certbot/letsencrypt-auto-source/tests
Brad Warren d1330efe41
Print warning when certbot-auto has insecure permissions. (#6995)
This PR attempts to better inform people about the problem identified at https://community.letsencrypt.org/t/certbot-auto-deployment-best-practices/91979/.

I was hesitant to add the flag --no-permissions-check, however, if there's some obscure distro out there (or custom user setup) that has a strange users and groups, I didn't want us to either:

Have to put out a bug fix release
Refuse to fix the problem and let them deal with warnings on every run

* add check_permissions.py

* Update letsencrypt-auto.template.

* build letsencrypt-auto

* Add test_permissions_warnings to auto_test

* Allow uid/gid < 1000.

* Add --no-permissions-check to Certbot.

* Add --no-permissions-check to certbot-auto.

* Add test farm test that letsencrypt-auto is quiet.

As a bonus, this new test will catch problems like the one that the caused
0.33.1 point release.

* Update CHANGELOG about permissions check.

* Update permissions comment.

* Fix symlink handling.

* Use a better default in auto_test.py.
2019-04-30 10:45:03 -07:00
..
certs Rename letsencrypt_auto dir to match other dirs. 2016-01-08 16:26:25 -05:00
fake-letsencrypt Remove errant DS_Store. Ick. 2016-01-19 16:10:39 -05:00
__init__.py Explicitly add six as a dependency in letsencrypt-auto-source dockerfiles (#5808) 2018-03-29 15:34:38 -07:00
auto_test.py Print warning when certbot-auto has insecure permissions. (#6995) 2019-04-30 10:45:03 -07:00
centos6_tests.sh Fix --no-bootstrap on CentOS/RHEL 6 (#5476) 2018-01-24 22:23:20 -08:00
signing.key Rename letsencrypt_auto dir to match other dirs. 2016-01-08 16:26:25 -05:00