mirror of
https://github.com/valitydev/osquery-1.git
synced 2024-11-08 02:18:53 +00:00
c7355b19aa
Summary: Pull Request resolved: https://github.com/facebook/osquery/pull/5452 As suggested in another diff, this diff updates the language we use to describe the osquery licensing terms. We are changing all instances of //This source code is licensed as defined on the LICENSE file found in the root directory of this source tree.// to //This source code is licensed in accordance with the terms specified in the LICENSE file found in the root directory of this source tree.// We accomplish this with a codemod: $ codemod -md xplat/osquery/oss --extensions cpp,h,in,py,sh,mm,ps1 "(.\s+)This source code is licensed as defined on the LICENSE file found in the(.*)root directory of this source tree\." "\1This source code is licensed in accordance with the terms specified in\2the LICENSE file found in the root directory of this source tree." Reviewed By: fmanco Differential Revision: D14131290 fbshipit-source-id: 52c90da342263e2a80f5a678ecd760c19cf7513e
104 lines
3.3 KiB
C++
104 lines
3.3 KiB
C++
/**
|
|
* Copyright (c) 2014-present, Facebook, Inc.
|
|
* All rights reserved.
|
|
*
|
|
* This source code is licensed in accordance with the terms specified in
|
|
* the LICENSE file found in the root directory of this source tree.
|
|
*/
|
|
|
|
#include <gtest/gtest.h>
|
|
|
|
#include <boost/filesystem.hpp>
|
|
|
|
#include <osquery/filesystem/filesystem.h>
|
|
#include <osquery/logger.h>
|
|
#include <osquery/utils/base64.h>
|
|
#include <osquery/utils/darwin/plist.h>
|
|
#include <osquery/config/tests/test_utils.h>
|
|
|
|
namespace fs = boost::filesystem;
|
|
namespace pt = boost::property_tree;
|
|
|
|
char* argv0;
|
|
|
|
namespace osquery {
|
|
|
|
class PlistTests : public testing::Test {};
|
|
|
|
TEST_F(PlistTests, test_parse_plist_content) {
|
|
// Isolate plist parsing errors to the plist parser, instead of file reader.
|
|
std::string content;
|
|
readFile(getTestConfigDirectory() / "test.plist", content);
|
|
|
|
pt::ptree tree;
|
|
auto s = parsePlistContent(content, tree);
|
|
|
|
EXPECT_TRUE(s.ok());
|
|
EXPECT_EQ(s.toString(), "OK");
|
|
|
|
// Check the specifics of the PLIST.
|
|
EXPECT_EQ(tree.get<bool>("Disabled"), true);
|
|
EXPECT_THROW(tree.get<bool>("foobar"), pt::ptree_bad_path);
|
|
EXPECT_EQ(tree.get<std::string>("Label"), "com.apple.FileSyncAgent.sshd");
|
|
|
|
std::vector<std::string> program_arguments = {
|
|
"/System/Library/CoreServices/FileSyncAgent.app/Contents/Resources/"
|
|
"FileSyncAgent_sshd-keygen-wrapper",
|
|
"-i",
|
|
"-f",
|
|
"/System/Library/CoreServices/FileSyncAgent.app/Contents/Resources/"
|
|
"FileSyncAgent_sshd_config",
|
|
};
|
|
pt::ptree program_arguments_tree = tree.get_child("ProgramArguments");
|
|
std::vector<std::string> program_arguments_parsed;
|
|
for (const auto& argument : program_arguments_tree) {
|
|
program_arguments_parsed.push_back(argument.second.get<std::string>(""));
|
|
}
|
|
EXPECT_EQ(program_arguments_parsed, program_arguments);
|
|
}
|
|
|
|
TEST_F(PlistTests, test_parse_plist_from_file) {
|
|
// Now read the plist from a file and parse.
|
|
boost::property_tree::ptree tree;
|
|
auto s = parsePlist(getTestConfigDirectory() / "test.plist", tree);
|
|
|
|
EXPECT_TRUE(s.ok());
|
|
EXPECT_EQ(s.toString(), "OK");
|
|
|
|
// The tree has a key with ".", the plist level delimiter.
|
|
EXPECT_EQ(tree.size(), 8U);
|
|
EXPECT_EQ(tree.count("com"), 0U);
|
|
|
|
// Make sure "." iteration still works.
|
|
EXPECT_EQ(tree.get("inetdCompatibility.Wait", ""), "0");
|
|
}
|
|
|
|
TEST_F(PlistTests, test_parse_plist_array) {
|
|
// Now read the plist from a file and parse.
|
|
boost::property_tree::ptree tree;
|
|
auto s = parsePlist(getTestConfigDirectory() / "test_array.plist", tree);
|
|
|
|
EXPECT_TRUE(s.ok());
|
|
EXPECT_EQ(s.toString(), "OK");
|
|
}
|
|
|
|
TEST_F(PlistTests, test_parse_plist_content_with_blobs) {
|
|
pt::ptree tree;
|
|
fs::path test_root(getTestConfigDirectory());
|
|
|
|
auto s = parsePlist((test_root / "test_binary.plist").string(), tree);
|
|
EXPECT_TRUE(s.ok());
|
|
EXPECT_EQ(s.toString(), "OK");
|
|
EXPECT_THROW(tree.get<bool>("foobar"), pt::ptree_bad_path);
|
|
EXPECT_EQ(tree.get<std::string>("SessionItems.Controller"),
|
|
"CustomListItems");
|
|
auto first_element =
|
|
tree.get_child("SessionItems.CustomListItems").begin()->second;
|
|
EXPECT_EQ(first_element.get<std::string>("Name"), "Flux");
|
|
std::string alias = base64::decode(first_element.get<std::string>("Alias"));
|
|
|
|
// Verify we parsed the binary blob correctly
|
|
EXPECT_NE(alias.find("Applications/Flux.app"), std::string::npos);
|
|
}
|
|
}
|