From 33752c7fca16cb80a2325a23de6b8761f277c138 Mon Sep 17 00:00:00 2001 From: Rohith-Raju <rohithraju488@gmail.com> Date: Thu, 6 Apr 2023 20:55:22 +0530 Subject: [PATCH] Added new tests for -L (List all rules) command Signed-off-by: Rohith-Raju <rohithraju488@gmail.com> --- tests/falco/commands_test.go | 31 +++++++++++++++++++++++++++++++ 1 file changed, 31 insertions(+) diff --git a/tests/falco/commands_test.go b/tests/falco/commands_test.go index 8911cdd..4c32de6 100644 --- a/tests/falco/commands_test.go +++ b/tests/falco/commands_test.go @@ -25,6 +25,7 @@ import ( "github.com/falcosecurity/testing/pkg/falco" "github.com/falcosecurity/testing/tests" "github.com/falcosecurity/testing/tests/data/outputs" + "github.com/falcosecurity/testing/tests/data/rules" "github.com/stretchr/testify/assert" ) @@ -155,3 +156,33 @@ func TestFalco_Print_IgnoredEvents(t *testing.T) { assert.NoError(t, res.Err(), "%s", res.Stderr()) assert.Equal(t, res.ExitCode(), 0) } + +func TestFalco_Print_Rules(t *testing.T) { + t.Parallel() + checkDefaultConfig(t) + runner := tests.NewFalcoExecutableRunner(t) + t.Run("valid-rules", func(t *testing.T) { + t.Parallel() + res := falco.Test( + runner, + falco.WithArgs("-L"), + falco.WithRules(rules.DetectConnectUsingIn, rules.ListAppend, rules.CatchallOrder), + ) + rules := []string{"Open From Cat", "Localhost connect", "open_dev_null", "dev_null"} + for _, rule := range rules { + assert.Contains(t, res.Stdout(), rule) + } + assert.NoError(t, res.Err(), "%s", res.Stderr()) + assert.Equal(t, res.ExitCode(), 0) + }) + t.Run("invalid-rules", func(t *testing.T) { + t.Parallel() + res := falco.Test( + runner, + falco.WithArgs("-L"), + falco.WithRules(rules.InvalidRuleOutput), + ) + assert.Error(t, res.Err(), "%s", res.Stderr()) + assert.Equal(t, res.ExitCode(), 1) + }) +}