29 lines
842 B
Go
29 lines
842 B
Go
// SPDX-License-Identifier: GPL-3.0-or-later
|
|
|
|
package detectors
|
|
|
|
import (
|
|
"testing"
|
|
|
|
"codeberg.org/anassaeneroi/enodia-sentinal/go-agent/internal/config"
|
|
"codeberg.org/anassaeneroi/enodia-sentinal/go-agent/internal/model"
|
|
)
|
|
|
|
func TestNewSUIDSeverityAndBaseline(t *testing.T) {
|
|
alerts := NewSUID(model.State{
|
|
SUIDBinaries: []string{"/tmp/evil", "/usr/local/bin/newtool", "/usr/bin/sudo"},
|
|
SUIDBaseline: []string{"/usr/bin/sudo"},
|
|
}, config.Default())
|
|
if len(alerts) != 2 {
|
|
t.Fatalf("got %#v", alerts)
|
|
}
|
|
if alerts[0].Severity != "CRITICAL" || alerts[1].Severity != "HIGH" {
|
|
t.Fatalf("unexpected severities: %#v", alerts)
|
|
}
|
|
}
|
|
|
|
func TestNewSUIDWithoutScanIsSilent(t *testing.T) {
|
|
if alerts := NewSUID(model.State{SUIDBaseline: []string{"/usr/bin/sudo"}}, config.Default()); len(alerts) != 0 {
|
|
t.Fatalf("got %#v", alerts)
|
|
}
|
|
}
|