diff --git a/test/confs/program_output.yaml b/test/confs/program_output.yaml index 24bd96a8..47584dd5 100644 --- a/test/confs/program_output.yaml +++ b/test/confs/program_output.yaml @@ -41,4 +41,4 @@ stdout_output: program_output: enabled: true - program: cat > /tmp/falco_outputs/program_output.txt + program: cat >> /tmp/falco_outputs/program_output.txt diff --git a/test/falco_tests.yaml b/test/falco_tests.yaml index 5743fe20..b6550487 100644 --- a/test/falco_tests.yaml +++ b/test/falco_tests.yaml @@ -652,25 +652,35 @@ trace_files: !mux trace_file: trace_files/cat_write.scap stdout_contains: "Warning An open was seen .cport= command=cat /dev/null." - file_output: + stdout_output_strict: + detect: True + detect_level: WARNING + rules_file: + - rules/single_rule.yaml + conf_file: confs/file_stdout.yaml + trace_file: trace_files/cat_write.scap + output_strictly_contains: + - stdout: output_files/single_rule_with_cat_write.txt + + file_output_strict: detect: True detect_level: WARNING rules_file: - rules/single_rule.yaml conf_file: confs/file_output.yaml trace_file: trace_files/cat_write.scap - outputs: - - /tmp/falco_outputs/file_output.txt: Warning An open was seen + output_strictly_contains: + - /tmp/falco_outputs/file_output.txt: output_files/single_rule_with_cat_write.txt - program_output: + program_output_strict: detect: True detect_level: WARNING rules_file: - rules/single_rule.yaml conf_file: confs/program_output.yaml trace_file: trace_files/cat_write.scap - outputs: - - /tmp/falco_outputs/program_output.txt: Warning An open was seen + output_strictly_contains: + - /tmp/falco_outputs/program_output.txt: output_files/single_rule_with_cat_write.txt grpc_unix_socket_outputs: detect: True @@ -688,16 +698,6 @@ trace_files: !mux results: - "Warning An open was seen" - stdout_output_strict: - detect: True - detect_level: WARNING - rules_file: - - rules/single_rule.yaml - conf_file: confs/file_stdout.yaml - trace_file: trace_files/cat_write.scap - output_strictly_contains: - - stdout: output_files/single_rule_with_cat_write.txt - detect_counts: detect: True detect_level: WARNING