mirror of
https://github.com/valitydev/osquery-1.git
synced 2024-11-07 01:55:20 +00:00
a67525fae1
Summary: Pull Request resolved: https://github.com/facebook/osquery/pull/5375 LICENSE is now defined in a single file on the root of the project, update the header to contain that information. **Project LICENSE did not change.** Reviewed By: akindyakov Differential Revision: D13750575 fbshipit-source-id: 1e608a81b260b8395f9d008fc67f463160c1fc2b
58 lines
1.5 KiB
C++
58 lines
1.5 KiB
C++
|
|
/**
|
|
* Copyright (c) 2014-present, Facebook, Inc.
|
|
* All rights reserved.
|
|
*
|
|
* This source code is licensed as defined on the LICENSE file found in the
|
|
* root directory of this source tree.
|
|
*/
|
|
|
|
// Sanity check integration test for process_file_events
|
|
// Spec file: specs/linux/process_file_events.table
|
|
|
|
#include <osquery/tests/integration/tables/helper.h>
|
|
|
|
namespace osquery {
|
|
namespace table_tests {
|
|
|
|
class processFileEvents : public testing::Test {
|
|
protected:
|
|
void SetUp() override {
|
|
setUpEnvironment();
|
|
}
|
|
};
|
|
|
|
TEST_F(processFileEvents, test_sanity) {
|
|
// 1. Query data
|
|
auto const data = execute_query("select * from process_file_events");
|
|
// 2. Check size before validation
|
|
// ASSERT_GE(data.size(), 0ul);
|
|
// ASSERT_EQ(data.size(), 1ul);
|
|
// ASSERT_EQ(data.size(), 0ul);
|
|
// 3. Build validation map
|
|
// See helper.h for avaialbe flags
|
|
// Or use custom DataCheck object
|
|
// ValidatatioMap row_map = {
|
|
// {"operation", NormalType}
|
|
// {"pid", IntType}
|
|
// {"ppid", IntType}
|
|
// {"time", IntType}
|
|
// {"executable", NormalType}
|
|
// {"partial", NormalType}
|
|
// {"cwd", NormalType}
|
|
// {"path", NormalType}
|
|
// {"dest_path", NormalType}
|
|
// {"uid", NormalType}
|
|
// {"gid", NormalType}
|
|
// {"euid", NormalType}
|
|
// {"egid", NormalType}
|
|
// {"uptime", IntType}
|
|
// {"eid", NormalType}
|
|
//}
|
|
// 4. Perform validation
|
|
// validate_rows(data, row_map);
|
|
}
|
|
|
|
} // namespace table_tests
|
|
} // namespace osquery
|