27 Commits

Author SHA1 Message Date
Louis Rannou
a043f0b8ed oeqa: openscap test
Add basic openscap test. This looks for an existing profile and run a basic scan.

Openscap scans return 1 in case of failure, 0 in case of success and 2 when a
vulnerability has been found. As this does not aim to check openscap reports, 2 is
considered as a successful test.

Signed-off-by: Louis Rannou <louis.rannou@non.se.com>
(added to test image)
Signed-off-by: Scott Murray <scott.murray@konsulko.com>
2025-11-21 09:10:00 -05:00
Scott Murray
1e08a04e55 tripwire: Remove recipe
Remove the tripwire recipe since it has been disabled since May 2021,
and upstream has shown no activity since 2018.

Signed-off-by: Scott Murray <scott.murray@konsulko.com>
2025-10-08 17:34:14 +02:00
Mikko Rapeli
1851ec38b7 oeqa runtime clamav.py: use curl if ping fails
TEST_RUNQEMUPARAMS = "slirp" does not pass ping through
but UDP and TCP will work. Thus curl the http website
even if the response is DoS blocker and not the real
website.

Signed-off-by: Mikko Rapeli <mikko.rapeli@linaro.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2024-12-27 11:28:23 -05:00
Mikko Rapeli
08c712d672 oeqa runtime clamav.py: skip test_freshclam_download with systemd
systemd service files already start a download at boot which locks
the files and thus the test fails. Instead of this test, with systemd
it is sufficient to check that all systemd services succeeded.

Signed-off-by: Mikko Rapeli <mikko.rapeli@linaro.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2024-12-27 11:28:23 -05:00
Armin Kuster
fccbe155be oeqa/clamav drop depricated --list-mirror test
Fix download test

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-06-23 18:47:59 -07:00
Armin Kuster
4e0d448aca oeqa: Add a very basic firejail test
Currently check if --help works.

RESULTS:
RESULTS - ping.PingTest.test_ping: PASSED (0.07s)
RESULTS - ssh.SSHTest.test_ssh: PASSED (2.41s)
RESULTS - firejail.FirejailTest.test_firejail_basic: PASSED (1.30s)

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-06-23 18:47:59 -07:00
Armin Kuster
71061edbe1 oeqa: add aide test
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-06-23 18:47:59 -07:00
Armin Kuster
102e47f14d oeqa: update smack runtime test
drop test_smack_mmap_enforced as is was skipped do to possible licensing issues

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-06-23 18:47:59 -07:00
Armin Kuster
4bb7e5b84a oeqa: sssd.py fix tests
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-06-18 06:48:22 -07:00
Armin Kuster
72ba0a4a14 oeqa: fix checksec runtime test
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-06-18 06:48:22 -07:00
Armin Kuster
3e5502a31c oeqa/smack: consolidate classes
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-06-07 16:58:24 -07:00
Armin Kuster
6400eba66a lib/oeqa/runtime: fix clamav test order
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-01-03 11:54:14 -08:00
Armin Kuster
0ca8cad641 lib/oeqa/runtime: suricata add tests
drop the unit test as it should be run via ptest
add more tests for python3-suricata-update

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-12-16 20:51:35 -08:00
Armin Kuster
c55721b15e checksec: add missing rdepends to readelf
update test to check for depends

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-10-14 22:45:18 -07:00
Armin Kuster
c44f8f3cb2 runtime: clamav test cleanup
mirror test is independant of download

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-06-26 15:47:47 -07:00
Armin Kuster
56d6256c83 checksec: add runtime test
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-05-21 08:18:36 -07:00
Armin Kuster
f524ba9665 samhain: add more tests and fix ret checks
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-05-09 17:45:13 -07:00
Armin Kuster
8eee8727cb smack-test: add smack tests from meta-intel-iot-security
ported over smack tests

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-05-09 17:45:13 -07:00
Armin Kuster
f67e1bc01d apparmor: add a few more runtime
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-05-09 17:44:59 -07:00
Armin Kuster
3b88d3d9ca clamav: runtime fix local routing
This addes the localhost to resolve.conf to fix:

ERROR: Can't get information about database.clamav.net: Temporary failure in name resolution
ERROR: Can't download main.cvd from database.clamav.net
Giving up on database.clamav.net...

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-04-13 10:31:20 -07:00
Armin Kuster
109b8260bf clamav runtime: add resolve.conf support
and ping test too

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-04-13 10:31:11 -07:00
Armin Kuster
5b8e4cb21b apparmor: add basic runtime test
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-31 11:57:11 -07:00
Armin Kuster
00f00d2897 clamav: add basic runtime tests
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-31 10:37:09 -07:00
Armin Kuster
f1f54b94ad samhain: add basic runtime test
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-31 10:37:09 -07:00
Armin Kuster
a0a4660375 suricata: add runtime testing
Today there are no failures so set the trigger to zero.

[v2]
fix match string
and conditional

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-31 10:37:09 -07:00
Armin Kuster
7d014432c7 tripwire: add runtime test
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-31 10:37:09 -07:00
Armin Kuster
fe0e799624 sssd: Add basic runtime test
This does some basic testing and checks.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-29 08:28:49 -07:00