import unittest
from pathlib import Path


class SystemdUnitTests(unittest.TestCase):
    def test_socket_directory_is_traversable_but_socket_remains_restricted(self):
        socket_unit = Path("systemd/netbox-store-agent.socket").read_text(encoding="utf-8")

        self.assertIn("DirectoryMode=0755", socket_unit)
        self.assertIn("SocketMode=0660", socket_unit)
        self.assertIn("SocketGroup=netbox", socket_unit)

    def test_state_traversal_does_not_relax_service_umask(self):
        service_unit = Path("systemd/netbox-store-agent.service").read_text(encoding="utf-8")

        self.assertIn("StateDirectoryMode=0711", service_unit)
        self.assertIn("RuntimeDirectoryMode=0755", service_unit)
        self.assertIn("UMask=0077", service_unit)


if __name__ == "__main__":
    unittest.main()