package rootstate

import (
	"errors"
	"os"
	"path/filepath"
	"testing"

	"golang.org/x/sys/unix"
)

func TestPlan14ProofBindingFileProvenance(t *testing.T) {
	t.Run("root-owned regular file", func(t *testing.T) {
		for _, path := range []string{"/", "/usr", "/usr/bin", "/usr/bin/true"} {
			var st unix.Stat_t
			if err := unix.Lstat(path, &st); err != nil {
				t.Fatal(err)
			}
			if st.Uid != 0 {
				t.Skipf("root-owned fixture unavailable: %s uid=%d", path, st.Uid)
			}
		}
		f, err := OpenTrustedFile("/usr/bin/true")
		if err != nil {
			t.Fatal(err)
		}
		f.Close()
	})
	path := filepath.Join(t.TempDir(), "unit.service")
	if err := os.WriteFile(path, []byte("[Service]\n"), 0644); err != nil {
		t.Fatal(err)
	}
	if f, err := OpenTrustedFile(path); err == nil {
		f.Close()
		t.Fatal("accepted a unit under a writable/nonroot ancestor")
	}
	for _, path := range []string{"relative", "/etc/../etc/passwd", "/"} {
		if _, err := OpenTrustedFile(path); !errors.Is(err, os.ErrPermission) {
			t.Fatalf("%q: %v", path, err)
		}
	}
}