SSPROD-2725: fix policy v2 tests (#110)

Author: Andrew Wroblicky

test/test_secure_apis.sh

@@ -37,101 +37,103 @@ $SCRIPTDIR/../examples/set_secure_user_falco_rules.py $PYTHON_SDC_TEST_API_TOKEN
 $SCRIPTDIR/../examples/get_secure_user_falco_rules.py $PYTHON_SDC_TEST_API_TOKEN > /tmp/falco_rules.yaml
 diff /tmp/falco_rules.yaml /tmp/test_apis_user_rules.yaml
 
-# Temporarily disabled while the Secure API is being reviewed
-# # Delete all policies and then get them. There should be none.
-# $SCRIPTDIR/../examples/delete_all_policies.py $PYTHON_SDC_TEST_API_TOKEN
-# OUT=`$SCRIPTDIR/../examples/list_policies.py $PYTHON_SDC_TEST_API_TOKEN`
-# if [[ $OUT != *"[]"* ]]; then
-#     echo "Unexpected output after deleting all policies"
-#     exit 1
-# fi
-
-# # Create the default set of policies and then fetch them. There should
-# # be 1, corresponding to the system falco rule.
-# $SCRIPTDIR/../examples/create_default_policies.py $PYTHON_SDC_TEST_API_TOKEN
-# OUT=`$SCRIPTDIR/../examples/list_policies.py $PYTHON_SDC_TEST_API_TOKEN`
-# if [[ $OUT != *"\"Write below binary dir\""* ]]; then
-#     echo "Unexpected output after creating default policies"
-#     exit 1
-# fi
+
+# Delete all policies and then get them. There should be none.
+$SCRIPTDIR/../examples/delete_all_policies.py $PYTHON_SDC_TEST_API_TOKEN
+OUT=`$SCRIPTDIR/../examples/list_policies.py $PYTHON_SDC_TEST_API_TOKEN`
+if [[ $OUT != *"[]"* ]]; then
+    echo "Unexpected output after deleting all policies"
+    exit 1
+fi
+
+# Create the default set of policies and then fetch them. There should
+# be 1, corresponding to the system falco rule.
+$SCRIPTDIR/../examples/create_default_policies.py $PYTHON_SDC_TEST_API_TOKEN
+OUT=`$SCRIPTDIR/../examples/list_policies.py $PYTHON_SDC_TEST_API_TOKEN`
+if [[ $OUT != *"\"Suspicious Filesystem Changes\""* ]]; then
+    echo "Unexpected output after creating default policies"
+    exit 1
+fi
 
 # Get that policy, change the name, and create a new duplicate policy.
-OUT=`$SCRIPTDIR/../examples/get_policy.py $PYTHON_SDC_TEST_API_TOKEN "Write below binary dir"`
+OUT=`$SCRIPTDIR/../examples/get_policy.py $PYTHON_SDC_TEST_API_TOKEN "Suspicious Filesystem Changes"`
 MY_POLICY=$OUT
-if [[ $OUT != *"\"Write below binary dir\""* ]]; then
-    echo "Could not fetch policy with name \"Write below binary dir\""
+if [[ $OUT != *"\"Suspicious Filesystem Changes\""* ]]; then
+    echo "Could not fetch policy with name \"Suspicious Filesystem Changes\""
     exit 1
 fi
 
-NEW_POLICY=`echo $MY_POLICY | sed -e "s/Write below binary dir/Write below etc/g" | sed -e 's/"id": [0-9]*,//' | sed -e 's/"version": [0-9]*/"version": null/'`
+NEW_POLICY=`echo $MY_POLICY | sed -e "s/Suspicious Filesystem Changes/Suspicious Filesystem Changes 2/g" | sed -e 's/"id": [0-9]*,//' | sed -e 's/"version": [0-9]*/"version": null/'`
 OUT=`echo $NEW_POLICY | $SCRIPTDIR/../examples/add_policy.py $PYTHON_SDC_TEST_API_TOKEN`
-if [[ $OUT != *"\"Write below etc\""* ]]; then
+if [[ $OUT != *"\"Suspicious Filesystem Changes 2\""* ]]; then
     echo "Could not create new policy"
     exit 1
 fi
 
 # Change the description of the new policy and update it.
-MODIFIED_POLICY=`echo $MY_POLICY | sed -e "s/an attempt to write to any file below a set of binary directories/My New Description/g"`
+ID=`echo $OUT | grep -E -o '"id": [^,]+,' | awk '{print $2}' | awk -F, '{print $1}'`
+MODIFIED_POLICY=`echo $MY_POLICY | sed -e "s/Suspicious Filesystem Changes/Suspicious Filesystem Changes 2/g" | sed -e "s,Identified suspicious filesystem activity that might change sensitive/important files,My New Description,g" | sed -e "s/\"id\": [0-9]*,/\"id\": $ID,/"`
 OUT=`echo $MODIFIED_POLICY | $SCRIPTDIR/../examples/update_policy.py $PYTHON_SDC_TEST_API_TOKEN`
 if [[ $OUT != *"\"description\": \"My New Description\""* ]]; then
-    echo "Could not update policy \"Copy Of Write below binary dir\""
+    echo "Could not update policy \"Suspicious Filesystem Changes 2\""
     exit 1
 fi
 
 # Delete the new policy.
-OUT=`$SCRIPTDIR/../examples/delete_policy.py --name "Copy Of Write below binary dir" $PYTHON_SDC_TEST_API_TOKEN`
-if [[ $OUT != *"\"Copy Of Write below binary dir\""* ]]; then
-    echo "Could not delete policy \"Copy Of Write below binary dir\""
+OUT=`$SCRIPTDIR/../examples/delete_policy.py --name "Suspicious Filesystem Changes 2" $PYTHON_SDC_TEST_API_TOKEN`
+if [[ $OUT != *"\"Suspicious Filesystem Changes 2\""* ]]; then
+    echo "Could not delete policy \"Suspicious Filesystem Changes 2\""
     exit 1
 fi
 
 OUT=`$SCRIPTDIR/../examples/list_policies.py $PYTHON_SDC_TEST_API_TOKEN`
-if [[ $OUT = *"\"Copy Of Write below binary dir\""* ]]; then
-    echo "After deleting policy Copy Of Write below binary dir, policy was still present?"
+if [[ $OUT = *"\"Suspicious Filesystem Changes 2\""* ]]; then
+    echo "After deleting policy Suspicious Filesystem Changes 2, policy was still present?"
     exit 1
 fi
 
 # Make a copy again, but this time delete by id
-NEW_POLICY=`echo $MY_POLICY | sed -e "s/Write below binary dir/Another Copy Of Write below binary dir/g" | sed -e 's/"id": [0-9]*,//' | sed -e 's/"version": [0-9]*/"version": null/'`
+NEW_POLICY=`echo $MY_POLICY | sed -e "s/Suspicious Filesystem Changes/Another Copy Of Suspicious Filesystem Changes/g" | sed -e 's/"id": [0-9]*,//' | sed -e 's/"version": [0-9]*/"version": null/'`
 OUT=`echo $NEW_POLICY | $SCRIPTDIR/../examples/add_policy.py $PYTHON_SDC_TEST_API_TOKEN`
-if [[ $OUT != *"\"Another Copy Of Write below binary dir\""* ]]; then
+if [[ $OUT != *"\"Another Copy Of Suspicious Filesystem Changes\""* ]]; then
     echo "Could not create new policy"
     exit 1
 fi
 
 ID=`echo $OUT | grep -E -o '"id": [^,]+,' | awk '{print $2}' | awk -F, '{print $1}'`
 
 OUT=`$SCRIPTDIR/../examples/delete_policy.py --id $ID $PYTHON_SDC_TEST_API_TOKEN`
-if [[ $OUT != *"\"Another Copy Of Write below binary dir\""* ]]; then
-    echo "Could not delete policy \"Copy Of Write below binary dir\""
+if [[ $OUT != *"\"Another Copy Of Suspicious Filesystem Changes\""* ]]; then
+    echo "Could not delete policy \"Another Copy Of Suspicious Filesystem Changes\""
     exit 1
 fi
 
 OUT=`$SCRIPTDIR/../examples/list_policies.py $PYTHON_SDC_TEST_API_TOKEN`
 if [[ $OUT = *"\"Another Copy Of Write below binary dir\""* ]]; then
-    echo "After deleting policy Another Copy Of Write below binary dir, policy was still present?"
+    echo "After deleting policy Another Copy Of Suspicious Filesystem Changes, policy was still present?"
     exit 1
 fi
 
 # Trigger some events
-FOUND=0
+# should be able to uncomment after SSPROD-2580 is addressed
+#FOUND=0
 
-for i in $(seq 10); do
-    sudo touch /bin/some-file.txt
-    sleep 10
+#for i in $(seq 10); do
+#    sudo cat /etc/shadow
+#    sleep 10
 
-    EVTS=`$SCRIPTDIR/../examples/get_secure_policy_events.py $PYTHON_SDC_TEST_API_TOKEN 60`
+#    EVTS=`$SCRIPTDIR/../examples/get_secure_policy_events.py $PYTHON_SDC_TEST_API_TOKEN 60`
 
-    if [[ "$EVTS" != "" ]]; then
-       FOUND=1
-       break;
-    fi
-done
+#    if [[ "$EVTS" != "" ]]; then
+#       FOUND=1
+#       break;
+#    fi
+#done
 
-if [[ $FOUND == 0 ]]; then
-   echo "Did not find any policy events after 10 attempts..."
-   exit 1
-fi
+#if [[ $FOUND == 0 ]]; then
+#   echo "Did not find any policy events after 10 attempts..."
+#   exit 1
+#fi
 
 
 #