empayre/fleet
14
0
Fork 0
mirror of https://github.com/empayre/fleet.git synced 2024-11-06 08:55:24 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Add unique host users to osquery-perf (#3255)

Browse Source 
* Add unique software option to osquery-perf

* Add unique host users

Co-authored-by: Tomas Touceda <chiiph@gmail.com>
This commit is contained in:
Lucas Manuel Rodriguez 2021-12-09 18:24:48 -03:00 committed by GitHub
parent b9c65abc6a
commit fac83f6b11
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 49 additions and 26 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

45
cmd/osquery-perf/agent.go
View File

@ -120,7 +120,8 @@ func (n *nodeKeyManager) Add(nodekey string) {
type agent struct {
agentIndex int
softwareCount softwareCount
softwareCount entityCount
userCount entityCount
policyPassProb float64
strings map[string]string
serverAddress string
@ -140,7 +141,7 @@ type agent struct {
QueryInterval time.Duration
}
type softwareCount struct {
type entityCount struct {
common int
unique int
}
@ -148,7 +149,7 @@ type softwareCount struct {
func newAgent(
agentIndex int,
serverAddress, enrollSecret string, templates *template.Template,
configInterval, queryInterval time.Duration, softwareCount softwareCount,
configInterval, queryInterval time.Duration, softwareCount, userCount entityCount,
policyPassProb float64,
) *agent {
transport := http.DefaultTransport.(*http.Transport).Clone()
@ -158,6 +159,7 @@ func newAgent(
agentIndex: agentIndex,
serverAddress: serverAddress,
softwareCount: softwareCount,
userCount: userCount,
strings: make(map[string]string),
policyPassProb: policyPassProb,
fastClient: fasthttp.Client{
@ -335,6 +337,36 @@ func (a *agent) CachedString(key string) string {
return val
}
func (a *agent) HostUsersMacOS() []fleet.HostUser {
groupNames := []string{"staff", "nobody", "wheel", "tty", "daemon"}
shells := []string{"/bin/zsh", "/bin/sh", "/usr/bin/false", "/bin/bash"}
commonUsers := make([]fleet.HostUser, a.userCount.common)
for i := 0; i < len(commonUsers); i++ {
commonUsers[i] = fleet.HostUser{
Uid: uint(i),
Username: fmt.Sprintf("Common_%d", i),
Type: "", // Empty for macOS.
GroupName: groupNames[i%len(groupNames)],
Shell: shells[i%len(shells)],
}
}
uniqueUsers := make([]fleet.HostUser, a.userCount.unique)
for i := 0; i < len(uniqueUsers); i++ {
uniqueUsers[i] = fleet.HostUser{
Uid: uint(i),
Username: fmt.Sprintf("Unique_%d_%d", a.agentIndex, i),
Type: "", // Empty for macOS.
GroupName: groupNames[i%len(groupNames)],
Shell: shells[i%len(shells)],
}
}
users := append(commonUsers, uniqueUsers...)
rand.Shuffle(len(users), func(i, j int) {
users[i], users[j] = users[j], users[i]
})
return users
}
func (a *agent) SoftwareMacOS() []fleet.Software {
commonSoftware := make([]fleet.Software, a.softwareCount.common)
for i := 0; i < len(commonSoftware); i++ {
@ -485,6 +517,8 @@ func main() {
nodeKeyFile := flag.String("node_key_file", "", "File with node keys to use")
commonSoftwareCount := flag.Int("common_software_count", 10, "Number of common of installed applications reported to fleet")
uniqueSoftwareCount := flag.Int("unique_software_count", 10, "Number of unique installed applications reported to fleet")
commonUserCount := flag.Int("common_user_count", 10, "Number of common host users reported to fleet")
uniqueUserCount := flag.Int("unique_user_count", 10, "Number of unique host users reported to fleet")
policyPassProb := flag.Float64("policy_pass_prob", 1.0, "Probability of policies to pass [0, 1]")
flag.Parse()
@ -510,9 +544,12 @@ func main() {
}
for i := 0; i < *hostCount; i++ {
a := newAgent(i, *serverURL, *enrollSecret, tmpl, *configInterval, *queryInterval, softwareCount{
a := newAgent(i+1, *serverURL, *enrollSecret, tmpl, *configInterval, *queryInterval, entityCount{
common: *commonSoftwareCount,
unique: *uniqueSoftwareCount,
}, entityCount{
common: *commonUserCount,
unique: *uniqueUserCount,
}, *policyPassProb)
a.stats = stats
a.nodeKeyManager = nodeKeyManager

30
cmd/osquery-perf/mac10.14.6.tmpl
View File

@ -286,30 +286,16 @@
{{ define "fleet_detail_query_users" -}}
[
{{ range $index, $item := .HostUsersMacOS }}
{{if $index}},{{end}}
{
"uid":"0",
"username":"gandalf",
"type":"wizard",
"groupname":"bree"
},
{
"uid":"1",
"username":"frodo",
"type":"hobbit",
"groupname":"shire"
},
{
"uid":"1",
"username":"sam",
"type":"hobbit",
"groupname":"shire"
},
{
"uid":"1",
"username":"legolas",
"type":"elve",
"groupname":"mirkwood"
"uid": "{{ .Uid }}",
"username": "{{ .Username }}",
"type": "{{ .Type }}",
"groupname": "{{ .GroupName }}",
"shell": "{{ .Shell }}"
}
{{- end }}
]
{{- end }}