* Change config.toml, Auto-generate UUIDs, change structure of optional field * Detect processes affected by update using yum-ps (#482) Detect processes affected by update using yum-ps * Detect processes needs restart using checkrestart on Debian and Ubuntu. * pass cpename by args when calling FillCveInfo (#513) * fix new db (#502) * Include Version,Revision in JSON * Include hostname in JSON * Update goval-dictionary's commit hash in Gopkg.lock * Remove README.ja.md * update packages (#596) * fix: change ControlPath to .vuls of SSH option (#618) * feat: checkrestart for Ubuntu and Debian (#622) * feat: checkrestart for Ubuntu and Debian * fix: dependencies check logic of configtest * feat: need-restarting on RedHat * refactor: Process.ProcName to Process.Name * feat: detect a systemd service name of need-restarting-process * feat: detect a systemd service name of need-restarting-process on Ubuntu * feat: fill a service name of need-restarting-process, init-system * Support NVD JSON and CVSS3 of JVN (#605) * fix: compile errors * fix: Show CVSS3 on TUI * fix: test cases * fix: Avoid null in JSON * Fix maxCvssScore (#621) * Fix maxCvssScore * Update vulninfos.go * fix(init): remove unnecessary log initialization * refactor(nvd): use only json feed if exists json data. if not, use xml feed * fix(scan): make Confidence slice * feat(CWE): Display CWE name to TUI * feat(cwe): import CWE defs in Japanese * feat(cwe): add OWASP Top 10 ranking to CWE if applicable * feat(scan): add -fast-root mode, implement scan/amazon.go * refactor(const): change const name JVN to Jvn * feat(scan): add -fast-root mode, implement scan/centos.go * refactor(dep): update deps * fix(amazon): deps check * feat(scan): add -fast-root mode, implement scan/rhel.go * feat(scan): add -fast-root mode, implement scan/oracle.go * fix complile err * feat(scan): add -fast-root mode, implement scan/debian.go * fix testcase * fix(amazon): scan using yum * fix(configtest): change error message, status when no scannnable servers * Fix(scan): detect init process logic * fix(tui): display cvss as table format * fix(scan): parse a output of reboot-notifier on CentOS6.9 * fix(tui): don't display score, vector when score is zero * fix(scan): add -offline mode to suse scanner * fix(scan): fix help message * feat(scan): enable to define scan mode for each servers in config.toml #510 * refactor(config): chagne cpeNames to cpeURIs * refactor(config): change dependencyCheckXMLPath to owaspDCXMLPath * fix(config): containers -> containersIncluded, Excluded, containerType * feature(report): enable to define cpeURIs for each contaner * feature(report): enable to specify owasp dc xml path for each container * fix(discover): fix a template displayed at the end of discover * feature(report): add ignorePkgsRegexp #665 * feature(report): enable to define ignoreCves for each container #666 * fix(report): Displayed nothing in TUI detail area when CweID is nil * Gopkg.toml diet * feat(server): support server mode (#678) * feat(server): support server mode * Lock go version * Use the latest kernel release among the installed release when the running kernel release is unknown * Add TestViaHTTP * Set logger to go-cve-dictionary client * Add -to-localfile * Add -to-http option to report * Load -to-http conf from config.toml * Support gost (#676) * feat(gost): Support RedHat API * feat(gost): Support Debian Security Tracker * feat(db): display error msg when SQLite3 is locked at the beginning of reporting. * feat(gost): TUI * Only use RedHat information of installed packages * feat(tui): show mitigation on TUI * feat(gost): support redis backend * fix test case * fix nil pointer when db is nil * fix(gost): detect vulns of src packages for Debian * feat(gost): implement redis backend for gost redhat api * feat(report): display fixState of unfixed pkgs * fix(report): display distincted cweIDs * feat(slack): display gost info * feat(slack): display mitigation * feat(report): display available patch state as fixed/total * fix(tui): display - if source of reference is empty * update deps * fix(report): key in ScanResult JSON be lowerCamelcase. * some keys to lower camel * fix(configtest): dep check logic of yum-plugin-ps * fix(tui): format * feat(report): add -format-list option * fix(report): -format-full-text * fix(report): report -format-full-text * fix(report): display v3 score detected by gost * fix(scan): scan in fast mode if not defined in config.toml * fix(gost): fetch RedHat data for fixed CVEs * feat(report): show number of cves detected in each database * fix(report): show new version as `Unknown` in offline and fast scan mode * fix(report): fix num of upadtable and fixed * fix(report): set `Not fixed yet` if packageStatus is empty * refact(gost): make convertToModel public * fix(test): fix test case * update deps * fix(report): include gost score in MaxCvssScore * [WIP] feat(config): enable to set options in config.toml instead of cmd opt (#690) * feat(config): enable to set options in config.toml instead of cmd opt * fix(config): change Conf.Report.Slack to Conf.Slack * fix(discover): change tempalte * fix(report): fix config.toml auto-generate with -uuid * Add endpoint for health check and change endpoint * refact(cmd): refactor flag set * fix(report): enable to specify opts with cmd arg and env value * fix(scan): enable to parse the release version of amazon linux 2 * add(report) add -to-saas option (#695) * add(report) add -to-saas option * ignore other writer if -to-saas * fix(saas) fix bug * fix(scan): need-restarting needs internet connection * fix(scan,configtest): check scan mode * refactor(scan): change func name * fix(suse): support offline mode, bug fix on AWS, zypper --no-color * fix(tui): fix nil pointer when no vulns in tui * feat(report): enable to define CPE FS format in config.toml * fix(vet): fix warnings of go vet * fix(travis): go version to 1.11 * update deps
		
			
				
	
	
		
			181 lines
		
	
	
		
			5.1 KiB
		
	
	
	
		
			Go
		
	
	
	
	
	
			
		
		
	
	
			181 lines
		
	
	
		
			5.1 KiB
		
	
	
	
		
			Go
		
	
	
	
	
	
/* Vuls - Vulnerability Scanner
 | 
						|
Copyright (C) 2016  Future Corporation , Japan.
 | 
						|
 | 
						|
This program is free software: you can redistribute it and/or modify
 | 
						|
it under the terms of the GNU General Public License as published by
 | 
						|
the Free Software Foundation, either version 3 of the License, or
 | 
						|
(at your option) any later version.
 | 
						|
 | 
						|
This program is distributed in the hope that it will be useful,
 | 
						|
but WITHOUT ANY WARRANTY; without even the implied warranty of
 | 
						|
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 | 
						|
GNU General Public License for more details.
 | 
						|
 | 
						|
You should have received a copy of the GNU General Public License
 | 
						|
along with this program.  If not, see <http://www.gnu.org/licenses/>.
 | 
						|
*/
 | 
						|
 | 
						|
package scan
 | 
						|
 | 
						|
import (
 | 
						|
	"reflect"
 | 
						|
	"testing"
 | 
						|
 | 
						|
	"github.com/future-architect/vuls/config"
 | 
						|
)
 | 
						|
 | 
						|
func TestParseDockerPs(t *testing.T) {
 | 
						|
	var test = struct {
 | 
						|
		in       string
 | 
						|
		expected []config.Container
 | 
						|
	}{
 | 
						|
		`c7ca0992415a romantic_goldberg ubuntu:14.04.5
 | 
						|
f570ae647edc agitated_lovelace centos:latest`,
 | 
						|
		[]config.Container{
 | 
						|
			{
 | 
						|
				ContainerID: "c7ca0992415a",
 | 
						|
				Name:        "romantic_goldberg",
 | 
						|
				Image:       "ubuntu:14.04.5",
 | 
						|
			},
 | 
						|
			{
 | 
						|
				ContainerID: "f570ae647edc",
 | 
						|
				Name:        "agitated_lovelace",
 | 
						|
				Image:       "centos:latest",
 | 
						|
			},
 | 
						|
		},
 | 
						|
	}
 | 
						|
 | 
						|
	r := newRHEL(config.ServerInfo{})
 | 
						|
	actual, err := r.parseDockerPs(test.in)
 | 
						|
	if err != nil {
 | 
						|
		t.Errorf("Error occurred. in: %s, err: %s", test.in, err)
 | 
						|
		return
 | 
						|
	}
 | 
						|
	for i, e := range test.expected {
 | 
						|
		if !reflect.DeepEqual(e, actual[i]) {
 | 
						|
			t.Errorf("expected %v, actual %v", e, actual[i])
 | 
						|
		}
 | 
						|
	}
 | 
						|
}
 | 
						|
 | 
						|
func TestParseLxdPs(t *testing.T) {
 | 
						|
	var test = struct {
 | 
						|
		in       string
 | 
						|
		expected []config.Container
 | 
						|
	}{
 | 
						|
		`+-------+
 | 
						|
| NAME  |
 | 
						|
+-------+
 | 
						|
| test1 |
 | 
						|
+-------+
 | 
						|
| test2 |
 | 
						|
+-------+`,
 | 
						|
		[]config.Container{
 | 
						|
			{
 | 
						|
				ContainerID: "test1",
 | 
						|
				Name:        "test1",
 | 
						|
			},
 | 
						|
			{
 | 
						|
				ContainerID: "test2",
 | 
						|
				Name:        "test2",
 | 
						|
			},
 | 
						|
		},
 | 
						|
	}
 | 
						|
 | 
						|
	r := newRHEL(config.ServerInfo{})
 | 
						|
	actual, err := r.parseLxdPs(test.in)
 | 
						|
	if err != nil {
 | 
						|
		t.Errorf("Error occurred. in: %s, err: %s", test.in, err)
 | 
						|
		return
 | 
						|
	}
 | 
						|
	for i, e := range test.expected {
 | 
						|
		if !reflect.DeepEqual(e, actual[i]) {
 | 
						|
			t.Errorf("expected %v, actual %v", e, actual[i])
 | 
						|
		}
 | 
						|
	}
 | 
						|
}
 | 
						|
 | 
						|
func TestParseIp(t *testing.T) {
 | 
						|
 | 
						|
	var test = struct {
 | 
						|
		in        string
 | 
						|
		expected4 []string
 | 
						|
		expected6 []string
 | 
						|
	}{
 | 
						|
		in: `1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN \    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
 | 
						|
1: lo    inet 127.0.0.1/8 scope host lo
 | 
						|
1: lo    inet6 ::1/128 scope host \       valid_lft forever preferred_lft forever
 | 
						|
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000\    link/ether 52:54:00:2a:86:4c brd ff:ff:ff:ff:ff:ff
 | 
						|
2: eth0    inet 10.0.2.15/24 brd 10.0.2.255 scope global eth0
 | 
						|
2: eth0    inet6 fe80::5054:ff:fe2a:864c/64 scope link \       valid_lft forever preferred_lft forever
 | 
						|
3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000\    link/ether 08:00:27:36:76:60 brd ff:ff:ff:ff:ff:ff
 | 
						|
3: eth1    inet 192.168.33.11/24 brd 192.168.33.255 scope global eth1
 | 
						|
3: eth1    inet6 2001:db8::68/64 scope link \       valid_lft forever preferred_lft forever `,
 | 
						|
		expected4: []string{"10.0.2.15", "192.168.33.11"},
 | 
						|
		expected6: []string{"2001:db8::68"},
 | 
						|
	}
 | 
						|
 | 
						|
	r := newRHEL(config.ServerInfo{})
 | 
						|
	actual4, actual6 := r.parseIP(test.in)
 | 
						|
	if !reflect.DeepEqual(test.expected4, actual4) {
 | 
						|
		t.Errorf("expected %v, actual %v", test.expected4, actual4)
 | 
						|
	}
 | 
						|
	if !reflect.DeepEqual(test.expected6, actual6) {
 | 
						|
		t.Errorf("expected %v, actual %v", test.expected6, actual6)
 | 
						|
	}
 | 
						|
}
 | 
						|
 | 
						|
func TestIsAwsInstanceID(t *testing.T) {
 | 
						|
	var tests = []struct {
 | 
						|
		in       string
 | 
						|
		expected bool
 | 
						|
	}{
 | 
						|
		{"i-1234567a", true},
 | 
						|
		{"i-1234567890abcdef0", true},
 | 
						|
		{"i-1234567890abcdef0000000", true},
 | 
						|
		{"e-1234567890abcdef0", false},
 | 
						|
		{"i-1234567890abcdef0 foo bar", false},
 | 
						|
		{"no data", false},
 | 
						|
	}
 | 
						|
 | 
						|
	r := newAmazon(config.ServerInfo{})
 | 
						|
	for _, tt := range tests {
 | 
						|
		actual := r.isAwsInstanceID(tt.in)
 | 
						|
		if tt.expected != actual {
 | 
						|
			t.Errorf("expected %t, actual %t, str: %s", tt.expected, actual, tt.in)
 | 
						|
		}
 | 
						|
	}
 | 
						|
}
 | 
						|
 | 
						|
func TestParseSystemctlStatus(t *testing.T) {
 | 
						|
	var tests = []struct {
 | 
						|
		in  string
 | 
						|
		out string
 | 
						|
	}{
 | 
						|
		{
 | 
						|
			in: `● NetworkManager.service - Network Manager
 | 
						|
   Loaded: loaded (/usr/lib/systemd/system/NetworkManager.service; enabled; vendor preset: enabled)
 | 
						|
   Active: active (running) since Wed 2018-01-10 17:15:39 JST; 2 months 10 days ago
 | 
						|
     Docs: man:NetworkManager(8)
 | 
						|
 Main PID: 437 (NetworkManager)
 | 
						|
   Memory: 424.0K
 | 
						|
   CGroup: /system.slice/NetworkManager.service
 | 
						|
           ├─437 /usr/sbin/NetworkManager --no-daemon
 | 
						|
           └─572 /sbin/dhclient -d -q -sf /usr/libexec/nm-dhcp-helper -pf /var/run/dhclient-ens160.pid -lf /var/lib/NetworkManager/dhclient-241ed966-e1c7-4d5c-a6a0-8a6dba457277-ens160.lease -cf /var/lib/NetworkManager/dhclient-ens160.conf ens160`,
 | 
						|
			out: "NetworkManager.service",
 | 
						|
		},
 | 
						|
		{
 | 
						|
			in:  `Failed to get unit for PID 700: PID 700 does not belong to any loaded unit.`,
 | 
						|
			out: "",
 | 
						|
		},
 | 
						|
	}
 | 
						|
 | 
						|
	r := newCentOS(config.ServerInfo{})
 | 
						|
	for _, tt := range tests {
 | 
						|
		actual := r.parseSystemctlStatus(tt.in)
 | 
						|
		if tt.out != actual {
 | 
						|
			t.Errorf("expected %v, actual %v", tt.out, actual)
 | 
						|
		}
 | 
						|
	}
 | 
						|
}
 |