root_access_control.feature 2.0 KB

12345678910111213141516171819202122232425262728
  1. @product
  2. Feature: Root access control enforcement
  3. As a Tails user
  4. when I set an administration password in Tails Greeter
  5. I can use the password for attaining administrative privileges.
  6. But when I do not set an administration password
  7. I should not be able to attain administration privileges at all.
  8. Scenario: If an administrative password is set in Tails Greeter the live user should be able to run arbitrary commands with administrative privileges.
  9. Given I have started Tails from DVD without network and logged in with an administration password
  10. Then I should be able to run administration commands as the live user
  11. Scenario: If no administrative password is set in Tails Greeter the live user should not be able to run arbitrary commands administrative privileges.
  12. Given I have started Tails from DVD without network and logged in
  13. Then I should not be able to run administration commands as the live user with the "" password
  14. And I should not be able to run administration commands as the live user with the "amnesia" password
  15. And I should not be able to run administration commands as the live user with the "live" password
  16. Scenario: If an administrative password is set in Tails Greeter the live user should be able to get administrative privileges through PolicyKit
  17. Given I have started Tails from DVD without network and logged in with an administration password
  18. And running a command as root with pkexec requires PolicyKit administrator privileges
  19. Then I should be able to run a command as root with pkexec
  20. Scenario: If no administrative password is set in Tails Greeter the live user should not be able to get administrative privileges through PolicyKit with the standard passwords.
  21. Given I have started Tails from DVD without network and logged in
  22. And running a command as root with pkexec requires PolicyKit administrator privileges
  23. Then I should not be able to run a command as root with pkexec and the standard passwords