cabbage/rvbox
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

test: guard Windows active-session fixture isolation

Browse Source
This commit is contained in:
cabbage
2026-09-09 07:20:48 +00:00
parent 6866adf0c1
commit 68ddc9d297
3 changed files with 21 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/implementation-plan.v1.md
+5 -2
View File
@@ -837,8 +837,11 @@ in a mode-0600 host-side password file, and preserve the normal Windows 10
The harness verifies that token and fails closed if policy filters it; do not
globally disable UAC or use a bypass. `test-host install` uses that identity
only to execute the staged real `rvbox.exe --install-service` path and proves it
by polling SCM. It is not an RVBox product process, a service/broker, or a Task
Scheduler dependency, and it never enters the daemon's command-context choice.
by polling SCM. It then requires that the provisioning identity is absent from
`query user`; otherwise reset before any active-session command test, because a
second logon could contaminate WTS candidate selection. It is not an RVBox
product process, a service/broker, or a Task Scheduler dependency, and it never
enters the daemon's command-context choice.
The normal active `rvboxtest` session remains the target for execution-role
tests. The consent-prompt branch itself remains an interactive UAC test; an
invisible Guest Control session must never answer it.
docs/testing-vm.md
+6 -2
View File
@@ -187,8 +187,12 @@ remain mode `0600` on Helium and neither value is recorded in run
reports or artifacts. `test-host install` first verifies that the reset guest
has no `RVBoxClient`, checks the provisioner's High Mandatory Level, invokes
the actual staged `rvbox.exe --install-service --config ...`, and polls SCM for
`RUNNING`. `run` may then exercise reconfigure/start/restart paths. Snapshot
reset removes the installed service and all RVBox data again.
`RUNNING`. It then checks that the provisioning account is no longer present in
`query user`. A lingering Administrator session could become a second WTS
candidate and contaminate `ACTIVE_USER` / `ACTIVE_USER_ELEVATED` tests, so the
harness fails before command dispatch and the run must reset. `run` may then
exercise reconfigure/start/restart paths. Snapshot reset removes the installed
service and all RVBox data again.
The provisioner is fixture administration only: it is not shipped with RVBox,
not a product service/broker, not a Task Scheduler dependency, and never