osquery-1/tests/integration/tables/deb_packages.cpp

/**
 *  Copyright (c) 2014-present, Facebook, Inc.
 *  All rights reserved.
 *
 *  This source code is licensed in accordance with the terms specified in
 *  the LICENSE file found in the root directory of this source tree.
 */

// Sanity check integration test for deb_packages
// Spec file: specs/linux/deb_packages.table

#include <osquery/logger.h>
#include <osquery/tests/integration/tables/helper.h>
#include <osquery/utils/info/platform_type.h>

namespace osquery {
namespace table_tests {

class DebPackages : public testing::Test {
 protected:
  void SetUp() override {
    setUpEnvironment();
  }
};

TEST_F(DebPackages, test_sanity) {
  QueryData rows = execute_query("select * from deb_packages");
  if (rows.size() > 0) {
    ValidationMap row_map = {{"name", NonEmptyString},
                             {"version", NonEmptyString},
                             {"source", NormalType},
                             {"size", IntType},
                             {"arch", NonEmptyString},
                             {"revision", NormalType},
                             {"status", NonEmptyString},
                             {"maintainer", NonEmptyString},
                             {"section", NonEmptyString},
                             {"priority", NonEmptyString}};

    validate_rows(rows, row_map);

    auto all_packages = std::unordered_set<std::string>{};
    for (const auto& row : rows) {
      auto pckg_name = row.at("name");
      all_packages.insert(pckg_name);
      if (pckg_name == "dpkg") {
        break;
      }
    }

    ASSERT_EQ(all_packages.count("dpkg"), 1u);

    if (isPlatform(PlatformType::TYPE_LINUX)) {
      rows = execute_query(
          "select *, pid_with_namespace, mount_namespace_id from deb_packages");
      row_map["pid_with_namespace"] = IntType;
      row_map["mount_namespace_id"] = NormalType;
      validate_rows(rows, row_map);
    }

  } else {
    LOG(WARNING) << "Empty results of query from 'deb_packages', assume there "
                    "is no dpkg in the system";
  }
}

} // namespace table_tests
} // namespace osquery