#213 Add check for keys permissions in the test in governance drep ke…

…y-gen
IntersectMBO · Oct 24, 2023 · 8f3e163 · 8f3e163
1 parent 8465389
commit 8f3e163
Show file tree

Hide file tree

Showing 2 changed files with 15 additions and 0 deletions.
diff --git a/cardano-cli/cardano-cli.cabal b/cardano-cli/cardano-cli.cabal
@@ -357,6 +357,7 @@ test-suite cardano-cli-golden
                       , time
                       , transformers
                       , unordered-containers
+                      , unix
   build-tool-depends:   cardano-cli:cardano-cli
                       , tasty-discover:tasty-discover
 

diff --git a/cardano-cli/test/cardano-cli-golden/Test/Golden/Governance/DRep.hs b/cardano-cli/test/cardano-cli-golden/Test/Golden/Governance/DRep.hs
@@ -3,6 +3,10 @@
 module Test.Golden.Governance.DRep where
 
 import           Control.Monad (void)
+import           Data.Bits ((.&.))
+import           GHC.Stack (withFrozenCallStack)
+import           Numeric (showOct)
+import           System.Posix.Files (fileMode, getFileStatus)
 
 import           Test.Cardano.CLI.Util (execCardanoCLI, noteInputFile, noteTempFile, propertyOnce)
 
@@ -30,6 +34,16 @@ hprop_golden_governanceDRepKeyGen =
     H.assertFileOccurences 1 "Delegate Representative Verification Key" verificationKeyFile
     H.assertFileOccurences 1 "Delegate Representative Signing Key" signingKeyFile
 
+    vrfMode <- retrievePermissions verificationKeyFile
+    sgnMode <- retrievePermissions verificationKeyFile
+
+    vrfMode === "600"
+    sgnMode === "600"
+    where
+      retrievePermissions path = withFrozenCallStack $ do
+        mode <- H.evalIO $ fileMode <$> getFileStatus path
+        pure $ showOct (mode .&. 0o777) "" -- we only need the 3 lowest octets here
+
 hprop_golden_governance_drep_id_bech32 :: Property
 hprop_golden_governance_drep_id_bech32 =
   propertyOnce . H.moduleWorkspace "tmp" $ \tempDir -> do