Add tests for Audit::SyscallRuleData

Change-Id: Id3a464b781d229d9aa93cd043547c3a218157504

diff --git a/tests/Audit/FakeAuditWrapper.h b/tests/Audit/FakeAuditWrapper.h
new file mode 100644 (file)
index 0000000..3e2b338
--- /dev/null
+++ b/tests/Audit/FakeAuditWrapper.h
@@ -0,0 +1,54 @@
+/*
+ * Copyright (c) 2015 Samsung Electronics Co., Ltd All Rights Reserved
+ *
+ *    Licensed under the Apache License, Version 2.0 (the "License");
+ *    you may not use this file except in compliance with the License.
+ *    You may obtain a copy of the License at
+ *
+ *        http://www.apache.org/licenses/LICENSE-2.0
+ *
+ *    Unless required by applicable law or agreed to in writing, software
+ *    distributed under the License is distributed on an "AS IS" BASIS,
+ *    WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ *    See the License for the specific language governing permissions and
+ *    limitations under the License.
+ */
+/**
+ * @file        tests/Audit/FakeAuditWrapper.h
+ * @author      Aleksander Zdyb <a.zdyb@samsung.com>
+ * @version     1.0
+ */
+
+#ifndef TESTS_AUDIT_FAKEAUDITWRAPPER_H
+#define TESTS_AUDIT_FAKEAUDITWRAPPER_H
+
+#include <gmock/gmock.h>
+#include <gtest/gtest.h>
+
+#include <Audit/BaseAuditWrapper.h>
+
+class FakeAuditWrapper : public Audit::BaseAuditWrapper {
+public:
+    using BaseAuditWrapper::BaseAuditWrapper;
+
+    MOCK_METHOD0(audit_open, int(void));
+    MOCK_METHOD1(audit_close, void(int fd));
+
+    MOCK_METHOD4(audit_add_rule_data, int(int fd, struct audit_rule_data *rule, int flags,
+                                          int action));
+    MOCK_METHOD4(audit_delete_rule_data, int(int fd, struct audit_rule_data *rule, int flags,
+                                             int action));
+    MOCK_METHOD2(audit_rule_syscallbyname_data, int(struct audit_rule_data *rule,
+                                                    const char *scall));
+    MOCK_METHOD3(audit_rule_fieldpair_data, int(struct audit_rule_data **rulep, const char *pair,
+                                                int flags));
+    MOCK_METHOD1(audit_rule_free_data, void(struct audit_rule_data *rule));
+
+    MOCK_METHOD0(create_rule_data, struct audit_rule_data *(void));
+
+    MOCK_CONST_METHOD0(MAX_AUDIT_MESSAGE_LENGTH_CONST, int(void));
+    MOCK_CONST_METHOD0(AUDIT_FILTER_EXIT_CONST, int(void));
+    MOCK_CONST_METHOD0(AUDIT_ALWAYS_CONST, int(void));
+};
+
+#endif /* TESTS_AUDIT_FAKEAUDITWRAPPER_H */

diff --git a/tests/Audit/syscall_rule_data.cpp b/tests/Audit/syscall_rule_data.cpp
new file mode 100644 (file)
index 0000000..9e1a3bd
--- /dev/null
+++ b/tests/Audit/syscall_rule_data.cpp
@@ -0,0 +1,92 @@
+/*
+ * Copyright (c) 2015 Samsung Electronics Co., Ltd All Rights Reserved
+ *
+ *    Licensed under the Apache License, Version 2.0 (the "License");
+ *    you may not use this file except in compliance with the License.
+ *    You may obtain a copy of the License at
+ *
+ *        http://www.apache.org/licenses/LICENSE-2.0
+ *
+ *    Unless required by applicable law or agreed to in writing, software
+ *    distributed under the License is distributed on an "AS IS" BASIS,
+ *    WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ *    See the License for the specific language governing permissions and
+ *    limitations under the License.
+ */
+/**
+ * @file        tests/Audit/syscall_rule_data.cpp
+ * @author      Aleksander Zdyb <a.zdyb@samsung.com>
+ * @version     1.0
+ */
+
+#include <gmock/gmock.h>
+#include <gtest/gtest.h>
+
+#include <Audit/SyscallRuleData.h>
+
+#include "FakeAuditWrapper.h"
+
+/**
+ * @brief   SyscallRuleData should call audit_rule_syscallbyname_data()
+ * @test    Scenario:
+ * - call SyscallRuleData::get()
+ * - check if audit_rule_syscallbyname_data() was called with proper args
+ */
+TEST(SyscallRuleData, no_values) {
+    using ::testing::_;
+    using ::testing::NiceMock;
+    using ::testing::Return;
+    using ::testing::StrEq;
+
+    NiceMock<FakeAuditWrapper> auditApi;
+    Audit::SyscallRuleData srd(auditApi);
+
+    struct audit_rule_data *ruleData = reinterpret_cast<struct audit_rule_data *>(0x7E57);
+
+    ON_CALL(auditApi, MAX_AUDIT_MESSAGE_LENGTH_CONST()).WillByDefault(Return(512));
+
+    EXPECT_CALL(auditApi, create_rule_data()).WillOnce(Return(ruleData));
+    EXPECT_CALL(auditApi, audit_rule_syscallbyname_data(ruleData, StrEq("all")));
+
+    srd.get();
+}
+
+/**
+ * @brief   SyscallRuleData should call audit_rule_fieldpair_data()
+ * @test    Scenario:
+ * - call SyscallRuleData::get()
+ * - check if audit_rule_fieldpair_data() was called with proper args
+ */
+TEST(SyscallRuleData, some_values) {
+    using ::testing::_;
+    using ::testing::NiceMock;
+    using ::testing::Pointee;
+    using ::testing::Return;
+    using ::testing::StrEq;
+
+    const int AUDIT_FILTER_EXIT_CONST = 42;
+
+    NiceMock<FakeAuditWrapper> auditApi;
+    Audit::SyscallRuleData srd(auditApi);
+
+    struct audit_rule_data *ruleData = reinterpret_cast<struct audit_rule_data *>(0x7E57);
+
+    ON_CALL(auditApi, MAX_AUDIT_MESSAGE_LENGTH_CONST()).WillByDefault(Return(512));
+
+    EXPECT_CALL(auditApi, create_rule_data()).WillOnce(Return(ruleData));
+    EXPECT_CALL(auditApi, AUDIT_FILTER_EXIT_CONST()).Times(2)
+        .WillRepeatedly(Return(AUDIT_FILTER_EXIT_CONST));
+    EXPECT_CALL(auditApi, audit_rule_fieldpair_data(Pointee(ruleData),
+                                                    StrEq("key1=value1"),
+                                                    AUDIT_FILTER_EXIT_CONST))
+        .WillOnce(Return(0));
+    EXPECT_CALL(auditApi, audit_rule_fieldpair_data(Pointee(ruleData),
+                                                    StrEq("key2=value2"),
+                                                    AUDIT_FILTER_EXIT_CONST))
+        .WillOnce(Return(0));
+    EXPECT_CALL(auditApi, audit_rule_syscallbyname_data(ruleData, StrEq("all")));
+
+    srd.addPair("key1", "value1");
+    srd.addPair("key2", "value2");
+    srd.get();
+}