void test_patterndb_rule(void) { create_pattern_db(pdb_ruletest_skeleton); test_rule_tag("pattern11", "tag11-1", TRUE); test_rule_tag("pattern11", ".classifier.system", TRUE); test_rule_tag("pattern11", "tag11-2", TRUE); test_rule_tag("pattern11", "tag11-3", FALSE); test_rule_tag("pattern11a", "tag11-1", TRUE); test_rule_tag("pattern11a", "tag11-2", TRUE); test_rule_tag("pattern11a", "tag11-3", FALSE); test_rule_tag("pattern12", ".classifier.violation", TRUE); test_rule_tag("pattern12", "tag12-1", FALSE); test_rule_tag("pattern12", "tag12-2", FALSE); test_rule_tag("pattern12", "tag12-3", FALSE); test_rule_tag("pattern12a", "tag12-1", FALSE); test_rule_tag("pattern12a", "tag12-2", FALSE); test_rule_tag("pattern12a", "tag12-3", FALSE); test_rule_tag("pattern1x", "tag1x-1", FALSE); test_rule_tag("pattern1x", "tag1x-2", FALSE); test_rule_tag("pattern1x", "tag1x-3", FALSE); test_rule_tag("pattern1xa", "tag1x-1", FALSE); test_rule_tag("pattern1xa", "tag1x-2", FALSE); test_rule_tag("pattern1xa", "tag1x-3", FALSE); test_rule_tag("foobar", ".classifier.unknown", TRUE); test_rule_value("pattern11", "n11-1", "v11-1"); test_rule_value("pattern11", ".classifier.class", "system"); test_rule_value("pattern11", "n11-2", "v11-2"); test_rule_value("pattern11", "n11-3", NULL); test_rule_value("pattern11", "context-id", "999"); test_rule_value("pattern11", ".classifier.context_id", "999"); test_rule_value("pattern11a", "n11-1", "v11-1"); test_rule_value("pattern11a", "n11-2", "v11-2"); test_rule_value("pattern11a", "n11-3", NULL); test_rule_value("pattern12", ".classifier.class", "violation"); test_rule_value("pattern12", "n12-1", NULL); test_rule_value("pattern12", "n12-2", NULL); test_rule_value("pattern12", "n12-3", NULL); test_rule_value("pattern1x", "n1x-1", NULL); test_rule_value("pattern1x", "n1x-2", NULL); test_rule_value("pattern1x", "n1x-3", NULL); test_rule_value("pattern11", "vvv", MYHOST); test_rule_action_message_value("pattern11", 0, 1, "MESSAGE", "rule11 matched"); test_rule_action_message_value("pattern11", 0, 1, "context-id", "999"); test_rule_action_message_tag("pattern11", 0, 1, "tag11-3", TRUE); test_rule_action_message_tag("pattern11", 0, 1, "tag11-4", FALSE); test_rule_action_message_value("pattern11", 60, 2, "MESSAGE", "rule11 timed out"); test_rule_action_message_value("pattern11", 60, 2, "context-id", "999"); test_rule_action_message_tag("pattern11", 60, 2, "tag11-3", FALSE); test_rule_action_message_tag("pattern11", 60, 2, "tag11-4", TRUE); clean_pattern_db(); }
void test_patterndb_message_property_inheritance() { create_pattern_db(pdb_inheritance_skeleton); test_rule_action_message_value("pattern11", 0, 1, "MESSAGE", "pattern11"); test_rule_action_message_value("pattern12", 0, 1, "MESSAGE", NULL); test_rule_action_message_tag("pattern11", 0, 1, "tag11-1", TRUE); test_rule_action_message_tag("pattern11", 0, 1, "tag11-2", TRUE); test_rule_action_message_tag("pattern11", 0, 1, "tag11-3", TRUE); test_rule_action_message_tag("pattern12", 0, 1, "tag12-1", FALSE); test_rule_action_message_tag("pattern12", 0, 1, "tag12-2", FALSE); test_rule_action_message_tag("pattern12", 0, 1, "tag12-3", TRUE); clean_pattern_db(); }