mirror of
https://github.com/falcosecurity/falco.git
synced 2025-10-21 19:44:57 +00:00
450c347ef3
Add a basic test that loads the kernel module from the source directory and runs falco. No testing of behavior yet.
31 lines
714 B
Bash
Executable File
31 lines
714 B
Bash
Executable File
#!/bin/bash
|
|
set -eu
|
|
|
|
SCRIPT=$(readlink -f $0)
|
|
BASEDIR=$(dirname $SCRIPT)
|
|
|
|
FALCO=$1
|
|
BUILDDIR=$(dirname $FALCO)
|
|
|
|
# Load the built kernel module by hand
|
|
insmod $BUILDDIR/../../driver/sysdig-probe.ko
|
|
|
|
# For now, simply ensure that falco can run without errors.
|
|
FALCO_CMDLINE="$FALCO -c $BASEDIR/../falco.yaml -r $BASEDIR/../rules/falco_rules.yaml"
|
|
echo "Running falco: $FALCO_CMDLINE"
|
|
$FALCO_CMDLINE > $BASEDIR/falco.log 2>&1 &
|
|
FALCO_PID=$!
|
|
echo "Falco started, pid $FALCO_PID"
|
|
sleep 10
|
|
if kill -0 $FALCO_PID > /dev/null 2>&1; then
|
|
echo "Falco ran successfully"
|
|
kill $FALCO_PID
|
|
ret=0
|
|
else
|
|
echo "Falco did not start successfully. Full program output:"
|
|
cat $BASEDIR/falco.log
|
|
ret=1
|
|
fi
|
|
|
|
exit $ret
|