/** * Copyright (c) 2014-present, The osquery authors * * This source code is licensed as defined by the LICENSE file found in the * root directory of this source tree. * * SPDX-License-Identifier: (Apache-2.0 OR GPL-2.0-only) */ // Sanity check integration test for device_file // Spec file: specs/sleuthkit/device_file.table #include namespace osquery { namespace table_tests { class deviceFile : public testing::Test { protected: void SetUp() override { setUpEnvironment(); } }; TEST_F(deviceFile, test_sanity) { // 1. Query data auto const data = execute_query( "select * from device_file where device = '' and partition = ''"); // 2. Check size before validation // ASSERT_GE(data.size(), 0ul); // ASSERT_EQ(data.size(), 1ul); // ASSERT_EQ(data.size(), 0ul); // 3. Build validation map // See helper.h for avaialbe flags // Or use custom DataCheck object // ValidationMap row_map = { // {"device", NormalType} // {"partition", NormalType} // {"path", NormalType} // {"filename", NormalType} // {"inode", IntType} // {"uid", IntType} // {"gid", IntType} // {"mode", NormalType} // {"size", IntType} // {"block_size", IntType} // {"atime", IntType} // {"mtime", IntType} // {"ctime", IntType} // {"hard_links", IntType} // {"type", NormalType} //} // 4. Perform validation // validate_rows(data, row_map); } } // namespace table_tests } // namespace osquery