: Fail with any non-zero return value on storage print_data_save()
When saving the prints we use g_file_set_contents under the hood and in
case return its error code that is a positive value.

So in such case we don't fail if we have a write failure at the end of
the enrollment.

While we could ensure in file storage to always return a negative value,
it's always better to ensure that is has to be 0 when we didn't get an
error.

Add a test checking for this case.
2021-01-27 17:52:05 +01:00
2af0e6407a tests/fprintd: Make prints not writable by turning them into directories
Given that the storage will use unlink to delete them, we'll just fail
while writing them, in this way we'll be able to run such tests also in
CI.
2021-01-27 17:52:05 +01:00
9a39f1fde8 tests/fprintd: Verify the case we can't delete prints from device 2021-01-27 17:52:05 +01:00
1deb1e2044 tests/fprintd: Add ability to force-kill the daemon if we're fine to hang 2021-01-27 15:55:48 +01:00
75989bd2be tests/fprintd: Compute timeout for daemon-stop phase depending on platform 2021-01-26 20:52:29 +01:00
3df730faeb tests/fprintd: Make possible to store duplicated prints for an user
Since we so far we had no duplicated-check for prints in fprintd an user
may have enrolled the same print for multiple accounts or even for
different fingers, so we need to simulate this case.

Given that fprintd may not allow to enroll duplicated prints soon, it's
better to just copy the storage value so that we simulate a duplicated
enrollment in the past.
2021-01-26 20:52:29 +01:00
f2514f43f6 tests/fprintd: Return more data about the enrolled prints
It may be useful to be able to associate them to their user
2021-01-26 20:52:29 +01:00
8ef255a3bd tests/fprintd: Add option to claim device for user on enroll_image 2021-01-26 20:52:29 +01:00
15b41aa7c2 tests/fprintd: Add function and tests to enroll multiple users fingers/images
Allow to enroll multiple data in a single shot so that we don't have to
do it for each user, and add a test that uses it to match each possible
combination.
2021-01-26 20:52:29 +01:00
bec42959ad tests/fprintd: Add an utility function to easily check for match/no-match 2021-01-26 20:52:29 +01:00
5e00b01cf1 tests/fprintd: Ensure that the selected finger is emitted as expected 2021-01-26 19:41:53 +01:00
b3bf4ac1a3 tests/fprintd: Unset the values we monitor for results on wait_for_result
We need to ensure those assume the value we want after waiting
2021-01-26 19:41:48 +01:00
4aa70fb6c6 tests/fprintd: Reimplement the tests relying on specific image driver features
Some tests were delaying VerifyStop by not reporting the finger status
in the image driver, we can do the same using sleeps in the virtual
device driver, so let's reimplement such calls
2021-01-26 16:56:31 +01:00
d2c8a383e6 tests/fprintd: Implement device removal via the 'UNPLUG' command 2021-01-26 04:38:09 +01:00
9a85bfa57f tests/fprintd: Ensure the scan type can be changed and is notified 2021-01-25 19:50:46 +01:00
7f2133cc79 tests/fprintd: Verify using no-identification device with 'any' finger 2021-01-25 19:50:46 +01:00
8491d35eef tests/fprintd: Verify that we can enroll with one stage only 2021-01-25 19:50:46 +01:00
32ae65fae6 tests/fprintd: Reduce the enroll stages when possible to avoid operations 2021-01-25 19:50:46 +01:00
8799fd296a tests/fprintd: Repeat all relevant tests with the storage device
Now that FPrintdVirtualStorageDeviceBaseTest is a
FPrintdVirtualDeviceBaseTest we can implement the needed `send_*`
functions that we use in the tests in order to get easily an interface
that can be used to repeat all the tests we've already written with the
new virtual device.

To do this, we've only to create new test classes that use the
FPrintdVirtualStorageDeviceBaseTest as main base class and that
also implement the test class.
2021-01-25 19:50:40 +01:00
157bcf0ff5 device: Check if the device is open if we didn't fail in claiming it
When claiming a device for delete operation we'd not get an error in
case we can claim it but it's not already claimed, so in such case we
should explicitly check that the device has been opened.
2021-01-25 19:15:09 +01:00
d7431c9654 ci: Do not use verbose logging for tests, just rely on artifacts
Only print errors if any
2021-01-25 19:15:09 +01:00
2348876ba0 ci: Enable Virtual Device (with storage or not) tests 2021-01-25 19:15:05 +01:00
0b80245e8a tests/fprintd: Inherit storage tests from FPrintdVirtualDeviceBaseTest
We can avoid lots of duplication
2021-01-25 18:18:40 +01:00
72a2504fc4 device: Wait device to finish for a timeout before completing VerifyStop
When a device has reported the verification status the client should
call VerifyStop to stop the device, however this under the hood may lead
to a premature cancellation, causing the device not to react as expected
in case the finger is still on the sensor or in case it may return to us
some errors that we may want to handle (like the data-missing one).

So, in case we are about to stop the verification and the operation is
still in process, wait for a maximum timeout before proceed to the
cancellation.

However, while waiting, the action may be also cancelled because of a
call to Release() or because the client vanished, and in such case we
have to ensure that the current invocation is saved for being invoked by
stoppable_action_completed() when callback will return. That will also
unset it, and that's a clear indication for us that it has been already
consumed, and thus that we can just return doing nothing else.

Fixes: #100
2021-01-25 18:18:40 +01:00
8d8c181f31 tests/fprintd: Check that errors happening after we got a result are ignored 2021-01-25 18:18:40 +01:00
cce9551c98 tests/fprintd: Be more flexible in accepting async results with exceptions
Some tests may have different behaviors depending on the CPU load when
using parallel tests, so async results could arrive in different order.

Then we need to accept multiple results:
  - A specific exception has to happen all the times
  - One of the accepted exception has to happen all the times
  - No exception or one of the allowed exception may happen

Depending on the test, use one of the possible strategies.
2021-01-25 18:18:40 +01:00
c8c543672d tests/fprintd: Make assertFprintError to accept list of errors we accept
It can be used to check if any of the error that is passed is raised
2021-01-25 18:18:40 +01:00
5acf13cf51 tests/fprintd: Ensure that all the methods can be called concurrently
As per GDBus we can now get async calls (from the same client) happening
while we're still processing a previous request, so we need to ensure
that we react properly.
2021-01-25 18:18:40 +01:00
f3a8adf3c8 tests/fprintd: Make possible to organize async replies per proxy and method 2021-01-25 18:18:40 +01:00
c32737f4d4 tests/fprintd: Use global definitions for Fprint namespace and paths
So avoid repeating it everywhere
2021-01-25 18:18:40 +01:00
804aff3c30 tests/fprintd: Use a class to compare permissions easily 2021-01-25 18:18:40 +01:00
f87cb27163 device: Fix debug statement string ordering and be more consistent
We were inverting the values in the `Authorization granted` message, so
be consistent in the ordering we show the message.
2021-01-25 18:18:40 +01:00
457cbd46cd device: Stop any further EnrollStop/VerifyStop request once we got one
In case we get concurrent requests on EnrollStart/EnrollStop we'd just
continue with the operation, making the first processed request to start
the process and the second to hang (in code before the introduction of
stoppable_action_stop()) or to crash (in the current code).

So in such case we should always check that we're not handling already
the request, by checking priv->current_cancel_invocation value.

Add tests to verify the race.
2021-01-25 18:18:39 +01:00
32b70c0edc device: Add an unique function to check if we can stop the current action 2021-01-25 18:18:13 +01:00
ff798edc51 device: Move duplicated code for stopping a stoppable action into a function
We can handle this in a generic way for all the cancellable cases.
2021-01-22 22:06:07 +01:00
56436fb8b1 device: Always use stoppable_action_completed to terminate actions
Avoid having repeated code for doing the same, nothing changes as before
we were doing the same only in case we had not a cancellable set.
2021-01-22 22:06:01 +01:00