luna/enodia-sentinal
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Add typed host event egress rule

Browse source
This commit is contained in:
Luna 2026-07-09 06:04:30 -07:00
parent 0b010df514
commit 3b037646d2
15 changed files with 360 additions and 31 deletions
Download patch file Download diff file Expand all files Collapse all files

12
tests/test_sid_coverage.py
View file

@ -32,7 +32,11 @@ def fixture_sids() -> dict[int, set[int]]:
class TestEventFixtures(unittest.TestCase):
def test_every_event_rule_sid_has_an_emitting_fixture(self):
covered = fixture_sids()
wanted = sids.engine_sids("exec_rule") | sids.engine_sids("syscall_rule")
wanted = (
sids.engine_sids("exec_rule")
| sids.engine_sids("syscall_rule")
| sids.engine_sids("host_rule")
)
for sid in sorted(wanted):
self.assertIn(sid, covered,
f"no fixture file for sid {sid} in {FIXTURE_DIR}")
@ -54,7 +58,11 @@ def drill_sids() -> dict[int, set[int]]:
class TestSidCoverageGate(unittest.TestCase):
def test_every_non_event_sid_has_an_emitting_drill(self):
covered = drill_sids()
event_sids = sids.engine_sids("exec_rule") | sids.engine_sids("syscall_rule")
event_sids = (
sids.engine_sids("exec_rule")
| sids.engine_sids("syscall_rule")
| sids.engine_sids("host_rule")
)
wanted = sids.all_sids() - event_sids
self.assertEqual(set(covered), wanted)
for sid in sorted(wanted):