~rayveldkamp/qa-regression-testing:tests/dockerio-cve-2021-41092

Last commit made on 2021-11-05
Get this branch:
git clone -b tests/dockerio-cve-2021-41092 https://git.launchpad.net/~rayveldkamp/qa-regression-testing
Only Ray Veldkamp can upload to this branch. If you are Ray Veldkamp please log in for upload directions.

Branch merges

Branch information

Name:
tests/dockerio-cve-2021-41092
Repository:
lp:~rayveldkamp/qa-regression-testing

Recent commits

23209a6... by Ray Veldkamp

Replace shell /etc/hosts modification with testlib.config_replace()

fc4350b... by Ray Veldkamp

Ensure certificate is added and add registry host to daemon.json conf

53e01ee... by Ray Veldkamp

Update to dynamically generate cert/key each test run

3e669f3... by Ray Veldkamp

Add python3-pexpect to QRT dependencies

759b8c5... by Ray Veldkamp

Add test for CVE-2021-41092

Add a regression test for CVE-2021-41092 to ensure that bad local
credential store configuration, don't result in login attempts to
registry-1.docker.io being made. This test also includes a TLS
certificate, for hosting a local HTTPS server for testing.

89f21bb... by Marc Deslauriers

added multipurpose vm setup notes for focal

ac44f43... by Steve Beattie

test-mailman.py/test_cve_2010_3089: disable no longer effective check

Apache has made some changes to not pass through errors, so that may be
why the escaped string isn't being seen in the this test. Mark as
expecting it to fail.

Signed-off-by: Steve Beattie <email address hidden>

6703d3d... by Steve Beattie

test-mailman.py: disable subscription secret

This protection, add between bionic and focal, prevents statuc
subscription URL requests from working.

Signed-off-by: Steve Beattie <email address hidden>

d0daf3c... by Steve Beattie

test-mailman.py: abstract out list creation

Did not convert the invalid list name creation test, but probably should
do so, too.

Signed-off-by: Steve Beattie <email address hidden>

3f25750... by Steve Beattie

test-mailman.py: better debug info on sub request search

Signed-off-by: Steve Beattie <email address hidden>