From c46ae24baae62b55577aac54deccd631fa134062 Mon Sep 17 00:00:00 2001
From: Colin Watson <cjwatson@debian.org>
Date: Tue, 27 Dec 2016 16:00:40 +0000
Subject: When running regression tests under autopkgtest, use a non-root user
 with passwordless sudo.

---
 debian/tests/regress | 27 +++++++++++++++++++++++++--
 1 file changed, 25 insertions(+), 2 deletions(-)

(limited to 'debian/tests')

diff --git a/debian/tests/regress b/debian/tests/regress
index 253541ad5..846482d62 100755
--- a/debian/tests/regress
+++ b/debian/tests/regress
@@ -1,10 +1,33 @@
 #! /bin/sh
 set -e
 
+if [ "$(id -un)" != openssh-tests ]; then
+	TMP="$ADTTMP/user"
+
+	cleanup () {
+		rm -rf "$TMP"
+		rm -f /etc/sudoers.d/openssh-tests
+		if id openssh-tests >/dev/null 2>&1; then
+			deluser --remove-home openssh-tests
+		fi
+	}
+	trap cleanup EXIT
+
+	adduser --disabled-password --gecos 'OpenSSH tests' openssh-tests
+	cat >/etc/sudoers.d/openssh-tests <<EOF
+openssh-tests ALL = (ALL:ALL) NOPASSWD: ALL
+EOF
+	chmod 440 /etc/sudoers.d/openssh-tests
+	mkdir -p "$TMP"
+	chown openssh-tests:openssh-tests "$TMP"
+	sudo -u openssh-tests env TMP="$TMP" "$0" "$@"
+	exit "$?"
+fi
+
 # Don't use "make tests"; we want to test the installed version.
 
-cp -a . "$ADTTMP/tree"
-cd "$ADTTMP/tree"
+cp -a . "$TMP/tree"
+cd "$TMP/tree"
 
 # We aren't actually going to use most of this build, but we need a basic
 # build tree in place in order to be able to build the regression tests.
-- 
cgit v1.2.3