21 lines
707 B
Go
21 lines
707 B
Go
// SPDX-License-Identifier: GPL-3.0-or-later
|
|
|
|
package detectors
|
|
|
|
import (
|
|
"testing"
|
|
|
|
"codeberg.org/anassaeneroi/enodia-sentinal/go-agent/internal/config"
|
|
"codeberg.org/anassaeneroi/enodia-sentinal/go-agent/internal/model"
|
|
)
|
|
|
|
func TestInputSnooperAlertsAndHonorsAllowlist(t *testing.T) {
|
|
state := model.State{Processes: []model.Process{
|
|
{PID: 320, Comm: "hoxha", FDTargets: map[string]string{"7": "/dev/input/event3"}},
|
|
{PID: 321, Comm: "Xorg", FDTargets: map[string]string{"8": "/dev/hidraw0"}},
|
|
}}
|
|
alerts := InputSnooper(state, config.Default())
|
|
if len(alerts) != 1 || alerts[0].SID != 100032 || alerts[0].Key != "input:320:/dev/input/event3" {
|
|
t.Fatalf("unexpected alerts: %#v", alerts)
|
|
}
|
|
}
|