nagai/fune
3
0
Fork 0
forked from mirrors/gecko-dev
Code Pull requests Activity

Bug 1751494 - Add test for win32k lockdown r=bobowen

Browse source 
I generated the tests using a script, which I'm checking in
so it's not lost.

Differential Revision: https://phabricator.services.mozilla.com/D137326
This commit is contained in:
Tom Ritter 2022-02-02 16:33:11 +00:00
parent 031bff7b2d
commit 597513d1a2
5 changed files with 3101 additions and 0 deletions
repo.diff.show_diff_stats Download patch file Download diff file Expand all files Collapse all files

216
toolkit/xre/test/marionette/gen_win32k_tests.py Normal file
View file

@ -0,0 +1,216 @@
#!/usr/bin/env python3
import re
RE_DEFAULT = re.compile(r"\[D=([TF])\] ")
RE_TRANSITION = re.compile(r"([a-zA-Z0-9 \[\]=#_-]+) *->(.*)")
RE_ASSERTION = re.compile(
r"\[A S=([a-zA-Z01_]+) SS=([a-zA-Z01_]+) ES=([a-zA-Z01_]+) P=([a-zA-Z_]+) ESP=([a-zA-Z_]+)\]"
)
RE_ASSERTION_SHORTHAND = re.compile(r"\[A#([0-9T]+)\]")
# ======================================================================
# ======================================================================
testnum = 1
def start_test(line):
global testnum
output.write(
"""
def test_{0}(self):
# {1}...\n""".format(
testnum, line[0:80]
)
)
testnum += 1
def set_default(d):
output.write(
"""
if self.default_is is not {0}:
return\n""".format(
"True" if d == "T" else "False"
)
)
def enroll(e):
if e.endswith("-C"):
e = e[:-2]
output.write("\n # Re-set enrollment pref, like Normandy would do\n")
output.write(
" self.set_enrollment_status(ExperimentStatus.ENROLLED_{0})\n".format(
e.upper()
)
)
def set_pref(enabled):
output.write(
"\n self.marionette.set_pref(Prefs.WIN32K, {0})\n".format(str(enabled))
)
def set_e10s(enable):
if enable:
output.write(
"""
app_version = self.execute_script("return Services.appinfo.version")
self.restart(env={ENV_DISABLE_E10S: app_version})
self.set_env(ENV_DISABLE_E10S, "null")
"""
)
else:
raise Exception("Not implemented")
def set_header(enable):
if enable:
output.write(
"""
self.restart(env={ENV_DISABLE_WIN32K: "1"})
"""
)
else:
output.write(
"""
self.set_env(ENV_DISABLE_WIN32K, "")
"""
)
def set_bad_requirements(enabled):
output.write(
"""
self.marionette.set_pref(Prefs.WEBGL, {0})
""".format(
"False" if enabled else "True"
)
)
def restart():
output.write("\n self.restart()\n")
def print_assertion(assertion):
if not assertion:
return
output.write(
"""
self.check_win32k_status(
status=ContentWin32kLockdownState.{0},
sessionStatus=ContentWin32kLockdownState.{1},
experimentStatus=ExperimentStatus.{2},
pref={3},
enrollmentStatusPref=ExperimentStatus.{4}
)\n""".format(
*assertion
)
)
# ======================================================================
# ======================================================================
TESTS = open("win32k_tests.txt", "r").readlines()
output = open("test_win32k_enrollment.py", "w")
header = open("test_win32k_enrollment.template.py", "r")
for l in header:
output.write(l)
mappings = {}
for line in TESTS:
line = line.strip()
if not line:
continue
if line.startswith("#"):
continue
elif line.startswith("> "):
line = line[2:]
key, value = line.split(":")
mappings[key.strip()] = value.strip()
continue
elif line.startswith("-"):
line = line[1:].strip()
elif line.startswith("+"):
line = line[1:].strip()
import pdb
pdb.set_trace()
else:
raise Exception("unknown line type: " + line)
# We can't handle Safe Mode right now
if "Safe Mode" in line:
continue
# If we have no assertions defined, skip the test entirely
if "[A" not in line:
continue
if not RE_DEFAULT.match(line):
raise Exception("'{0}' does not match the default regex".format(line))
default = RE_DEFAULT.search(line).groups(1)[0]
start_test(line)
set_default(default)
line = line[6:]
while line:
# this is a horrible hack for the line ending to avoid making the
# regex more complicated and having to fix it
if not line.endswith(" ->"):
line += " ->"
groups = RE_TRANSITION.search(line).groups()
start = groups[0].strip()
end = groups[1].strip()
if RE_ASSERTION.search(start):
assertion = RE_ASSERTION.search(start).groups()
start = start[0 : start.index("[")].strip()
elif RE_ASSERTION_SHORTHAND.search(start):
key = RE_ASSERTION_SHORTHAND.search(start).groups()[0]
assertion = RE_ASSERTION.search(mappings[key]).groups()
start = start[0 : start.index("[")].strip()
else:
assertion = ""
if start == "Nothing":
pass
elif start.startswith("Enrolled "):
enroll(start[9:])
elif start == "E10S":
set_e10s(True)
elif start == "Header-On":
set_header(True)
elif start == "Header-Off":
set_header(False)
elif start == "Bad Requirements":
set_bad_requirements(True)
elif start == "Restart":
restart()
elif start == "On":
set_pref(True)
elif start == "Off":
set_pref(False)
else:
raise Exception("Unknown Action: " + start)
print_assertion(assertion)
line = end.strip()
if RE_ASSERTION.match(line):
print_assertion(RE_ASSERTION.search(line).groups())
elif RE_ASSERTION_SHORTHAND.search(line):
key = RE_ASSERTION_SHORTHAND.search(line).groups()[0]
print_assertion(RE_ASSERTION.search(mappings[key]).groups())

2
toolkit/xre/test/marionette/marionette.ini
View file

@ -1,2 +1,4 @@
[test_fission_autostart.py]
[test_win32k_enrollment.py]
skip-if = os != 'win'
[test_exitcode.py]

2509
toolkit/xre/test/marionette/test_win32k_enrollment.py Normal file
View file

File diff suppressed because it is too large Load diff

207
toolkit/xre/test/marionette/test_win32k_enrollment.template.py Normal file
View file

@ -0,0 +1,207 @@
from __future__ import absolute_import, print_function
from marionette_harness import MarionetteTestCase
from contextlib import contextmanager
class ExperimentStatus:
UNENROLLED = 0
ENROLLED_CONTROL = 1
ENROLLED_TREATMENT = 2
DISQUALIFIED = 3
class ContentWin32kLockdownState:
LockdownEnabled = 1
MissingWebRender = 2
OperatingSystemNotSupported = 3
PrefNotSet = 4
MissingRemoteWebGL = 5
MissingNonNativeTheming = 6
DisabledByEnvVar = 7
DisabledBySafeMode = 8
DisabledByE10S = 9
DisabledByUserPref = 10
EnabledByUserPref = 11
DisabledByControlGroup = 12
EnabledByTreatmentGroup = 13
DisabledByDefault = 14
EnabledByDefault = 15
class Prefs:
ENROLLMENT_STATUS = "security.sandbox.content.win32k-experiment.enrollmentStatus"
STARTUP_ENROLLMENT_STATUS = (
"security.sandbox.content.win32k-experiment.startupEnrollmentStatus"
)
WIN32K = "security.sandbox.content.win32k-disable"
WEBGL = "webgl.out-of-process"
ENV_DISABLE_WIN32K = "MOZ_ENABLE_WIN32K"
ENV_DISABLE_E10S = "MOZ_FORCE_DISABLE_E10S"
class TestWin32kAutostart(MarionetteTestCase):
SANDBOX_NAME = "win32k-autostart"
def execute_script(self, code, *args, **kwargs):
with self.marionette.using_context(self.marionette.CONTEXT_CHROME):
return self.marionette.execute_script(
code, new_sandbox=False, sandbox=self.SANDBOX_NAME, *args, **kwargs
)
def get_win32k_status(self):
return self.execute_script(
r"""
let win = Services.wm.getMostRecentWindow("navigator:browser");
let ses = "security.sandbox.content.win32k-experiment.startupEnrollmentStatus";
return {
win32kSessionStatus: Services.appinfo.win32kSessionStatus,
win32kStatus: Services.appinfo.win32kLiveStatusTestingOnly,
win32kExperimentStatus: Services.appinfo.win32kExperimentStatus,
win32kPref: Services.prefs.getBoolPref("security.sandbox.content.win32k-disable"),
win32kStartupEnrollmentStatusPref: Services.prefs.getIntPref(ses),
};
"""
)
def check_win32k_status(
self, status, sessionStatus, experimentStatus, pref, enrollmentStatusPref
):
# We CANNOT check win32kEnrollmentStatusPref after a restart because we only set this
# pref on the default branch, and it goes away after a restart, so we only check
# the startupEnrollmentStatusPref
expected = {
"win32kSessionStatus": sessionStatus,
"win32kStatus": status,
"win32kExperimentStatus": experimentStatus,
"win32kPref": pref,
"win32kStartupEnrollmentStatusPref": enrollmentStatusPref,
}
status = self.get_win32k_status()
for prop, value in expected.items():
self.assertEqual(
status[prop],
value,
"%s should have the value `%r`, but has `%r`"
% (prop, value, status[prop]),
)
def set_env(self, env, value):
self.execute_script(
"env.set(arguments[0], arguments[1]);", script_args=(env, value)
)
def get_env(self, env):
return self.execute_script("return env.get(arguments[0]);", script_args=(env,))
def set_enrollment_status(self, status):
self.marionette.set_pref(Prefs.ENROLLMENT_STATUS, status, default_branch=True)
updated_status = self.marionette.get_pref(Prefs.ENROLLMENT_STATUS)
self.assertTrue(
status == updated_status or updated_status == ExperimentStatus.DISQUALIFIED
)
startup_status = self.marionette.get_pref(Prefs.STARTUP_ENROLLMENT_STATUS)
self.assertEqual(
startup_status,
updated_status,
"Startup enrollment status (%r) should match "
"session status (%r)" % (startup_status, updated_status),
)
def restart(self, prefs=None, env=None):
if prefs:
self.marionette.set_prefs(prefs)
if env:
for name, value in env.items():
self.set_env(name, value)
self.marionette.restart(in_app=True, clean=False)
self.setUpSession()
# Sanity check our environment.
if prefs:
for key, val in prefs.items():
if val is not None:
self.assertEqual(self.marionette.get_pref(key), val)
if env:
for key, val in env.items():
self.assertEqual(self.get_env(key), val or "")
def setUpSession(self):
self.marionette.set_context(self.marionette.CONTEXT_CHROME)
self.execute_script(
r"""
// We're running in a function, in a sandbox, that inherits from an
// X-ray wrapped window. Anything we want to be globally available
// needs to be defined on that window.
ChromeUtils.import("resource://gre/modules/Services.jsm", window);
window.env = Cc["@mozilla.org/process/environment;1"]
.getService(Ci.nsIEnvironment);
"""
)
@contextmanager
def full_restart(self):
profile = self.marionette.instance.profile
try:
self.marionette.quit(in_app=True, clean=False)
yield profile
finally:
self.marionette.start_session()
self.setUpSession()
def setUp(self):
super(TestWin32kAutostart, self).setUp()
# If we have configured marionette to require a particular value for
# `win32k.autostart`, remove it as a forced pref until `tearDown`, and
# perform a clean restart, so we run this test without the pref
# pre-configured.
self.win32kRequired = None
if Prefs.WIN32K in self.marionette.instance.required_prefs:
self.win32kRequired = self.marionette.instance.required_prefs[Prefs.WIN32K]
del self.marionette.instance.required_prefs[Prefs.WIN32K]
self.marionette.restart(clean=True)
self.setUpSession()
# Marionette doesn't let you set preferences on the default branch before startup
# so we can't test the default=False and default=True scenarios in one test
# What we can do is generate all the tests, and then only run the runs for which
# the default is. (And run the other ones locally to make sure they work before
# we land it.)
prefJS = 'return Services.prefs.getBoolPref("security.sandbox.content.win32k-disable");'
self.default_is = self.execute_script(prefJS)
if self.default_is is False:
# Win32k status must start out with `disabledByDefault`
self.check_win32k_status(
status=ContentWin32kLockdownState.DisabledByDefault,
sessionStatus=ContentWin32kLockdownState.DisabledByDefault,
experimentStatus=ExperimentStatus.UNENROLLED,
pref=False,
enrollmentStatusPref=ExperimentStatus.UNENROLLED,
)
else:
# Win32k status must start out with `enabledByDefault`
self.check_win32k_status(
status=ContentWin32kLockdownState.EnabledByDefault,
sessionStatus=ContentWin32kLockdownState.EnabledByDefault,
experimentStatus=ExperimentStatus.UNENROLLED,
pref=True,
enrollmentStatusPref=ExperimentStatus.UNENROLLED,
)
def tearDown(self):
if self.win32kRequired is not None:
self.marionette.instance.required_prefs[Prefs.WIN32K] = self.win32kRequired
self.marionette.restart(clean=True)
super(TestWin32kAutostart, self).tearDown()

167
toolkit/xre/test/marionette/win32k_tests.txt Normal file
View file

@ -0,0 +1,167 @@
#############################################
# This file serves as the test case list for gen_win32k_tests.py
#############################################
# Only here for reference:
# MissingWebRender = 2
# OperatingSystemNotSupported = 3
# MissingRemoteWebGL = 5
# DisabledByEnvVar = 7
# DisabledBySafeMode = 8
# DisabledByE10S = 9
# DisabledByUserPref = 10
# EnabledByUserPref = 11
# DisabledByControlGroup = 12
# EnabledByTreatmentGroup = 13
# DisabledByDefault = 14
# EnabledByDefault = 15
# UNENROLLED
# ENROLLED_CONTROL
# ENROLLED_TREATMENT
# DISQUALIFIED
#############################################
# Assertion Mappings
# Shorthand values for the test cases below. Instead of writing out the whole thing
# you can just do [A#5]
> 1 : [A S=DisabledByDefault SS=DisabledByDefault ES=UNENROLLED P=False ESP=UNENROLLED]
> 1T : [A S=EnabledByDefault SS=EnabledByDefault ES=UNENROLLED P=True ESP=UNENROLLED]
> 2 : [A S=EnabledByDefault SS=EnabledByDefault ES=UNENROLLED P=True ESP=UNENROLLED]
> 3 : [A S=EnabledByUserPref SS=DisabledByDefault ES=UNENROLLED P=True ESP=UNENROLLED]
> 3T : [A S=EnabledByDefault SS=EnabledByDefault ES=UNENROLLED P=True ESP=UNENROLLED]
> 4 : [A S=EnabledByUserPref SS=EnabledByUserPref ES=UNENROLLED P=True ESP=UNENROLLED]
> 4T : [A S=EnabledByDefault SS=EnabledByDefault ES=UNENROLLED P=True ESP=UNENROLLED]
> 5 : [A S=DisabledByDefault SS=DisabledByDefault ES=UNENROLLED P=False ESP=ENROLLED_CONTROL]
> 5T : [A S=EnabledByDefault SS=EnabledByDefault ES=UNENROLLED P=True ESP=ENROLLED_CONTROL]
> 6 : [A S=DisabledByControlGroup SS=DisabledByControlGroup ES=ENROLLED_CONTROL P=False ESP=ENROLLED_CONTROL]
> 6T : [A S=DisabledByControlGroup SS=DisabledByControlGroup ES=ENROLLED_CONTROL P=True ESP=ENROLLED_CONTROL]
> 7 : [A S=DisabledByDefault SS=DisabledByDefault ES=UNENROLLED P=False ESP=ENROLLED_TREATMENT]
> 7T : [A S=EnabledByDefault SS=EnabledByDefault ES=UNENROLLED P=True ESP=ENROLLED_TREATMENT]
> 8 : [A S=EnabledByTreatmentGroup SS=EnabledByTreatmentGroup ES=ENROLLED_TREATMENT P=False ESP=ENROLLED_TREATMENT]
> 8T : [A S=EnabledByTreatmentGroup SS=EnabledByTreatmentGroup ES=ENROLLED_TREATMENT P=True ESP=ENROLLED_TREATMENT]
> 9 : [A S=MissingRemoteWebGL SS=DisabledByDefault ES=UNENROLLED P=False ESP=UNENROLLED]
> 9T : [A S=MissingRemoteWebGL SS=EnabledByDefault ES=UNENROLLED P=True ESP=UNENROLLED]
> 10 : [A S=MissingRemoteWebGL SS=MissingRemoteWebGL ES=UNENROLLED P=False ESP=UNENROLLED]
> 10T: [A S=MissingRemoteWebGL SS=MissingRemoteWebGL ES=UNENROLLED P=True ESP=UNENROLLED]
# TODO
# - win32k env var tests
#############################################
# Tests
# Syntax:
# [D=T] - is the default value for win32k lockdown pref 'false' or 'true'
# Action -> Action
# Valid Actions:
# Nothing
# Enrolled Control/Treatment
# On/Off (changes win32k pref)
# Restart
# E10s (Restarts with E10s disabled)
# Header-On - Restart with MOZ_ENABLE_WIN32K set
# Header-Off - unset MOZ_ENABLE_WIN32K but do not restart
# Bad Requirements - sets webg out of process to false, invalidating win32k
# Enrolled /Control/Treatment]-C:
# The enrollment pref is set by normandy on _every_ startup on the
# default branch, where it doesn't persist.
# This action represents normandy doing its normal set that
# occurs after a restart. If Normandy doesn't do it, the
# startupEnrollmentPref is set back to 0 after restart, which is expected.
# [A S= SS= ES= P= ESP=] - trigger an assertion check for the listed values
# S - 'Status' or the current value of calculating GetWin32kLockdownState()
# SS - 'Session Status' or the current value of set-once-at-startup static variable gWin32kStatus
# ES - 'Experiment Status' or the value of gWin32kExperimentStatus
# P - 'Pref' or the value of security.sandbox.content.win32k-disable
# ESP- 'Enrollment Status Pref' or the value of security.sandbox.content.win32k-experiment.startupEnrollmentStatus
# [A#5] - trigger an assertion check from the mapping table above
# Safe Mode tests are currently not generated, as I don't know how to make marionette restart in safe mode
#################
- [D=F] Nothing [A#1] -> Enrolled Control [A S=DisabledByDefault SS=DisabledByDefault ES=UNENROLLED P=False ESP=ENROLLED_CONTROL] -> Restart [A S=DisabledByControlGroup SS=DisabledByControlGroup ES=ENROLLED_CONTROL P=False ESP=ENROLLED_CONTROL]
- [D=F] Nothing [A#1] -> Enrolled Treatment [A S=DisabledByDefault SS=DisabledByDefault ES=UNENROLLED P=False ESP=ENROLLED_TREATMENT] -> Restart [A S=EnabledByTreatmentGroup SS=EnabledByTreatmentGroup ES=ENROLLED_TREATMENT P=False ESP=ENROLLED_TREATMENT]
- [D=F] Nothing [A#1] -> On [A S=EnabledByUserPref SS=DisabledByDefault ES=UNENROLLED P=True ESP=UNENROLLED] -> Restart [A S=EnabledByUserPref SS=EnabledByUserPref ES=UNENROLLED P=True ESP=UNENROLLED]
- [D=F] Nothing [A#1] -> Off [A#1] -> Restart [A#1]
- [D=F] Nothing [A#1] -> On -> Bad Requirements [A S=MissingRemoteWebGL SS=DisabledByDefault ES=UNENROLLED P=True ESP=UNENROLLED] -> Restart [A S=MissingRemoteWebGL SS=MissingRemoteWebGL ES=UNENROLLED P=True ESP=UNENROLLED]
- [D=F] Nothing [A#1] -> On -> E10S [A S=DisabledByE10S SS=DisabledByE10S ES=UNENROLLED P=True ESP=UNENROLLED]
- [D=F] Nothing [A#1] -> On -> Header-On [A S=DisabledByEnvVar SS=DisabledByEnvVar ES=UNENROLLED P=True ESP=UNENROLLED] -> Header-Off [A S=EnabledByUserPref SS=DisabledByEnvVar ES=UNENROLLED P=True ESP=UNENROLLED]
- [D=F] Nothing [A#1] -> Safe Mode -> Restart
#################
- [D=T] Nothing [A#1T] -> Enrolled Control [A S=EnabledByDefault SS=EnabledByDefault ES=UNENROLLED P=True ESP=ENROLLED_CONTROL] -> Restart [A S=DisabledByControlGroup SS=DisabledByControlGroup ES=ENROLLED_CONTROL P=True ESP=ENROLLED_CONTROL]
- [D=T] Nothing [A#1T] -> Enrolled Treatment [A S=EnabledByTreatmentGroup SS=EnabledByDefault ES=UNENROLLED P=True ESP=ENROLLED_TREATMENT] -> Restart [A S=EnabledByTreatmentGroup SS=EnabledByTreatmentGroup ES=ENROLLED_TREATMENT P=True ESP=ENROLLED_TREATMENT]
- [D=T] Nothing [A#1T] -> On [A S=EnabledByDefault SS=EnabledByDefault ES=UNENROLLED P=True ESP=UNENROLLED] -> Restart [A S=EnabledByDefault SS=EnabledByDefault ES=UNENROLLED P=True ESP=UNENROLLED]
- [D=T] Nothing [A#1T] -> Off [A S=DisabledByUserPref SS=EnabledByDefault ES=UNENROLLED P=False ESP=UNENROLLED] -> Restart [A S=DisabledByUserPref SS=DisabledByUserPref ES=UNENROLLED P=False ESP=UNENROLLED]
- [D=T] Nothing [A#1T] -> On -> Bad Requirements [A S=MissingRemoteWebGL SS=EnabledByDefault ES=UNENROLLED P=True ESP=UNENROLLED] -> Restart [A S=MissingRemoteWebGL SS=MissingRemoteWebGL ES=UNENROLLED P=True ESP=UNENROLLED]
- [D=T] Nothing [A#1T] -> On -> E10S [A S=DisabledByE10S SS=DisabledByE10S ES=UNENROLLED P=True ESP=UNENROLLED]
- [D=T] Nothing [A#1T] -> On -> Header-On [A S=DisabledByEnvVar SS=DisabledByEnvVar ES=UNENROLLED P=True ESP=UNENROLLED] -> Header-Off [A S=EnabledByDefault SS=DisabledByEnvVar ES=UNENROLLED P=True ESP=UNENROLLED]
- [D=T] Nothing [A#1T] -> Safe Mode -> Restart
#################
- [D=F] On [A#3] -> Restart [A#4] -> Enrolled Control [A S=EnabledByUserPref SS=EnabledByUserPref ES=UNENROLLED P=True ESP=ENROLLED_CONTROL] -> Restart [A S=EnabledByUserPref SS=EnabledByUserPref ES=DISQUALIFIED P=True ESP=DISQUALIFIED]
- [D=F] On [A#3] -> Restart [A#4] -> Enrolled Treatment [A S=EnabledByUserPref SS=EnabledByUserPref ES=UNENROLLED P=True ESP=ENROLLED_TREATMENT] -> Restart [A S=EnabledByUserPref SS=EnabledByUserPref ES=DISQUALIFIED P=True ESP=DISQUALIFIED]
- [D=F] On [A#3] -> Restart [A#4] -> Off [A S=DisabledByDefault SS=EnabledByUserPref ES=UNENROLLED P=False ESP=UNENROLLED] -> Restart [A S=DisabledByDefault SS=DisabledByDefault ES=UNENROLLED P=False ESP=UNENROLLED]
- [D=F] On [A#3] -> Restart [A#4] -> Bad Requirements [A S=MissingRemoteWebGL SS=EnabledByUserPref ES=UNENROLLED P=True ESP=UNENROLLED]
- [D=F] On [A#3] -> Restart [A#4] -> E10S [A S=DisabledByE10S SS=DisabledByE10S ES=UNENROLLED P=True ESP=UNENROLLED] -> Restart [A#4]
- [D=F] On [A#3] -> Restart [A#4] -> Header-On [A S=DisabledByEnvVar SS=DisabledByEnvVar ES=UNENROLLED P=True ESP=UNENROLLED] -> Header-Off -> Restart [A#4]
- [D=F] On [A#3] -> Restart [A#4] -> Safe Mode
#################
- [D=T] On [A#3T] -> Restart [A#4T] -> Enrolled Control [A S=EnabledByDefault SS=EnabledByDefault ES=UNENROLLED P=True ESP=ENROLLED_CONTROL] -> Restart [A S=DisabledByControlGroup SS=DisabledByControlGroup ES=ENROLLED_CONTROL P=True ESP=ENROLLED_CONTROL]
- [D=T] On [A#3T] -> Restart [A#4T] -> Enrolled Treatment [A S=EnabledByTreatmentGroup SS=EnabledByDefault ES=UNENROLLED P=True ESP=ENROLLED_TREATMENT] -> Restart [A S=EnabledByTreatmentGroup SS=EnabledByTreatmentGroup ES=ENROLLED_TREATMENT P=True ESP=ENROLLED_TREATMENT]
- [D=T] On [A#3T] -> Restart [A#4T] -> Off [A S=DisabledByUserPref SS=EnabledByDefault ES=UNENROLLED P=False ESP=UNENROLLED] -> Restart [A S=DisabledByUserPref SS=DisabledByUserPref ES=UNENROLLED P=False ESP=UNENROLLED]
- [D=T] On [A#3T] -> Restart [A#4T] -> Bad Requirements [A S=MissingRemoteWebGL SS=EnabledByDefault ES=UNENROLLED P=True ESP=UNENROLLED]
- [D=T] On [A#3T] -> Restart [A#4T] -> E10S [A S=DisabledByE10S SS=DisabledByE10S ES=UNENROLLED P=True ESP=UNENROLLED] -> Restart [A#4T]
- [D=T] On [A#3T] -> Restart [A#4T] -> Header-On [A S=DisabledByEnvVar SS=DisabledByEnvVar ES=UNENROLLED P=True ESP=UNENROLLED] -> Header-Off -> Restart [A#4T]
- [D=T] On [A#3T] -> Restart [A#4T] -> Safe Mode
#################
- [D=F] Enrolled Control [A#5] -> Restart [A#6] -> Enrolled Control-C -> On [A S=EnabledByUserPref SS=DisabledByControlGroup ES=ENROLLED_CONTROL P=True ESP=DISQUALIFIED] -> Restart [A S=EnabledByUserPref SS=EnabledByUserPref ES=DISQUALIFIED P=True ESP=DISQUALIFIED]
- [D=F] Enrolled Control [A#5] -> Restart [A#6] -> Off [A#6]
- [D=F] Enrolled Control [A#5] -> Restart [A#6] -> Enrolled Control-C -> Bad Requirements [A S=MissingRemoteWebGL SS=DisabledByControlGroup ES=ENROLLED_CONTROL P=False ESP=ENROLLED_CONTROL] -> Restart [A S=MissingRemoteWebGL SS=MissingRemoteWebGL ES=DISQUALIFIED P=False ESP=DISQUALIFIED]
- [D=F] Enrolled Control [A#5] -> Restart [A#6] -> Enrolled Control-C -> E10S [A S=DisabledByE10S SS=DisabledByE10S ES=ENROLLED_CONTROL P=False ESP=ENROLLED_CONTROL] -> Enrolled Control-C -> Restart [A#6]
- [D=F] Enrolled Control [A#5] -> Restart [A#6] -> Enrolled Control-C -> Header-On [A S=DisabledByEnvVar SS=DisabledByEnvVar ES=ENROLLED_CONTROL P=False ESP=ENROLLED_CONTROL] -> Header-Off -> Enrolled Control-C -> Restart [A#6]
- [D=F] Enrolled Control [A#5] -> Restart [A#6] -> Safe Mode ->
#################
- [D=T] Enrolled Control [A#5T] -> Restart [A#6T] -> Enrolled Control-C -> On [A S=DisabledByControlGroup SS=DisabledByControlGroup ES=ENROLLED_CONTROL P=True ESP=ENROLLED_CONTROL] -> Restart [A S=DisabledByControlGroup SS=DisabledByControlGroup ES=ENROLLED_CONTROL P=True ESP=ENROLLED_CONTROL]
- [D=T] Enrolled Control [A#5T] -> Restart [A#6T] -> Off [A S=DisabledByUserPref SS=DisabledByControlGroup ES=DISQUALIFIED P=False ESP=DISQUALIFIED]
- [D=T] Enrolled Control [A#5T] -> Restart [A#6T] -> Enrolled Control-C -> Bad Requirements [A S=MissingRemoteWebGL SS=DisabledByControlGroup ES=UNENROLLED P=True ESP=ENROLLED_CONTROL] -> Restart [A S=MissingRemoteWebGL SS=MissingRemoteWebGL ES=DISQUALIFIED P=True ESP=DISQUALIFIED]
- [D=T] Enrolled Control [A#5T] -> Restart [A#6T] -> Enrolled Control-C -> E10S [A S=DisabledByE10S SS=DisabledByE10S ES=ENROLLED_CONTROL P=True ESP=ENROLLED_CONTROL] -> Enrolled Control-C -> Restart [A#6T]
- [D=T] Enrolled Control [A#5T] -> Restart [A#6T] -> Enrolled Control-C -> Header-On [A S=DisabledByEnvVar SS=DisabledByEnvVar ES=ENROLLED_CONTROL P=True ESP=ENROLLED_CONTROL] -> Header-Off -> Enrolled Control-C -> Restart [A#6T]
- [D=T] Enrolled Control [A#5T] -> Restart [A#6T] -> Safe Mode ->
#################
- [D=F] Enrolled Treatment [A#7] -> Restart [A#8] -> Enrolled Treatment-C -> On [A S=EnabledByUserPref SS=EnabledByTreatmentGroup ES=ENROLLED_TREATMENT P=True ESP=DISQUALIFIED] -> Restart [A S=EnabledByUserPref SS=EnabledByUserPref ES=DISQUALIFIED P=True ESP=DISQUALIFIED]
- [D=F] Enrolled Treatment [A#7] -> Restart [A#8] -> Enrolled Treatment-C -> Off [A#8] -> Restart [A#8]
- [D=F] Enrolled Treatment [A#7] -> Restart [A#8] -> Enrolled Treatment-C -> Bad Requirements [A S=MissingRemoteWebGL SS=EnabledByTreatmentGroup ES=ENROLLED_TREATMENT P=False ESP=ENROLLED_TREATMENT] -> Restart [A S=MissingRemoteWebGL SS=MissingRemoteWebGL ES=DISQUALIFIED P=False ESP=DISQUALIFIED]
- [D=F] Enrolled Treatment [A#7] -> Restart [A#8] -> Enrolled Treatment-C -> E10S [A S=DisabledByE10S SS=DisabledByE10S ES=ENROLLED_TREATMENT P=False ESP=ENROLLED_TREATMENT] -> Enrolled Treatment-C -> Restart [A#8]
- [D=F] Enrolled Treatment [A#7] -> Restart [A#8] -> Enrolled Treatment-C -> Header-On [A S=DisabledByEnvVar SS=DisabledByEnvVar ES=ENROLLED_TREATMENT P=False ESP=ENROLLED_TREATMENT] -> Header-Off -> Enrolled Treatment-C -> Restart [A#8]
- [D=F] Enrolled Treatment [A#7] -> Restart [A#8] -> Safe Mode ->
#################
- [D=T] Enrolled Treatment [A#7T] -> Restart [A#8T] -> Enrolled Treatment-C -> On [A S=EnabledByTreatmentGroup SS=EnabledByTreatmentGroup ES=UNENROLLED P=True ESP=ENROLLED_TREATMENT] -> Restart [A S=EnabledByTreatmentGroup SS=EnabledByTreatmentGroup ES=ENROLLED_TREATMENT P=True ESP=ENROLLED_TREATMENT]
- [D=T] Enrolled Treatment [A#7T] -> Restart [A#8T] -> Enrolled Treatment-C -> Off [A S=DisabledByUserPref SS=EnabledByTreatmentGroup ES=DISQUALIFIED P=False ESP=DISQUALIFIED] -> Restart [A S=DisabledByUserPref SS=DisabledByUserPref ES=DISQUALIFIED P=False ESP=DISQUALIFIED]
- [D=T] Enrolled Treatment [A#7T] -> Restart [A#8T] -> Enrolled Treatment-C -> Bad Requirements [A S=MissingRemoteWebGL SS=EnabledByTreatmentGroup ES=ENROLLED_TREATMENT P=True ESP=ENROLLED_TREATMENT] -> Restart [A S=MissingRemoteWebGL SS=MissingRemoteWebGL ES=DISQUALIFIED P=True ESP=DISQUALIFIED]
- [D=T] Enrolled Treatment [A#7T] -> Restart [A#8T] -> Enrolled Treatment-C -> E10S [A S=DisabledByE10S SS=DisabledByE10S ES=ENROLLED_TREATMENT P=True ESP=ENROLLED_TREATMENT] -> Enrolled Treatment-C -> Restart [A#8T]
- [D=T] Enrolled Treatment [A#7T] -> Restart [A#8T] -> Enrolled Treatment-C -> Header-On [A S=DisabledByEnvVar SS=DisabledByEnvVar ES=ENROLLED_TREATMENT P=True ESP=ENROLLED_TREATMENT] -> Header-Off -> Enrolled Treatment-C -> Restart [A#8T]
- [D=T] Enrolled Treatment [A#7T] -> Restart [A#8T] -> Safe Mode ->
#################
- [D=F] Bad Requirements [A#9] -> Restart [A#10] -> Enrolled Control [A S=MissingRemoteWebGL SS=MissingRemoteWebGL ES=UNENROLLED P=False ESP=ENROLLED_CONTROL] -> Restart [A S=MissingRemoteWebGL SS=MissingRemoteWebGL ES=DISQUALIFIED P=False ESP=DISQUALIFIED]
- [D=F] Bad Requirements [A#9] -> Restart [A#10] -> Enrolled Treatment [A S=MissingRemoteWebGL SS=MissingRemoteWebGL ES=UNENROLLED P=False ESP=ENROLLED_TREATMENT] -> Restart [A S=MissingRemoteWebGL SS=MissingRemoteWebGL ES=DISQUALIFIED P=False ESP=DISQUALIFIED]
- [D=F] Bad Requirements [A#9] -> Restart [A#10] -> On [A S=MissingRemoteWebGL SS=MissingRemoteWebGL ES=UNENROLLED P=True ESP=UNENROLLED]
- [D=F] Bad Requirements [A#9] -> Restart [A#10] -> Off [A S=MissingRemoteWebGL SS=MissingRemoteWebGL ES=UNENROLLED P=False ESP=UNENROLLED]
#################
- [D=T] Bad Requirements [A#9T] -> Restart [A#10T] -> Enrolled Control [A S=MissingRemoteWebGL SS=MissingRemoteWebGL ES=UNENROLLED P=True ESP=ENROLLED_CONTROL] -> Restart [A S=MissingRemoteWebGL SS=MissingRemoteWebGL ES=DISQUALIFIED P=True ESP=DISQUALIFIED]
- [D=T] Bad Requirements [A#9T] -> Restart [A#10T] -> Enrolled Treatment [A S=MissingRemoteWebGL SS=MissingRemoteWebGL ES=UNENROLLED P=True ESP=ENROLLED_TREATMENT] -> Restart [A S=MissingRemoteWebGL SS=MissingRemoteWebGL ES=DISQUALIFIED P=True ESP=DISQUALIFIED]
- [D=T] Bad Requirements [A#9T] -> Restart [A#10T] -> On [A S=MissingRemoteWebGL SS=MissingRemoteWebGL ES=UNENROLLED P=True ESP=UNENROLLED]
- [D=T] Bad Requirements [A#9T] -> Restart [A#10T] -> Off [A S=MissingRemoteWebGL SS=MissingRemoteWebGL ES=UNENROLLED P=False ESP=UNENROLLED]